Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/DL7F2iahypjbmVNBR_ewuFrhwXw.roa
File: DL7F2iahypjbmVNBR_ewuFrhwXw.roa (raw, json)
Hash identifier: Tmmlp5CE4kuDOxqnDnb0SEn9wxqbdRJuzg3VkGo6tlg=
Subject key identifier: 0C:BE:C5:DA:26:A1:CA:98:DB:99:53:41:47:F7:B0:B8:5A:E1:C1:7C
Certificate issuer: /CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Certificate serial: 018CC425484906A9E92DE01531731BD6F6A1
Authority key identifier: 29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/DL7F2iahypjbmVNBR_ewuFrhwXw.roa
Signing time: Mon 01 Jan 2024 08:30:26 +0000
ROA not before: Mon 01 Jan 2024 08:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29286
IP address blocks: 185.20.148.0/24 maxlen: 24
91.102.104.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 24 Jan 2024 14:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:48:49:06:a9:e9:2d:e0:15:31:73:1b:d6:f6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Validity
Not Before: Jan 1 08:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cbec5da26a1ca98db99534147f7b0b85ae1c17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:14:8f:99:04:b7:28:00:36:5a:25:eb:8b:18:
99:3d:b9:6f:3f:23:de:25:db:1a:bf:42:5d:d2:cc:
50:e8:e6:ef:61:53:b0:77:92:12:eb:fb:30:74:6b:
46:05:09:96:a3:f4:13:51:0e:06:05:05:1c:b4:24:
15:9d:aa:97:21:09:71:e7:f8:0a:46:41:23:03:94:
cc:23:6f:e2:5c:f5:9f:cf:bb:34:23:e4:fd:6a:0e:
79:a6:fc:2a:f0:e4:c9:2b:a3:d2:05:d0:69:64:c9:
fb:6e:81:95:fc:e0:6a:b8:1e:0d:93:8e:a0:e8:a4:
1e:ef:ca:ed:8f:82:6f:cd:47:18:ea:96:e8:58:09:
35:20:de:c9:a0:b4:b3:b3:50:01:78:86:fc:9f:56:
a2:05:33:9e:07:0c:c0:86:28:cf:00:1b:69:34:d1:
60:cd:f2:dc:48:f1:02:e3:97:d4:47:3c:0e:f1:ed:
f0:ef:7a:49:7b:d1:41:46:ca:0d:31:8e:48:a6:61:
39:af:8b:c5:7f:4c:36:cb:e2:ee:e9:d7:04:fd:8a:
fb:0e:90:ec:66:c7:66:79:dd:a1:6f:86:b8:2c:7c:
48:06:2c:45:69:37:99:d1:79:64:84:d5:21:f9:d2:
73:b5:06:fb:95:2a:02:b6:49:0c:77:38:68:36:0b:
70:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BE:C5:DA:26:A1:CA:98:DB:99:53:41:47:F7:B0:B8:5A:E1:C1:7C
X509v3 Authority Key Identifier:
keyid:29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/DL7F2iahypjbmVNBR_ewuFrhwXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.104.0/21
185.20.148.0/24
Signature Algorithm: sha256WithRSAEncryption
64:7f:f3:c1:83:49:ee:3e:67:65:33:68:6e:af:12:0d:e8:2c:
b2:90:da:d9:52:89:cf:56:58:a0:ca:bb:ec:5f:44:12:96:ad:
b8:c4:47:d3:cf:35:72:bf:d1:d7:b0:b0:3a:e1:4a:68:5a:1b:
0b:dd:37:b1:17:57:40:6e:0f:eb:ce:70:e4:d1:7a:bb:c1:b1:
75:08:7d:4d:24:1b:e0:2a:8c:06:fa:4c:74:4a:9d:d6:96:7b:
31:d1:0a:e5:66:f4:ef:75:c9:8d:cf:a7:95:05:a4:a3:f3:28:
e8:6f:ac:ac:26:6f:55:4a:0d:ce:76:4e:c4:9c:50:6e:b2:07:
51:62:b5:08:bd:67:e4:da:97:3a:a8:b3:24:f5:bf:4f:f0:84:
32:b8:dd:26:83:f5:ed:bf:d0:84:89:5b:06:8b:56:55:09:30:
f0:57:ec:d8:1d:a8:2d:21:6b:eb:60:53:37:ec:8d:48:73:2c:
e0:78:e2:fd:a7:93:77:fd:c8:35:60:14:ea:96:23:d4:30:84:
e7:72:12:5c:c6:30:64:5c:62:10:9f:a2:47:30:16:13:53:66:
0a:02:9c:8c:48:f2:04:ce:d7:42:96:58:20:4f:4e:fe:83:03:
68:41:a0:01:3a:24:6d:6a:11:38:d1:bf:bf:84:65:75:24:fa:
4f:7d:5d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:02 2024 by rpki-client on console-ams.rpki-client.org