Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/zPTIy77RbiZYlRK9E6Y5WUSCGjQ.roa
File: zPTIy77RbiZYlRK9E6Y5WUSCGjQ.roa (raw, json)
Hash identifier: IoBEIrsCIBmAXqBjqqhMzBiDgBX9+tu5THmPyHxwjSg=
Subject key identifier: CC:F4:C8:CB:BE:D1:6E:26:58:95:12:BD:13:A6:39:59:44:82:1A:34
Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial: 018C7D7CE5E99C6795660E7C506FE18B065E
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/zPTIy77RbiZYlRK9E6Y5WUSCGjQ.roa
Signing time: Mon 18 Dec 2023 15:13:06 +0000
ROA not before: Mon 18 Dec 2023 15:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 91.196.162.0/24 maxlen: 24
91.196.162.0/23 maxlen: 23
91.196.161.0/24 maxlen: 24
91.196.160.0/22 maxlen: 22
91.196.160.0/24 maxlen: 24
91.196.160.0/23 maxlen: 23
91.196.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7d:7c:e5:e9:9c:67:95:66:0e:7c:50:6f:e1:8b:06:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Validity
Not Before: Dec 18 15:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccf4c8cbbed16e26589512bd13a6395944821a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:12:01:d5:a8:b9:b0:71:c3:dc:34:c1:0d:22:
db:b4:04:44:73:93:26:1d:fc:ea:52:a0:74:de:67:
25:33:39:ea:f7:b9:71:57:11:4f:95:21:0f:32:b7:
98:92:00:80:c6:32:a4:8f:09:0c:c3:6f:df:f3:f2:
da:cd:9a:92:da:7b:98:4e:f8:9e:96:5c:81:80:0d:
cd:e3:6d:8c:09:84:d7:23:fa:43:11:82:3d:54:de:
ed:53:c8:a9:15:8b:eb:30:a5:98:b4:5f:96:ee:26:
a2:33:fe:2f:05:ea:fc:80:ae:2c:29:5e:d4:a8:d1:
73:f8:53:5c:9b:72:af:10:25:8a:28:b4:c8:a2:12:
1c:c5:f7:e1:b3:34:62:18:43:d2:08:ef:15:d8:31:
0b:ca:ba:17:7c:da:1a:94:89:fd:3b:cd:76:b5:1c:
85:54:d5:63:2c:0d:7f:15:8a:8e:d5:ec:70:d1:ef:
71:14:e8:03:42:1f:d0:4c:73:d1:77:4b:98:41:ab:
ae:a9:61:6e:e6:ae:4e:dd:a7:db:40:8b:ca:7c:c9:
e7:02:14:36:5e:11:58:b5:ac:67:9f:37:2b:89:1a:
fc:69:35:72:89:f8:20:6d:01:08:d5:2b:d1:c5:bd:
de:8f:50:6c:e0:0e:54:d7:55:e0:a6:97:8e:72:fe:
58:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F4:C8:CB:BE:D1:6E:26:58:95:12:BD:13:A6:39:59:44:82:1A:34
X509v3 Authority Key Identifier:
keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/zPTIy77RbiZYlRK9E6Y5WUSCGjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.160.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:c2:7e:9b:91:bf:1f:dc:c9:40:b7:76:05:62:3a:c1:46:59:
4a:c5:2a:9c:35:de:6e:0d:bf:9d:0f:09:d4:e9:53:90:fe:9f:
5b:1f:f3:1f:e9:17:de:b3:9a:f3:f2:e3:78:4a:2b:68:b5:e8:
b0:dc:a8:99:09:b0:ff:d9:3d:67:6a:bf:fe:af:d9:ae:4d:da:
9d:e4:49:f0:5e:9f:8c:58:91:39:2c:cb:22:31:59:be:73:7b:
f2:c1:fc:d1:b4:05:2d:a1:30:5e:b4:bf:49:2d:9e:16:08:96:
8d:b4:b0:f4:13:a5:50:42:ce:36:0a:bf:89:1c:ec:df:1e:ab:
05:01:25:ff:c7:13:6c:6d:cb:c4:00:fa:ac:0d:4a:c5:9b:b1:
84:13:79:08:b5:59:4d:e7:74:fb:eb:d8:49:d7:6f:c2:85:9d:
cb:c4:a4:16:9d:4e:7e:08:d6:be:81:5f:26:f9:71:c4:37:71:
5c:c9:92:dc:be:f3:7a:91:73:79:ac:be:59:e8:6c:a2:4f:5a:
aa:e6:06:ae:43:04:55:d7:1f:b8:b8:d3:6e:21:8e:65:ad:2f:
dd:1f:a0:1d:67:ee:31:77:75:cf:3f:0e:2b:ce:c6:90:3a:79:
2a:94:ee:db:93:9d:e3:19:b5:2a:aa:ee:d5:2e:88:35:08:4f:
ad:6d:48:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:13 2024 by rpki-client on console-fra.rpki-client.org