Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7e8b78-512a-439d-8ef5-c1255a91eb06/1/zHTfyC39-aCU12wKZLRR1HsU2pw.roa
File: zHTfyC39-aCU12wKZLRR1HsU2pw.roa (raw, json)
Hash identifier: iOcsB4lnmgGAyP82mRXgZuafuP9as/+YsRghMBQuz24=
Subject key identifier: CC:74:DF:C8:2D:FD:F9:A0:94:D7:6C:0A:64:B4:51:D4:7B:14:DA:9C
Certificate issuer: /CN=2fb7a2b85c28abcc9a02c672b43454a158866485
Certificate serial: 0187F099D235C392C7721A2C6B45193EE5B2
Authority key identifier: 2F:B7:A2:B8:5C:28:AB:CC:9A:02:C6:72:B4:34:54:A1:58:86:64:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7eiuFwoq8yaAsZytDRUoViGZIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7e8b78-512a-439d-8ef5-c1255a91eb06/1/zHTfyC39-aCU12wKZLRR1HsU2pw.roa
Signing time: Sat 06 May 2023 10:27:05 +0000
ROA not before: Sat 06 May 2023 10:27:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201933
IP address blocks: 91.193.116.0/22 maxlen: 22
91.193.118.0/24 maxlen: 24
2a06:40c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f0:99:d2:35:c3:92:c7:72:1a:2c:6b:45:19:3e:e5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb7a2b85c28abcc9a02c672b43454a158866485
Validity
Not Before: May 6 10:27:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc74dfc82dfdf9a094d76c0a64b451d47b14da9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4c:4b:47:2f:39:c3:ab:8f:6f:68:d6:ff:6b:
25:81:67:97:19:29:5f:7f:82:db:3b:82:69:04:a5:
94:e4:d9:cc:f1:3a:a5:57:48:90:d1:0f:c2:18:79:
49:8f:80:f2:cc:c3:57:4e:f7:2f:39:0d:d2:ea:ab:
14:ea:4d:b8:a0:6d:e1:0a:9e:5b:8c:64:ad:87:c3:
2e:79:e0:2d:8a:18:33:3e:e1:a4:dc:84:9e:ce:11:
08:bd:cb:dc:13:26:66:fa:2e:6a:f9:c8:cd:ed:2a:
a6:fd:f0:e3:79:ca:e8:95:46:e8:5a:61:40:66:90:
39:35:3c:7d:01:0d:be:38:e6:30:4f:41:f2:cf:02:
f1:ff:26:19:f7:51:7b:34:84:cf:05:13:f2:8c:da:
c9:23:e6:06:d2:03:32:72:a9:cc:30:0e:a5:fa:82:
68:2c:0c:2a:b9:d3:f4:69:2d:c0:3a:c9:50:7e:ef:
ec:b5:a9:08:04:d4:ab:74:6f:88:fe:d7:3b:26:db:
15:a9:38:03:7e:a9:43:12:cd:41:0f:3f:1f:77:48:
95:22:ba:fd:ac:6a:6f:6e:6d:be:d7:6b:86:78:12:
7c:1a:1b:94:de:88:c5:3c:80:a9:07:16:6f:91:d8:
de:88:c7:7e:b5:46:c2:00:16:60:df:a2:91:2e:e0:
3b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:74:DF:C8:2D:FD:F9:A0:94:D7:6C:0A:64:B4:51:D4:7B:14:DA:9C
X509v3 Authority Key Identifier:
keyid:2F:B7:A2:B8:5C:28:AB:CC:9A:02:C6:72:B4:34:54:A1:58:86:64:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7eiuFwoq8yaAsZytDRUoViGZIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7e8b78-512a-439d-8ef5-c1255a91eb06/1/zHTfyC39-aCU12wKZLRR1HsU2pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7e8b78-512a-439d-8ef5-c1255a91eb06/1/L7eiuFwoq8yaAsZytDRUoViGZIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.116.0/22
IPv6:
2a06:40c0::/29
Signature Algorithm: sha256WithRSAEncryption
c3:f5:cb:4a:e4:3c:08:16:48:d5:c1:2b:8a:2b:84:e6:f5:da:
2b:f4:8d:e3:8c:61:27:e0:58:22:50:5b:1d:6e:67:4f:63:73:
c5:62:49:27:58:4c:93:68:c8:67:39:e1:a8:f3:c9:34:b0:1c:
4d:94:3d:44:18:56:4a:ea:d3:da:6c:f7:2c:d2:e2:31:2f:19:
75:5d:59:a8:14:77:da:c4:f8:7a:3e:0f:9a:ce:00:08:d4:3b:
4d:2d:71:2b:4e:9b:65:16:d2:99:d8:c8:3f:60:56:18:06:3c:
7e:72:96:b4:03:86:41:89:f6:07:0f:7f:3a:4d:ad:bb:f1:0d:
e9:95:c0:49:53:c8:a4:ba:85:a3:96:50:d1:44:12:a0:b8:32:
9e:fa:e3:e7:29:d7:ee:48:f2:4a:0f:bb:50:7d:77:80:8b:25:
4f:4c:25:ad:85:79:74:4f:4a:39:04:52:46:25:8f:2a:9e:7b:
26:15:ec:3d:dd:d9:3b:74:8e:58:7d:19:7b:68:6c:cc:5f:0b:
e0:7a:47:79:9f:25:67:99:76:eb:0e:45:76:ca:b3:83:40:d9:
39:5e:da:e7:92:83:a0:3d:6f:e5:61:1f:4a:94:31:f2:d7:45:
2b:5a:1f:35:97:91:f2:08:db:c4:0e:7b:37:fe:99:3f:e3:d5:
b7:42:92:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:49 2024 by rpki-client on console-fra.rpki-client.org