Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/WavGsaX3Gc4j7a8RxtOLfGQ2ers.roa
File: WavGsaX3Gc4j7a8RxtOLfGQ2ers.roa (raw, json)
Hash identifier: F6q3pb2aTs1VUaawzC51EdutIi9XItVQABvvyY4Og84=
Subject key identifier: 59:AB:C6:B1:A5:F7:19:CE:23:ED:AF:11:C6:D3:8B:7C:64:36:7A:BB
Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Certificate serial: 01877364A5EEBD635D7C02C501FDB8977E64
Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/WavGsaX3Gc4j7a8RxtOLfGQ2ers.roa
Signing time: Wed 12 Apr 2023 02:56:28 +0000
ROA not before: Wed 12 Apr 2023 02:56:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15440
IP address blocks: 91.188.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:73:64:a5:ee:bd:63:5d:7c:02:c5:01:fd:b8:97:7e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Validity
Not Before: Apr 12 02:56:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59abc6b1a5f719ce23edaf11c6d38b7c64367abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:51:3d:d1:d2:9e:53:ea:4e:b9:63:dc:44:cb:
8f:a3:5f:01:67:da:d4:3b:9b:c8:9e:53:43:0b:a9:
bd:7d:72:6a:79:4f:49:2f:ec:8d:bd:eb:67:6b:76:
29:b8:7f:e6:a6:17:33:1b:f2:60:1a:55:1d:78:ca:
78:e1:92:6e:72:c7:dd:95:6d:da:eb:94:f8:73:d8:
e6:ab:6e:e0:e9:ce:7b:6a:6a:0c:ad:ff:e2:32:ef:
c8:4a:27:01:3d:e2:72:72:d4:25:cb:fb:74:77:c8:
13:f4:1e:fa:18:9b:3b:cd:87:0e:6a:34:32:89:56:
65:12:37:b3:6a:89:9d:43:d5:e5:b3:31:a5:90:5b:
1b:38:2d:4c:f5:fc:04:11:d6:f2:3a:77:36:a0:d7:
cb:52:03:09:fd:d3:46:a7:0c:0f:fc:15:78:45:49:
a2:1d:f9:88:17:e9:a9:57:be:f7:ef:9f:58:5a:b4:
20:09:16:4e:9a:ce:44:ea:cd:a1:5f:9d:6b:73:6b:
31:80:26:90:08:2d:59:ea:b7:20:09:d1:a2:00:c6:
d4:39:1b:3f:f1:e8:8e:ca:b5:c8:e3:42:d9:02:79:
93:26:3a:39:1e:6e:9f:65:56:92:f4:a9:05:41:de:
1b:29:8f:f7:9e:c1:57:9a:db:b3:66:7e:59:e0:87:
8a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AB:C6:B1:A5:F7:19:CE:23:ED:AF:11:C6:D3:8B:7C:64:36:7A:BB
X509v3 Authority Key Identifier:
keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/WavGsaX3Gc4j7a8RxtOLfGQ2ers.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:87:90:5b:25:ac:b7:8d:55:f0:9e:8d:d2:bc:d7:27:b1:7a:
82:2a:36:a4:be:af:d9:09:ab:6e:8b:bf:3b:ee:a8:7b:e7:41:
dd:84:ac:a6:87:8c:d8:0a:61:33:f1:d3:5e:b0:e0:0a:bc:88:
cc:6a:4a:ec:98:d4:56:26:6d:29:ac:fc:6c:8e:99:94:58:f8:
19:ef:0c:e3:34:a0:de:10:ee:fb:4f:e6:de:79:75:6e:99:b5:
3a:28:1f:58:75:09:30:d9:fd:6c:c0:19:b6:91:bf:e6:58:0c:
61:bd:b3:79:ec:ad:20:b0:c1:b8:eb:a9:5a:e2:d8:80:59:99:
22:f2:24:9c:08:20:85:02:bb:95:ee:1f:1f:16:f9:65:c2:f1:
68:52:38:34:88:d9:45:cc:18:05:02:ae:3f:58:eb:ba:87:48:
27:d6:5e:30:7b:ff:93:76:58:c9:7d:55:7f:1e:25:03:c5:40:
06:96:3c:1a:91:33:ef:8f:7b:a9:34:b7:63:c8:82:ee:b7:a0:
fc:26:3e:e2:fe:d1:d6:49:1a:31:57:91:d5:84:9e:7e:af:51:
3b:83:27:33:d4:f9:c6:74:97:f4:4f:6c:d9:37:df:05:52:a7:
42:89:09:4f:ab:11:ed:7f:95:5c:23:53:a4:01:58:f0:46:b6:
d2:74:55:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:37 2024 by rpki-client on console-ams.rpki-client.org