Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/5LT6R4aj-Rci_ot4NvwfRzoY-Xw.roa
File: 5LT6R4aj-Rci_ot4NvwfRzoY-Xw.roa (raw, json)
Hash identifier: QFLy1dECVynFckQoyWug+3Ro7pH9uSy+VwWmMyzJo/g=
Subject key identifier: E4:B4:FA:47:86:A3:F9:17:22:FE:8B:78:36:FC:1F:47:3A:18:F9:7C
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 018A8CA09ADD64C19A77F31330AE7E7AD223
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/5LT6R4aj-Rci_ot4NvwfRzoY-Xw.roa
Signing time: Wed 13 Sep 2023 03:40:50 +0000
ROA not before: Wed 13 Sep 2023 03:40:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14445
IP address blocks: 91.237.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8c:a0:9a:dd:64:c1:9a:77:f3:13:30:ae:7e:7a:d2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Sep 13 03:40:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4b4fa4786a3f91722fe8b7836fc1f473a18f97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:32:ea:88:95:ab:71:2a:a4:65:31:3c:80:
9c:65:d4:27:09:58:6f:ca:13:45:bf:e1:b1:dc:90:
91:f0:6a:94:2c:c8:35:0a:00:55:55:cf:5b:e0:88:
c9:bd:70:1a:97:64:f7:83:51:c0:47:96:fa:21:4b:
8f:bf:b9:55:88:3d:96:cb:e3:05:e1:8e:71:a0:c3:
5c:9c:a3:91:7f:60:67:53:78:1c:fa:ad:3c:65:20:
4b:9c:a2:41:b1:5f:27:17:fc:17:bf:95:18:08:96:
d1:3d:7b:f9:75:1e:75:54:6b:7b:54:89:13:06:19:
db:91:fb:d3:c7:b1:63:bd:dd:af:ad:67:4c:23:83:
fa:5e:45:fc:09:97:33:2c:0a:6d:fa:ce:49:1f:5c:
13:03:2c:09:87:76:dc:8d:0b:4b:be:2b:0d:c4:f3:
db:c3:55:ab:70:d5:dc:19:f6:90:22:0c:41:fd:52:
b1:35:7c:64:87:c2:5d:7a:51:59:21:66:fb:65:4f:
f1:2b:ca:c7:5d:1a:d0:30:e7:8c:c8:1a:e1:b0:ba:
cc:82:9e:20:55:f2:b8:04:26:d6:5f:01:f9:bb:c6:
cf:9d:47:a0:68:9a:e4:bb:cd:8c:e2:30:ed:0d:4e:
3f:1d:d1:ff:ae:02:29:3a:98:07:fc:e5:b8:6e:7d:
7f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B4:FA:47:86:A3:F9:17:22:FE:8B:78:36:FC:1F:47:3A:18:F9:7C
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/5LT6R4aj-Rci_ot4NvwfRzoY-Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.119.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:82:4a:b3:c2:47:b3:c4:a2:95:86:80:c7:1f:55:d9:47:7b:
29:8a:8e:fc:99:ff:94:cb:d4:71:23:17:0f:df:a2:f3:36:ab:
ad:da:26:13:25:06:54:b5:c4:3d:2c:bb:60:eb:14:1b:48:7f:
4e:3e:2f:69:b7:65:f9:92:c4:1c:15:b3:0b:66:d2:dc:37:26:
fd:22:03:bc:20:b5:a5:0e:e1:7e:bd:9b:8e:45:9e:d2:74:d5:
49:9b:b3:b3:de:99:51:81:5f:d6:a6:4b:09:12:8b:d6:4e:3b:
60:29:b5:3e:7a:ac:0c:d7:5e:e6:30:78:2f:35:e2:d3:28:6c:
6f:fa:7d:ac:51:e7:bc:24:40:75:15:4b:c8:6c:18:df:61:d9:
6b:86:86:84:bb:63:b7:e6:51:78:01:41:db:e3:3d:fc:bc:f6:
f6:51:1b:69:6c:36:1e:74:93:38:ae:95:b1:07:df:99:f0:e9:
6c:07:37:70:fb:50:2a:ce:f2:cf:fb:3c:21:cb:bc:23:0b:8e:
6d:3a:97:d2:12:b9:f4:1b:af:81:ab:ae:19:27:67:3c:01:2c:
bf:6a:e9:f6:60:7b:63:cb:72:ed:6a:4c:47:db:25:c1:2e:ee:
b4:da:e5:6d:5a:c6:2d:10:ec:24:f8:f0:84:fb:bf:25:b2:29:
21:db:7f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:56 2024 by rpki-client on console-fra.rpki-client.org