Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/45B9ev2_cbJjeQqOoFWGQd-QCx0.roa
File: 45B9ev2_cbJjeQqOoFWGQd-QCx0.roa (raw, json)
Hash identifier: gXPCtCWDVt0s5Wo0aGMhsLxVgHnkPtsySjDnGXN62GM=
Subject key identifier: E3:90:7D:7A:FD:BF:71:B2:63:79:0A:8E:A0:55:86:41:DF:90:0B:1D
Certificate issuer: /CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Certificate serial: 018570DE2F28712307C0F6E4A066B0B6F23A
Authority key identifier: 8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/45B9ev2_cbJjeQqOoFWGQd-QCx0.roa
Signing time: Mon 02 Jan 2023 05:04:47 +0000
ROA not before: Mon 02 Jan 2023 05:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47545
IP address blocks: 91.208.22.0/24 maxlen: 24
2001:67c:2114::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:2f:28:71:23:07:c0:f6:e4:a0:66:b0:b6:f2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Validity
Not Before: Jan 2 05:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3907d7afdbf71b263790a8ea0558641df900b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:df:d6:0a:2b:09:80:a5:fb:da:fc:5f:6e:65:
61:59:1d:03:dc:6f:83:72:3b:12:bd:c7:f3:bf:29:
9e:70:69:fb:86:6d:ea:62:65:35:21:93:98:88:7c:
d2:da:11:65:45:fb:0d:aa:ba:14:31:ed:53:71:be:
5d:a4:73:9e:32:91:21:ba:59:6e:8b:34:80:8f:d3:
22:96:3c:88:54:94:28:6d:2d:b3:9b:7f:b8:f6:b3:
31:b2:8b:44:49:c0:fe:90:22:17:ca:ec:2c:a0:8a:
06:43:26:cf:67:b9:f8:bf:cd:5a:56:7d:51:f3:a6:
a4:30:db:b1:c1:69:28:34:96:9e:56:c5:76:6b:85:
d9:39:04:a6:5b:b7:39:be:72:e5:30:6c:85:31:71:
67:16:d3:ce:c3:a3:42:c7:ed:24:9e:05:10:ec:b8:
cc:1a:6d:67:db:9c:a9:1c:78:6d:2a:d1:1a:07:c1:
43:d7:fa:61:ce:43:56:6a:bb:3c:6d:c4:71:89:70:
e9:57:d6:68:a4:c1:d7:3e:37:f1:39:0e:7e:ad:e7:
9b:24:c8:f8:aa:0c:57:d7:f3:9f:74:2a:5c:f7:c6:
24:73:66:d2:13:52:5d:36:4c:bd:1c:c9:15:20:35:
9c:1f:11:23:b6:53:cb:9d:57:d9:7e:0d:a3:c2:38:
eb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:90:7D:7A:FD:BF:71:B2:63:79:0A:8E:A0:55:86:41:DF:90:0B:1D
X509v3 Authority Key Identifier:
keyid:8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/45B9ev2_cbJjeQqOoFWGQd-QCx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.22.0/24
IPv6:
2001:67c:2114::/48
Signature Algorithm: sha256WithRSAEncryption
99:f9:a4:c3:df:ff:84:e5:fa:ed:a5:81:7b:78:de:f4:d7:a0:
75:ec:32:e0:66:11:58:13:d3:b5:2c:ae:15:ed:bd:e5:45:86:
36:06:77:ed:06:be:2a:ae:9f:b5:ed:2b:80:56:a3:c2:e0:74:
a4:92:e5:f3:31:e6:e4:0f:9c:36:39:19:c1:28:70:e8:dc:e3:
dd:e7:99:96:fc:03:56:b4:62:4a:00:32:46:47:2d:5e:e6:64:
ef:55:d6:d5:15:b1:ed:1b:a0:35:42:9d:38:e9:c9:a2:6a:11:
53:30:f7:2f:25:94:0d:e7:74:06:3b:69:59:6d:06:c1:c1:e8:
24:1f:bf:26:e8:74:db:63:28:a8:c7:2d:88:40:27:97:09:d5:
84:f1:cf:d4:42:ac:f4:9d:70:c8:80:8f:d4:6a:ac:15:12:ee:
fd:1e:23:28:46:e8:01:07:32:43:66:e8:37:29:c6:5d:18:9d:
47:57:44:2c:4e:6a:2c:1f:e6:88:08:c5:0b:a0:69:9b:f6:45:
6b:29:8c:f0:06:ab:28:24:84:37:c2:27:aa:cc:62:5d:ca:d4:
78:fc:8e:22:02:59:87:e5:90:2a:4e:2f:e4:bf:d6:5f:67:21:
87:fe:f2:46:7d:37:3e:b6:e7:5d:fd:76:30:e8:4f:b4:43:f1:
2a:ec:fa:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:12 2024 by rpki-client on console-ams.rpki-client.org