Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/mW5_hS2D7nbFYTAyeJmILYWustQ.roa
File: mW5_hS2D7nbFYTAyeJmILYWustQ.roa (raw, json)
Hash identifier: B6IOYPY24ElKCoFz1ARDjV1Ad5DtA92/c7QxPIYrScY=
Subject key identifier: 99:6E:7F:85:2D:83:EE:76:C5:61:30:32:78:99:88:2D:85:AE:B2:D4
Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Certificate serial: 0187FE71E491AC7B257CF8D31FD9DA9E4EE5
Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/mW5_hS2D7nbFYTAyeJmILYWustQ.roa
Signing time: Tue 09 May 2023 02:58:09 +0000
ROA not before: Tue 09 May 2023 02:58:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6939
IP address blocks: 91.188.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Nov 2023 12:36:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fe:71:e4:91:ac:7b:25:7c:f8:d3:1f:d9:da:9e:4e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Validity
Not Before: May 9 02:58:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=996e7f852d83ee76c56130327899882d85aeb2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:de:c1:03:eb:af:9b:70:23:d2:eb:83:d4:05:
eb:a8:5e:be:49:8b:da:58:a1:89:c6:2f:cd:3c:a8:
f3:58:28:79:cb:0b:25:d7:26:b6:e2:93:da:64:24:
ca:f9:e8:29:ba:fd:ec:b1:57:b3:c6:0c:20:aa:15:
ae:a5:45:cb:d4:fa:1d:93:09:6d:43:4d:57:41:26:
1b:d3:e7:66:31:c6:69:2e:8d:87:b1:f7:52:7f:1a:
76:2b:a0:da:a1:59:c4:51:51:7e:55:af:cc:b8:16:
57:bc:f2:8f:eb:5c:f5:c7:11:7d:30:e4:e2:75:19:
3c:ff:98:5e:26:fa:0c:0d:a5:43:d9:37:7c:fd:5d:
e9:2b:0c:d4:69:8d:ae:aa:f4:f0:2d:6c:ca:af:78:
74:10:bf:6c:6e:39:16:9b:fa:68:d1:11:83:d3:6e:
83:5d:f0:e0:56:d0:c5:15:28:cb:c5:4d:a6:3f:a1:
0a:ca:fb:cb:7c:a4:7e:10:3b:f6:6b:3a:c3:2e:c1:
af:84:3c:8c:74:5d:9e:d7:50:5a:81:98:e0:5d:4f:
b6:67:a4:bc:3a:a8:85:7f:77:51:63:7f:e0:e8:c3:
62:da:d4:4c:af:43:bd:af:9f:7b:5a:85:60:27:67:
bc:5b:cc:3d:83:e4:2e:fb:eb:18:b9:34:e2:51:83:
39:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6E:7F:85:2D:83:EE:76:C5:61:30:32:78:99:88:2D:85:AE:B2:D4
X509v3 Authority Key Identifier:
keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/mW5_hS2D7nbFYTAyeJmILYWustQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.252.0/24
Signature Algorithm: sha256WithRSAEncryption
29:cb:e2:9f:8b:d6:d6:5e:82:10:0e:1c:c7:3f:48:53:fa:a1:
b5:5e:36:f6:b5:1a:2b:e7:a9:21:bb:2a:e6:21:84:34:fb:ab:
e5:92:09:ad:89:35:c3:6b:13:5b:2d:5c:fb:0f:6d:0b:33:22:
e3:09:41:e0:1e:77:58:3c:56:3d:14:a5:88:2a:7d:2f:bc:30:
fa:2f:97:98:af:75:63:3c:51:1b:ec:16:04:86:10:8b:93:03:
f5:52:63:2a:53:d2:04:4e:30:c0:b0:42:d2:e9:6f:3e:c8:26:
b3:64:a2:cd:56:01:81:32:83:d6:5f:3c:63:14:77:ad:34:cb:
e7:18:2e:6c:26:41:7d:d0:90:aa:3f:95:0c:45:fa:e2:23:c4:
3d:24:7b:8c:5b:80:db:49:59:ed:8c:eb:c1:20:29:0c:93:d8:
1e:f5:3d:19:58:26:39:d7:9d:02:8c:19:b6:61:70:fa:1f:68:
84:32:f3:c0:4e:1f:93:2b:64:26:e4:52:6c:10:1a:91:85:28:
a9:e2:fd:f0:04:4f:d9:95:c0:7b:45:50:62:6d:87:e0:4f:12:
bb:ec:82:17:5a:95:ba:b2:e5:96:d6:c5:6d:14:66:04:70:5f:
a2:a7:a4:79:cf:1d:ab:e2:23:66:64:d5:46:f9:4e:fd:52:b0:
8b:81:6a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:37 2024 by rpki-client on console-ams.rpki-client.org