Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/tS3Bqprs7cQ99GtFxoiJi2i5BoY.roa
File: tS3Bqprs7cQ99GtFxoiJi2i5BoY.roa (raw, json)
Hash identifier: 0ivr2iHYqKvg1Y/uAXxhKvcuOu+MqLPA9mXlIBm4zJs=
Subject key identifier: B5:2D:C1:AA:9A:EC:ED:C4:3D:F4:6B:45:C6:88:89:8B:68:B9:06:86
Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial: 0186E500E791CB166951D852BC6FE2CF6B03
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/tS3Bqprs7cQ99GtFxoiJi2i5BoY.roa
Signing time: Wed 15 Mar 2023 11:21:27 +0000
ROA not before: Wed 15 Mar 2023 11:21:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212616
IP address blocks: 91.230.48.0/24 maxlen: 24
93.175.32.0/19 maxlen: 19
176.97.214.0/24 maxlen: 24
2a0e:5b00::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e5:00:e7:91:cb:16:69:51:d8:52:bc:6f:e2:cf:6b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Validity
Not Before: Mar 15 11:21:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b52dc1aa9aecedc43df46b45c688898b68b90686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:29:f7:0f:31:01:d2:13:04:0a:f9:ca:16:
ce:a0:18:1c:c5:4f:66:93:30:b2:7a:3a:0c:25:9f:
5d:3a:ec:d4:e4:06:e5:61:b6:d1:00:c8:cb:80:07:
6d:d3:6f:e8:f6:8f:53:42:8b:4a:57:b8:85:a7:a3:
97:2d:c7:23:2e:5d:b2:fd:81:55:ba:6d:d7:5d:de:
5d:9f:d9:76:56:fa:e5:c7:56:f5:e3:58:83:fa:bf:
a5:c3:ef:4f:56:d6:ac:9f:0c:ee:f7:33:eb:ea:7c:
93:b0:6a:1c:56:a2:a4:95:0a:1f:7b:7b:18:7b:03:
14:cc:0c:d8:94:fd:c0:5c:9e:06:bc:ac:33:62:8a:
97:7b:68:c3:b0:17:5a:f5:0b:ee:c9:28:2f:99:d2:
25:1b:9f:45:33:a2:28:16:6c:b5:8c:02:f4:d8:04:
81:f0:f3:52:72:04:e8:90:6c:28:d4:0e:8e:c3:b6:
a4:c1:a4:77:4e:38:61:91:36:dc:eb:0a:f5:c1:92:
c7:43:1d:80:83:81:40:87:36:f4:fc:a8:42:d7:ba:
fb:91:b5:01:73:10:fd:d9:b6:17:62:e0:71:ef:72:
33:84:9b:a4:e4:f2:45:24:d6:8c:43:81:c5:49:a1:
f7:05:5a:9e:22:8e:23:91:d0:6c:a6:ed:65:ec:45:
e8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2D:C1:AA:9A:EC:ED:C4:3D:F4:6B:45:C6:88:89:8B:68:B9:06:86
X509v3 Authority Key Identifier:
keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/tS3Bqprs7cQ99GtFxoiJi2i5BoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.48.0/24
93.175.32.0/19
176.97.214.0/24
IPv6:
2a0e:5b00::/29
Signature Algorithm: sha256WithRSAEncryption
45:ce:a5:5a:2b:88:f7:14:58:97:10:77:c8:1f:cc:3b:6f:33:
c2:48:49:c5:f9:c4:34:ae:72:d3:64:a7:1f:a2:03:45:d8:48:
fe:2a:9d:2b:58:2c:15:86:8f:46:c3:8d:57:63:05:0b:d2:46:
fc:2c:6a:15:4c:33:5c:e6:42:82:4d:e5:24:de:f0:57:29:45:
a7:21:87:47:b3:2f:cd:6e:e8:d6:b5:9a:dd:2a:3b:6b:32:99:
0d:91:42:a0:4e:b9:ce:51:50:52:81:3a:62:33:bc:75:64:f5:
37:67:d5:7b:81:00:dc:4f:98:af:a6:31:f6:32:00:97:88:92:
be:e7:7f:a4:c0:16:85:f1:d9:0a:90:8b:d1:ff:24:d1:4b:0c:
78:26:d8:60:79:66:2f:b5:ed:ee:00:37:50:da:84:cf:06:14:
de:48:b4:45:89:60:28:ee:69:fd:e8:58:60:03:cc:7c:33:dd:
da:13:ca:a6:3c:c6:ae:84:30:10:fe:02:a8:d0:cf:4e:b3:cc:
4b:c4:ea:d0:46:89:8b:d0:cb:98:a9:b2:b7:4c:cb:a1:03:3c:
a4:23:a0:bc:72:e2:28:a9:c8:10:54:84:7c:b0:86:3f:11:39:
5c:ca:5e:44:5a:3e:83:d7:b6:de:7a:08:1c:97:31:8e:e7:c1:
88:5b:72:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:01 2024 by rpki-client on console-fra.rpki-client.org