Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/5MeScpnnED1pBr_9kW0QGRwYZXg.roa
File: 5MeScpnnED1pBr_9kW0QGRwYZXg.roa (raw, json)
Hash identifier: VmOJPWOyinJIBQfh04KNbUb7PxgQ24PLRQEu0lrvDxg=
Subject key identifier: E4:C7:92:72:99:E7:10:3D:69:06:BF:FD:91:6D:10:19:1C:18:65:78
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 01856FB1196ED07684848C257AB9A9F337A8
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/5MeScpnnED1pBr_9kW0QGRwYZXg.roa
Signing time: Sun 01 Jan 2023 23:35:55 +0000
ROA not before: Sun 01 Jan 2023 23:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57944
IP address blocks: 91.236.250.0/24 maxlen: 24
91.236.248.0/24 maxlen: 24
91.236.248.0/22 maxlen: 24
91.236.251.0/24 maxlen: 24
2001:67c:440::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:19:6e:d0:76:84:84:8c:25:7a:b9:a9:f3:37:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: Jan 1 23:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4c7927299e7103d6906bffd916d10191c186578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:08:ad:30:e0:d0:eb:7a:3f:78:42:f9:6f:50:
77:73:4d:5e:c6:63:dc:a4:1d:4a:59:50:55:b3:8b:
12:63:2d:96:75:57:18:04:7d:f3:31:b7:da:84:91:
69:ce:50:f2:9e:21:b3:a3:fe:42:01:9a:51:82:ef:
45:eb:ce:75:e4:b7:40:a1:31:8e:59:c9:ef:a5:07:
8a:d5:a2:8e:2d:de:8f:e4:7a:ab:b6:98:36:d6:c0:
9c:50:df:e6:0a:8a:3c:cb:ac:fe:56:60:0b:d7:be:
00:d7:32:16:88:84:a2:9e:73:14:ae:a0:56:3a:ad:
f0:e6:8c:75:ec:89:33:ff:e7:ea:a5:03:a3:c2:21:
e0:b0:c7:af:bc:23:6d:1f:31:6e:34:7a:b2:93:3f:
03:49:0d:18:e2:de:f9:fe:2e:73:61:87:84:ad:f2:
51:53:69:bb:dc:b1:f2:8b:be:f3:56:df:62:d3:10:
61:7e:9a:09:ba:da:82:56:d5:3f:20:26:9f:66:b5:
b8:fc:d6:70:27:1c:8e:cd:8c:e7:68:39:a4:35:b1:
70:b6:d3:f9:2a:19:24:4c:50:4b:1f:c6:bc:57:6b:
d2:c0:e3:df:e8:4c:6e:97:a5:5a:ed:71:ce:f2:ca:
84:42:ca:15:f4:d5:a2:97:f9:68:64:70:d1:3b:04:
26:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C7:92:72:99:E7:10:3D:69:06:BF:FD:91:6D:10:19:1C:18:65:78
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/5MeScpnnED1pBr_9kW0QGRwYZXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.248.0/22
IPv6:
2001:67c:440::/48
Signature Algorithm: sha256WithRSAEncryption
9f:6f:2d:a8:08:51:a3:6c:f6:6a:6a:f7:2d:e9:a3:b3:58:09:
b7:97:36:9e:4b:43:68:89:0d:19:43:38:de:dc:c1:1c:17:cf:
60:2a:97:07:eb:b6:47:cd:41:4b:cf:35:aa:9d:8e:19:53:19:
3f:d4:d6:e7:24:6b:ce:a2:9e:0e:03:b7:30:23:45:a6:ad:12:
b5:b1:cf:e8:e0:e2:86:2b:73:64:f4:da:fa:8a:de:af:d0:01:
b7:a7:a0:ce:46:08:c3:88:ae:75:ac:4c:08:26:db:76:3b:55:
33:94:0f:a7:78:7c:a4:54:21:21:e2:32:ad:b3:15:2c:3e:c1:
78:ca:2e:91:ad:d1:c0:1c:15:8c:e2:8d:a0:d6:60:98:19:ed:
27:dd:c7:ec:ab:fd:1d:7d:ad:d9:1f:02:f0:33:26:ed:84:f8:
57:09:ca:62:65:05:99:bd:75:48:b6:e6:3d:1e:4a:f7:72:d8:
6b:8b:70:e7:04:aa:cd:b3:1f:7e:50:17:8d:e2:db:fe:0c:fb:
75:84:58:fd:5c:ac:c2:8a:8a:1b:3d:29:84:b6:3d:1e:86:61:
f9:f1:79:01:5b:2b:6e:a9:cc:04:82:85:b0:37:9d:78:49:94:
8f:94:77:62:42:be:da:86:3c:06:41:25:40:90:e6:b2:9f:34:
21:17:bf:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:35 2024 by rpki-client on console-ams.rpki-client.org