Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/3094NJuwTTDWT59k9dVjf9kwNDw.roa
File: 3094NJuwTTDWT59k9dVjf9kwNDw.roa (raw, json)
Hash identifier: te2+/wmcMonf4Jo/DlZZ+7BV1J/SCx4Z7x5K+zKrh/w=
Subject key identifier: DF:4F:78:34:9B:B0:4D:30:D6:4F:9F:64:F5:D5:63:7F:D9:30:34:3C
Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial: 018570304529EE0F9F864B23C1D6F2FED1ED
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/3094NJuwTTDWT59k9dVjf9kwNDw.roa
Signing time: Mon 02 Jan 2023 01:54:49 +0000
ROA not before: Mon 02 Jan 2023 01:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41477
IP address blocks: 91.215.164.0/22 maxlen: 23
91.215.166.0/24 maxlen: 24
91.215.165.0/24 maxlen: 24
91.215.167.0/24 maxlen: 24
185.34.164.0/22 maxlen: 23
185.34.165.0/24 maxlen: 24
185.34.166.0/24 maxlen: 24
185.34.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:45:29:ee:0f:9f:86:4b:23:c1:d6:f2:fe:d1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Validity
Not Before: Jan 2 01:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df4f78349bb04d30d64f9f64f5d5637fd930343c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:53:e5:2e:eb:05:bf:cf:0d:26:79:11:ae:91:
0a:a6:61:ec:4b:2d:b7:d6:8b:cc:93:64:c2:77:33:
c1:1f:da:ef:69:f3:fd:b4:35:76:7a:02:33:23:70:
ac:1e:45:63:5a:25:a5:03:eb:a7:96:9d:ba:6c:d5:
c2:a0:09:ac:ad:d5:58:04:78:2f:55:81:2a:48:c9:
33:3b:c6:96:18:98:b8:59:fa:46:06:01:c8:aa:c2:
f2:28:b7:14:04:d0:a7:b9:d5:08:97:19:c3:3f:39:
a7:f5:8c:9d:c4:06:be:94:7e:ab:b2:c6:b2:1d:87:
8c:cd:f3:e6:7f:56:f0:b8:79:56:53:b5:7a:6d:76:
60:cf:5b:f7:ac:6c:4a:a4:f1:c3:8b:b9:60:d0:24:
45:1a:ce:5a:b5:19:81:42:48:15:67:6c:ad:66:2f:
80:b3:2a:79:ad:38:33:d4:8d:71:c8:d4:8b:0a:a3:
a1:d1:75:3e:c7:5b:23:ee:dc:ba:87:63:b2:b3:f6:
e0:2f:9a:2d:6c:0b:42:19:4e:84:cd:9d:36:ad:cf:
c6:36:17:98:49:42:5f:13:48:1a:34:bd:3c:07:54:
e4:f9:34:4e:9e:08:b2:17:c9:9b:65:2a:11:08:d3:
ca:1a:c9:a9:a6:b6:72:72:12:c7:d1:f4:4a:55:2b:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4F:78:34:9B:B0:4D:30:D6:4F:9F:64:F5:D5:63:7F:D9:30:34:3C
X509v3 Authority Key Identifier:
keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/3094NJuwTTDWT59k9dVjf9kwNDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.164.0/22
185.34.164.0/22
Signature Algorithm: sha256WithRSAEncryption
20:11:aa:97:70:78:ec:b3:ac:8f:33:58:fe:0c:3c:28:a5:62:
d9:f3:cb:08:ed:7f:83:2d:58:e2:82:0e:e1:41:04:f6:a0:18:
87:f9:94:8b:51:c8:ec:a7:a5:da:6e:84:85:0a:6e:05:9a:d3:
57:ea:bb:3f:06:06:3a:fa:b7:c3:3b:b2:76:7a:c4:31:b2:d0:
64:3b:7b:35:c2:23:1b:cc:e5:6c:28:d0:55:4d:10:e1:f7:2c:
fc:df:2d:6d:2a:78:4d:15:d1:3b:78:77:14:88:47:57:95:c3:
0d:49:93:0a:fe:3e:dc:f5:f2:74:2a:d6:a4:8a:33:69:83:92:
5a:70:34:8c:ba:06:ab:a2:2d:73:ed:ea:50:d4:f8:0b:38:a1:
6a:ec:0f:f7:9f:ef:7d:93:4b:93:3f:4f:ee:8c:81:1d:91:96:
06:ca:e5:8f:46:fe:26:1a:38:64:de:17:72:79:69:44:47:5e:
7f:d8:7a:d7:bc:3e:d1:16:18:1c:a0:dc:0c:d8:03:72:0e:6e:
a0:88:12:bb:50:3a:48:d0:18:0c:48:bf:b8:0a:27:4d:5d:6d:
48:9a:05:7f:82:f5:0b:96:49:6a:56:a5:b3:3c:c6:57:71:56:
65:99:bf:2e:a6:36:95:9d:63:66:cb:5c:71:81:88:08:f7:51:
ea:77:68:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:03 2024 by rpki-client on console-ams.rpki-client.org