Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/CLhECQlQ6KpSKgJLmAwe62zrmDs.roa
File: CLhECQlQ6KpSKgJLmAwe62zrmDs.roa (raw, json)
Hash identifier: tDRaCYquX1rJVwisFkPRv/1rl7W6xsYpuPiqkEW6vCg=
Subject key identifier: 08:B8:44:09:09:50:E8:AA:52:2A:02:4B:98:0C:1E:EB:6C:EB:98:3B
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 019266C91C0BB9B1ACD39B129A2E76838BE8
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/CLhECQlQ6KpSKgJLmAwe62zrmDs.roa
Signing time: Mon 07 Oct 2024 11:41:48 +0000
ROA not before: Mon 07 Oct 2024 11:41:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.237.119.0/24 maxlen: 24
185.220.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 19:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:66:c9:1c:0b:b9:b1:ac:d3:9b:12:9a:2e:76:83:8b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Oct 7 11:41:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08b844090950e8aa522a024b980c1eeb6ceb983b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:76:f9:e1:cf:f9:db:f1:41:e8:5b:3c:40:7b:
b4:f8:8a:89:47:5b:ea:79:7c:54:fd:a3:8a:d6:03:
df:71:f2:f2:92:18:67:82:9c:32:45:e5:98:50:02:
c8:2c:c6:e5:2f:8f:14:0e:53:ee:42:0f:dc:57:1b:
b7:dd:a0:36:75:6e:6d:ef:2f:42:75:34:24:7b:ba:
ce:66:12:a1:c2:35:3f:3b:61:ce:73:44:84:c1:04:
d0:4f:05:7e:87:52:6d:01:c0:76:0c:76:ef:70:f7:
2b:4c:fd:60:16:a5:09:5e:f2:e6:38:6a:03:8a:86:
77:c1:b6:42:5d:e4:53:aa:f7:ed:b7:03:79:d7:f4:
9c:c5:73:c4:08:8f:d4:3b:9f:ba:a3:a8:6c:67:be:
ee:5b:1a:fa:ab:ec:f7:24:4a:ba:9a:04:0e:e9:09:
d7:22:6f:7b:27:d6:11:ad:83:48:14:53:41:03:34:
ef:81:db:15:70:37:4b:45:f4:ee:ec:3c:57:0d:99:
9e:7d:77:e6:94:e7:c3:85:7e:dd:e4:1e:7a:94:1d:
40:94:42:6e:ec:75:7d:13:56:ca:2b:92:4f:15:6a:
56:fa:e8:2c:22:0a:27:82:44:0a:11:23:a2:37:41:
5d:40:40:06:f8:3c:aa:79:ba:3d:a9:6b:a4:f0:62:
d6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B8:44:09:09:50:E8:AA:52:2A:02:4B:98:0C:1E:EB:6C:EB:98:3B
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/CLhECQlQ6KpSKgJLmAwe62zrmDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.119.0/24
185.220.146.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:0f:e2:1a:a9:3f:22:44:dd:19:75:4c:95:06:fa:32:48:d0:
ee:aa:bd:f5:10:9f:9a:d6:65:d3:68:50:24:91:9f:f1:3b:70:
98:69:a4:04:48:ba:ac:c9:c4:b5:79:af:09:e2:23:94:4b:4d:
f4:8b:10:ca:93:a8:f5:02:57:59:ed:33:be:ed:40:37:9c:50:
3e:ec:ae:c6:4d:5c:a8:ea:be:bd:a8:28:82:0d:30:db:70:4c:
ea:0d:0c:5c:6f:c2:0d:52:0e:24:48:05:a6:79:f8:96:4f:4f:
2c:c6:d2:ee:ae:97:e5:45:80:78:89:b1:24:0c:19:37:a9:3a:
5f:42:e1:05:d0:1b:03:49:27:bf:34:c8:57:6f:af:92:85:38:
84:b1:41:f2:e2:dd:f3:58:d8:e7:9b:77:a5:a1:9b:49:b6:71:
ed:33:db:2d:4e:20:30:4a:de:50:11:30:64:1d:ea:7a:18:fa:
af:1a:5a:5b:54:0e:30:f1:bc:1a:56:89:74:16:7a:6d:83:db:
2d:c2:f1:18:ab:7a:a1:0c:76:d3:70:64:f6:7e:92:29:d3:87:
a0:19:e3:86:03:b7:4b:13:29:5c:e8:2d:d9:68:ce:86:56:5d:
a3:ca:a0:34:32:be:90:3a:aa:d1:e3:7d:cb:55:aa:f1:dc:7a:
1a:80:c7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 00:11:48 2024 by rpki-client on console-fra.rpki-client.org