Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/xfIUi_1Qwu0hZRIM-NOlUYjyCYc.roa
File: xfIUi_1Qwu0hZRIM-NOlUYjyCYc.roa (raw, json)
Hash identifier: +SLxGcZ5iCvOLLj8/IQsVha68patK1LgfpVLFERVWZM=
Subject key identifier: C5:F2:14:8B:FD:50:C2:ED:21:65:12:0C:F8:D3:A5:51:88:F2:09:87
Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Certificate serial: 018C933DECD9FC82DAE76F3C2C0C66473A7B
Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/xfIUi_1Qwu0hZRIM-NOlUYjyCYc.roa
Signing time: Fri 22 Dec 2023 20:35:58 +0000
ROA not before: Fri 22 Dec 2023 20:35:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 91.188.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:93:3d:ec:d9:fc:82:da:e7:6f:3c:2c:0c:66:47:3a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Validity
Not Before: Dec 22 20:35:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5f2148bfd50c2ed2165120cf8d3a55188f20987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0d:81:8d:62:f1:c6:04:88:60:c6:02:dd:ba:
c9:3e:a4:f4:50:e7:9c:5f:49:fc:9b:11:8b:99:41:
61:a7:c3:46:5f:dc:e8:c4:50:63:21:6a:84:6b:ad:
d0:82:2b:22:69:ef:3b:90:51:1b:6c:ed:03:6e:c8:
46:c8:8a:ea:53:0b:65:dd:81:4e:83:da:42:5c:da:
65:0a:f5:76:86:4e:29:da:77:7e:0b:21:4f:d7:03:
dd:8b:01:a6:2d:97:f1:4d:f0:c7:aa:72:fd:d0:ab:
f7:f1:a3:38:09:30:7d:91:df:d5:ab:16:1d:b8:ab:
d3:ef:10:62:cd:3e:ac:40:37:de:9b:dc:c3:49:d8:
5f:99:5e:41:e9:51:54:4b:fc:7c:42:5c:c0:10:05:
0d:09:cf:81:27:91:05:ba:a2:72:fe:87:6c:0d:70:
2f:72:da:14:7b:ef:3c:e1:b2:f6:1d:46:3f:3a:d6:
31:d2:22:54:b9:51:dc:df:ec:a2:50:78:85:49:4e:
8b:a1:c7:f9:cb:53:35:3e:a4:23:61:eb:96:7d:b9:
69:34:b8:e9:ed:e9:b8:87:63:90:17:41:0b:af:89:
c1:ff:83:82:4e:40:ea:64:fa:32:d6:a3:17:de:54:
03:25:22:fc:5d:d7:40:c3:00:5e:ff:9b:a7:70:0c:
bc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F2:14:8B:FD:50:C2:ED:21:65:12:0C:F8:D3:A5:51:88:F2:09:87
X509v3 Authority Key Identifier:
keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/xfIUi_1Qwu0hZRIM-NOlUYjyCYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.252.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b9:ce:b2:ca:67:9e:a2:e0:3c:c5:0e:3e:52:c8:cb:ef:0f:
9a:63:ae:1a:6d:0c:b3:71:19:a0:4a:10:05:7a:fb:35:43:e8:
78:4b:c8:7f:99:9f:09:1b:68:47:3c:fc:fe:b1:cf:25:8a:21:
f5:34:8e:a8:69:97:f1:22:60:7f:e3:21:e8:57:d9:0e:e0:1f:
bc:8a:3c:82:86:05:4d:b4:54:d8:45:ed:5e:12:4f:69:b6:4f:
45:6e:3e:e0:04:9a:84:4e:b3:c0:a3:07:16:00:63:4d:79:ca:
f8:92:9f:5b:81:22:27:df:ab:eb:cf:79:5b:df:71:79:03:7e:
17:90:92:77:ef:89:f7:d1:42:e3:23:c1:cc:d5:f2:b9:53:24:
5b:30:64:f6:4f:80:31:36:27:1d:e3:47:fd:97:35:bd:6a:73:
b8:4c:a4:ca:18:60:cd:7f:b5:56:9d:be:c6:b6:42:d9:d4:1e:
88:e1:72:85:3d:ec:9f:6d:23:0a:89:dc:cd:1b:86:1c:0a:e2:
1b:ef:01:b0:62:80:a6:58:dc:06:ec:4b:8c:31:93:b3:3d:ee:
8f:22:d4:dc:eb:15:0e:5c:e4:fa:a6:3b:8b:89:72:93:49:89:
27:7f:58:cc:7a:f2:eb:43:2f:36:e5:95:b8:7d:a3:7e:7f:fc:
8d:d0:43:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:13 2024 by rpki-client on console-fra.rpki-client.org