Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/iIm3_E6Fh3HXH2QZiSKyVETPB4A.roa
File: iIm3_E6Fh3HXH2QZiSKyVETPB4A.roa (raw, json)
Hash identifier: K46Mk+45Q/isle7QClvPovqdos48GNQbEBlQszgXU6g=
Subject key identifier: 88:89:B7:FC:4E:85:87:71:D7:1F:64:19:89:22:B2:54:44:CF:07:80
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 0192688AA198DB6E80EAEDBB9D62163C2EDE
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/iIm3_E6Fh3HXH2QZiSKyVETPB4A.roa
Signing time: Mon 07 Oct 2024 19:52:48 +0000
ROA not before: Mon 07 Oct 2024 19:52:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.237.119.0/24 maxlen: 24
185.220.146.0/23 maxlen: 24
185.255.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 09:23:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:68:8a:a1:98:db:6e:80:ea:ed:bb:9d:62:16:3c:2e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Oct 7 19:52:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8889b7fc4e858771d71f64198922b25444cf0780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bc:9d:8a:d7:eb:cf:0d:6b:43:aa:da:1a:cc:
47:ca:f6:e3:c3:cf:cf:42:4a:e3:4d:ca:2c:ca:23:
e6:f4:a0:ba:ad:5b:56:06:a7:2d:75:67:1f:29:3d:
97:87:b5:a5:93:35:71:4d:b3:e2:0b:ba:be:c2:1c:
25:e9:6d:af:ff:a5:74:76:c7:b3:58:3b:f2:0a:4e:
fc:4c:90:ab:f1:38:1f:69:1b:e0:13:dd:23:f6:12:
ae:93:1e:f3:65:07:89:02:03:34:82:96:32:81:4f:
a7:2a:e5:f2:1c:21:87:c0:bc:4a:96:22:6d:bb:9e:
3d:96:79:17:56:80:27:89:01:cd:05:bf:79:b1:e6:
4f:d8:a9:df:c6:80:67:5f:b9:54:7f:1b:24:56:c8:
96:04:7c:48:c5:c4:67:86:7f:c6:81:11:07:b3:c2:
ad:6d:7e:34:a5:ff:07:6f:c8:4a:85:af:71:bb:dc:
f7:6c:40:e7:f3:c4:0e:a4:0d:21:85:a0:81:11:39:
cd:ed:43:48:44:0a:19:7c:c5:19:ae:24:dc:e3:ce:
0a:c3:5c:a0:8f:af:f6:33:e4:b8:e2:8c:72:55:9e:
cb:f3:f5:77:c5:4b:b9:01:bd:f3:b5:19:d4:92:d2:
68:f8:e0:f8:f2:5d:bc:15:82:32:51:4c:70:6c:2e:
21:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:89:B7:FC:4E:85:87:71:D7:1F:64:19:89:22:B2:54:44:CF:07:80
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/iIm3_E6Fh3HXH2QZiSKyVETPB4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.119.0/24
185.220.146.0/23
185.255.198.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:55:1f:39:b2:79:c6:a1:0a:d3:4c:e1:20:35:26:98:65:d9:
31:7d:77:56:77:e2:f6:d3:d5:ae:40:54:f7:f1:bc:c7:52:f1:
cc:13:05:96:fe:6d:32:21:6a:ad:c5:69:b9:39:43:eb:d1:58:
71:bf:fd:be:3d:25:3c:e0:e7:2c:b2:0f:2b:6e:a0:0a:0b:6d:
db:26:dc:65:d9:b6:33:25:78:8e:fc:44:37:7d:a4:20:36:b8:
02:dd:28:c8:4a:85:80:b0:f4:49:da:a4:46:88:6b:21:20:2c:
1e:d9:19:c3:a2:ec:18:e9:64:0b:94:57:2b:50:75:73:9a:62:
97:81:07:76:8b:a5:d1:10:94:e7:0d:34:bf:f7:b5:35:4c:2f:
c7:8e:9f:f6:10:2b:5b:a9:20:6f:9a:30:e8:3f:d1:3a:e9:bd:
0d:a4:e5:f4:c8:b3:29:11:a5:33:f8:27:cb:09:8d:d5:73:27:
68:8a:96:e6:17:8e:9e:ba:ac:61:22:fb:5d:38:73:50:fa:ba:
4f:fb:19:25:c4:0b:1f:9b:ba:fc:a1:0e:6c:db:3b:77:31:c5:
a1:61:5b:9d:35:6d:82:97:71:7c:b7:07:14:02:81:53:30:8a:
04:28:65:c7:6e:3e:0b:c6:64:a3:9e:58:b1:00:a4:e2:ef:fa:
9e:e2:42:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 13:43:46 2024 by rpki-client on console-ams.rpki-client.org