Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/InHymXKLX1Q9hzzj5om_v0p1ddo.roa
File: InHymXKLX1Q9hzzj5om_v0p1ddo.roa (raw, json)
Hash identifier: F2wdkxcm/M7gMue141W5eLbNpnewllp4xRc9AV7HwyQ=
Subject key identifier: 22:71:F2:99:72:8B:5F:54:3D:87:3C:E3:E6:89:BF:BF:4A:75:75:DA
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 0185723A34E9738D062F7D2DB82FDCF8A003
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/InHymXKLX1Q9hzzj5om_v0p1ddo.roa
Signing time: Mon 02 Jan 2023 11:24:55 +0000
ROA not before: Mon 02 Jan 2023 11:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47628
IP address blocks: 91.224.54.0/24 maxlen: 24
91.224.55.0/24 maxlen: 24
185.57.140.0/24 maxlen: 24
185.57.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:34:e9:73:8d:06:2f:7d:2d:b8:2f:dc:f8:a0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Jan 2 11:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2271f299728b5f543d873ce3e689bfbf4a7575da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8c:ff:2f:c1:86:b5:7e:eb:ee:12:e2:5c:28:
f5:c8:75:12:3c:6e:78:27:18:bc:4d:74:0e:34:29:
95:7f:bb:53:67:91:9d:5a:a7:eb:dd:2c:fe:c2:08:
95:e1:11:3c:7b:f9:f8:53:60:bb:6d:08:be:fa:15:
9f:7d:7f:c2:32:30:7c:05:1a:fa:6a:7d:29:6e:f9:
66:2b:16:c6:2a:0c:6e:3e:ca:94:2f:d2:07:2c:73:
24:1c:a8:f7:45:c6:2e:2e:d7:1b:7c:11:52:ae:09:
3c:14:2b:97:1f:33:94:88:fa:d9:8f:33:33:56:68:
bb:44:ad:b5:af:17:49:c1:76:9f:f0:56:11:ad:2e:
aa:f4:f7:5b:31:4a:9d:f0:54:1b:e9:e5:17:9d:62:
46:01:fa:00:aa:89:b4:3e:46:fd:96:a3:1b:7c:11:
d5:a4:6d:f4:5a:01:ce:56:a5:64:9a:5f:2a:75:09:
ab:ec:ed:2a:66:78:99:9f:fb:df:e3:17:5e:4a:b0:
21:08:ed:9d:7b:6e:ed:89:93:f9:f9:7a:08:ab:89:
2a:a0:6f:59:21:46:85:ab:f4:f1:ea:cf:d8:30:0e:
24:83:ee:fc:cb:4b:25:d5:da:0b:77:fa:2b:b4:d5:
cc:45:53:6c:02:4d:44:ed:3b:43:83:05:a4:24:66:
50:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:71:F2:99:72:8B:5F:54:3D:87:3C:E3:E6:89:BF:BF:4A:75:75:DA
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/InHymXKLX1Q9hzzj5om_v0p1ddo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.54.0/23
185.57.140.0/23
Signature Algorithm: sha256WithRSAEncryption
28:4d:76:a2:9b:cb:79:14:48:7c:61:d1:ae:e3:1c:1f:5c:55:
e8:56:d8:62:60:0d:9e:ca:1a:0f:22:6b:04:e6:1c:91:7a:34:
4d:1f:00:49:ca:57:51:13:c3:26:37:3e:47:c2:b4:41:93:7a:
38:78:8e:6c:3f:21:d2:40:a8:7d:53:aa:47:7c:d8:e5:af:fc:
71:55:45:a6:bc:b8:e2:9f:f3:55:cf:85:d1:2d:1d:63:c9:f9:
af:f5:2a:94:ba:ce:37:b1:de:61:fc:81:88:3b:03:a1:fc:39:
5b:66:56:fc:62:8d:40:ec:04:10:e7:9c:90:b8:b0:db:2a:a4:
67:3d:d4:2b:77:37:e2:e0:c9:08:70:29:d2:fb:d8:83:c5:37:
1b:ba:c1:99:0e:45:41:40:05:0e:8b:80:3a:1f:c4:a1:14:e1:
da:71:b1:4c:64:ce:34:73:b5:8a:9b:ec:ad:9f:21:8f:17:3f:
ea:07:54:23:8c:6b:1b:29:06:94:76:f8:17:7c:3e:26:55:3a:
dc:15:4d:75:8e:28:f4:04:00:f3:33:cb:28:ac:a6:52:ec:f4:
04:3b:ad:f0:36:4d:42:18:8f:fe:d5:7d:9e:92:60:5d:16:e9:
60:f5:2b:7f:00:b3:00:de:57:53:35:98:54:0e:6b:4b:c7:91:
05:f7:38:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:51 2024 by rpki-client on console-ams.rpki-client.org