Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/e_Ia_J73TJlwPSP17SQTyunKK8Y.roa
File: e_Ia_J73TJlwPSP17SQTyunKK8Y.roa (raw, json)
Hash identifier: gUnzVuAg7puKgYIl0Liv3vafCJC6+YWG/U7lrbzE2pA=
Subject key identifier: 7B:F2:1A:FC:9E:F7:4C:99:70:3D:23:F5:ED:24:13:CA:E9:CA:2B:C6
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 018F735D010586005899D383D3FFEEADCE8D
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/e_Ia_J73TJlwPSP17SQTyunKK8Y.roa
Signing time: Mon 13 May 2024 19:10:25 +0000
ROA not before: Mon 13 May 2024 19:10:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60707
IP address blocks: 91.151.83.0/24 maxlen: 24
91.151.84.0/24 maxlen: 24
213.142.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 May 2024 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:73:5d:01:05:86:00:58:99:d3:83:d3:ff:ee:ad:ce:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: May 13 19:10:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bf21afc9ef74c99703d23f5ed2413cae9ca2bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:44:7e:29:86:6f:4c:ec:d9:6d:47:60:80:
0b:7f:43:5a:7b:a1:3a:a3:d4:e1:55:59:21:81:18:
89:43:a1:86:36:c4:76:39:91:39:0e:55:b9:35:7a:
1a:d1:15:59:d4:0d:72:aa:b3:e4:2f:21:a2:0e:19:
52:91:2c:37:3d:4e:cc:a8:89:b4:87:6e:d6:16:35:
46:c7:b7:54:d1:57:96:4f:9c:82:e7:aa:f5:e9:2f:
59:09:6f:1d:40:03:04:d9:54:92:4c:96:7d:d0:cf:
b5:b7:85:fe:bb:ea:ae:5d:57:50:d6:dd:2e:20:d8:
62:71:5e:3b:92:99:4e:fb:c6:f9:3f:fb:f6:14:38:
87:65:10:a9:36:9f:5a:25:e3:c9:b2:fc:f5:5b:6a:
d3:36:0e:37:3d:02:ce:e0:07:17:b5:f0:d6:22:6b:
f9:79:d9:4d:6b:22:d4:4e:b4:c2:eb:40:af:5f:d3:
44:92:cd:45:b0:2a:c8:1c:03:f7:e3:e3:c1:4f:f4:
fb:1a:dd:17:82:f1:2b:e5:62:71:86:47:e8:6b:9a:
bd:e9:c4:f6:83:7e:ab:f1:7e:82:7c:91:2e:2e:95:
68:01:0e:5d:12:40:e1:8b:90:1c:b3:b3:38:28:17:
61:48:da:00:a2:09:b0:cd:a4:be:48:8c:8e:fa:36:
74:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F2:1A:FC:9E:F7:4C:99:70:3D:23:F5:ED:24:13:CA:E9:CA:2B:C6
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/e_Ia_J73TJlwPSP17SQTyunKK8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.83.0-91.151.84.255
213.142.143.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:4e:05:4a:d3:a7:4a:a1:b3:77:e5:3b:aa:b1:ea:17:b4:67:
10:3e:1b:80:d4:a2:54:3c:76:72:1e:97:2e:82:94:bf:6d:d1:
0e:96:1c:b8:fe:18:ef:26:e9:90:c6:e5:af:4d:83:c7:ea:a9:
4f:2f:9e:22:a9:8c:6d:4a:ff:cf:12:75:ac:f5:e9:af:b6:e3:
68:44:e3:02:69:49:e6:3e:c1:48:a6:ad:f8:a3:e7:a4:4f:82:
67:a0:32:d5:0b:2a:87:92:ae:41:67:22:27:03:22:05:5f:24:
f3:a6:f1:36:04:cf:1a:8d:cc:6d:91:29:75:d7:c4:85:ee:55:
59:5d:cc:e4:08:88:9b:29:36:20:84:26:24:f7:95:8d:33:a6:
6c:b7:45:d9:16:45:bc:ac:f0:90:fc:75:1e:75:ab:72:c6:10:
87:74:7d:78:f7:5b:1c:9b:09:9a:1f:ec:ca:16:3a:f4:1a:26:
25:45:a3:c8:49:e1:10:f8:6a:c7:f4:ad:d1:7a:a6:02:08:62:
f5:32:36:39:07:5d:c1:e6:d1:f1:68:70:18:3f:9e:af:31:f9:
70:d6:5f:c4:f2:13:a3:83:68:08:bf:72:18:d1:09:36:eb:0b:
c2:38:27:5c:81:a9:b9:5d:9f:a2:85:78:80:0f:64:74:19:2c:
18:83:9e:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:38 2024 by rpki-client on console-ams.rpki-client.org