Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/6SSYJ8ytZX5KC0WXSwKQmNunxH4.roa
File: 6SSYJ8ytZX5KC0WXSwKQmNunxH4.roa (raw, json)
Hash identifier: LvFZOju8Y25hmGABLm0U7cRTvlIJrmYVnXBXO5f3Ul4=
Subject key identifier: E9:24:98:27:CC:AD:65:7E:4A:0B:45:97:4B:02:90:98:DB:A7:C4:7E
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 01880436A1FAE8B6B8E5E100D5AEED04DAB9
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/6SSYJ8ytZX5KC0WXSwKQmNunxH4.roa
Signing time: Wed 10 May 2023 05:51:09 +0000
ROA not before: Wed 10 May 2023 05:51:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43775
IP address blocks: 91.147.184.0/24 maxlen: 24
91.147.186.0/24 maxlen: 24
91.147.180.0/24 maxlen: 24
91.147.185.0/24 maxlen: 24
91.147.183.0/24 maxlen: 24
91.147.181.0/24 maxlen: 24
91.147.188.0/24 maxlen: 24
91.147.190.0/24 maxlen: 24
91.147.187.0/24 maxlen: 24
91.147.191.0/24 maxlen: 24
91.147.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:04:36:a1:fa:e8:b6:b8:e5:e1:00:d5:ae:ed:04:da:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: May 10 05:51:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9249827ccad657e4a0b45974b029098dba7c47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:18:8f:b3:c8:2d:9a:25:81:3a:a0:60:e0:
72:90:40:79:51:60:a3:34:2d:74:69:1d:c9:e1:fd:
5a:8c:f3:69:45:56:23:52:9a:53:6f:08:50:d9:7b:
f7:b1:c6:ec:7f:5f:4e:4d:d9:0b:6a:43:f4:34:8e:
33:ba:91:5d:35:65:21:e8:6c:75:fd:6b:e4:32:94:
a9:01:74:d8:89:de:5b:19:57:74:86:04:cc:8d:70:
4f:fd:2d:41:37:5e:eb:9c:92:a9:80:f4:cc:47:56:
e6:ad:c6:32:8e:58:b8:fb:a8:46:c9:88:16:45:e6:
d7:7d:c3:27:45:cb:0d:03:6e:95:81:49:7c:8b:4a:
1b:f0:63:e5:1b:63:0d:b1:99:b2:5a:95:3b:77:8b:
10:e6:a0:49:28:70:25:ea:3d:46:97:5b:aa:15:b9:
97:3c:3c:f9:2c:0b:c4:74:7b:07:1e:f2:07:92:c8:
4c:74:0f:a4:e5:99:98:6e:75:5b:e4:ba:09:9a:00:
d3:7b:34:79:7e:1a:4c:77:a6:d8:db:4b:72:52:3a:
ea:4d:c6:77:a3:c3:3d:50:98:f9:43:62:58:2d:bc:
04:9e:d3:3e:26:fe:8b:d2:f7:2b:7e:b6:49:2f:b1:
36:aa:91:a9:8c:55:18:96:74:cd:59:26:8e:3e:45:
86:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:24:98:27:CC:AD:65:7E:4A:0B:45:97:4B:02:90:98:DB:A7:C4:7E
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/6SSYJ8ytZX5KC0WXSwKQmNunxH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.180.0/23
91.147.183.0-91.147.191.255
Signature Algorithm: sha256WithRSAEncryption
99:5b:ae:29:49:d9:16:4b:ea:03:4e:ac:f4:ef:39:84:c7:e3:
e3:61:1e:c1:de:fa:b5:35:61:a0:2a:03:46:ff:67:fe:4e:08:
00:20:dc:1a:25:4f:3c:1a:c5:77:6c:d4:c7:b3:09:6a:9e:c3:
0e:e3:10:90:6c:20:ac:d0:17:bd:bf:e1:65:eb:65:4c:44:3e:
16:8d:5b:6b:98:a5:50:83:18:12:3e:90:40:68:35:e8:58:4e:
d8:6f:81:7c:b7:1d:d9:34:50:e4:ed:d5:f4:b3:cf:35:0b:8b:
d3:06:b4:c4:cd:47:dd:2a:fb:5d:3a:ba:f3:8b:8e:7c:29:aa:
fe:f3:48:3a:7d:35:1e:70:c8:1d:bb:27:87:d7:17:3c:67:80:
1c:40:12:59:17:32:f9:c5:5b:9b:4a:4b:31:8e:7a:c9:a7:ab:
26:73:33:73:66:62:8a:59:2f:47:56:59:9f:88:25:b9:14:b1:
df:40:58:7b:b6:7f:44:7e:4a:0a:b3:9f:32:11:b2:2c:7e:4c:
68:82:4b:d1:37:8d:45:98:5c:3d:9b:71:7d:58:e2:b6:2d:2e:
98:4f:4d:c4:3e:8e:94:40:10:dc:eb:9b:e6:ad:cb:12:a7:6c:
99:92:4e:dd:fd:69:00:a5:11:e7:7e:e0:ba:0b:d7:51:f6:27:
01:5c:c7:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:54 2024 by rpki-client on console-ams.rpki-client.org