Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/po3EI1xsg4flfZT8ph5UefcU_W0.roa
File: po3EI1xsg4flfZT8ph5UefcU_W0.roa (raw, json)
Hash identifier: Ihko2BxTJoweRHUtbRxViVtJfKBWnlgQJg3b0GbaEmc=
Subject key identifier: A6:8D:C4:23:5C:6C:83:87:E5:7D:94:FC:A6:1E:54:79:F7:14:FD:6D
Certificate issuer: /CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Certificate serial: 018891CF25A7EB551F605702468924F5996C
Authority key identifier: 1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/po3EI1xsg4flfZT8ph5UefcU_W0.roa
Signing time: Tue 06 Jun 2023 17:44:11 +0000
ROA not before: Tue 06 Jun 2023 17:44:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51685
IP address blocks: 91.237.179.0/24 maxlen: 32
45.86.38.0/24 maxlen: 32
91.219.164.0/22 maxlen: 32
2a07:6940::/29 maxlen: 128
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:cf:25:a7:eb:55:1f:60:57:02:46:89:24:f5:99:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Validity
Not Before: Jun 6 17:44:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a68dc4235c6c8387e57d94fca61e5479f714fd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:10:f9:99:12:39:49:7d:de:e7:6a:c0:7d:b6:
a6:dd:1e:c6:be:a4:58:2a:db:38:79:e9:6b:fc:13:
7c:a3:fc:fa:b3:58:77:60:85:7d:ce:1a:0c:61:ae:
46:c7:61:d5:44:f0:12:c1:d1:3c:6c:da:ca:3c:3b:
17:ba:10:4c:0e:a1:f9:a3:ca:1e:24:a1:c2:0f:6e:
5d:5e:d6:8c:e7:f3:24:15:5b:00:3d:68:ae:81:3e:
cb:38:f1:b1:f4:aa:9b:0a:e9:c8:3a:57:a7:42:6a:
cb:30:26:38:b2:ee:6b:3b:7d:0b:a3:eb:17:44:91:
59:0e:1a:38:0d:49:f9:a7:9b:71:49:20:5f:d8:bc:
eb:95:d7:d9:f9:f3:d9:6b:c0:32:97:90:16:82:8d:
1e:a4:22:dc:77:b5:5c:5a:bf:b5:59:5c:1f:bf:13:
1b:0f:fd:ca:d4:fc:f4:9c:86:0f:54:80:c4:dc:e5:
9c:5a:5e:8d:aa:f3:5e:8c:89:51:bb:fb:cd:51:40:
60:46:26:05:4b:04:77:c7:35:16:d9:74:75:03:e1:
09:ae:19:ba:b9:5e:d1:6a:69:b1:0b:ed:3b:11:5e:
1e:7b:96:ed:82:4a:3a:08:dc:6c:03:ce:5f:25:23:
3e:bf:28:e7:28:d5:9b:10:1a:2e:0e:96:ce:a6:3f:
2e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8D:C4:23:5C:6C:83:87:E5:7D:94:FC:A6:1E:54:79:F7:14:FD:6D
X509v3 Authority Key Identifier:
keyid:1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/po3EI1xsg4flfZT8ph5UefcU_W0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.38.0/24
91.219.164.0/22
91.237.179.0/24
IPv6:
2a07:6940::/29
Signature Algorithm: sha256WithRSAEncryption
62:c6:f1:89:ab:09:68:e0:b4:51:bc:40:a5:ba:83:23:d3:0d:
8f:b5:f5:91:38:5d:91:f5:47:0f:ab:ec:fc:24:2a:fc:07:11:
d4:51:40:5c:0a:3a:5e:a5:70:31:4a:aa:e1:f7:c1:15:e1:c0:
b4:1d:9e:a7:1f:0f:ef:75:fe:de:ff:ea:44:9c:44:bb:3c:42:
25:37:29:1b:d8:47:7a:ff:e0:ef:7d:19:e2:10:68:f7:31:ae:
d4:ff:da:48:70:7e:bb:c6:d1:db:d0:ef:94:c3:1c:e9:50:fa:
59:9e:16:54:9b:cc:1e:37:a5:54:3a:ca:0b:55:32:d4:3e:94:
c2:50:e6:76:ca:21:d6:7c:96:d5:63:23:94:98:0e:e3:89:4a:
3a:b9:f6:75:43:40:7d:4f:55:7a:ea:96:13:80:62:a2:de:75:
2c:89:ef:83:11:bf:a6:d8:9e:63:cf:0d:0f:73:9f:da:6f:e0:
b2:bb:d9:24:56:12:f6:6a:49:41:0a:6f:80:7b:32:61:b0:4b:
34:89:ac:a0:c2:a6:a1:47:de:aa:7a:61:4c:fa:01:b6:e9:ed:
c5:0f:f9:85:a9:69:32:85:4f:4e:6d:82:63:9b:6d:49:91:82:
3d:20:5f:12:0c:8d:14:81:ce:e7:69:57:8b:66:02:ec:76:d4:
51:99:e8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:21 2024 by rpki-client on console-fra.rpki-client.org