Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/5Ocnicw1lZcu1YK8ap91AmB0wCs.roa
File: 5Ocnicw1lZcu1YK8ap91AmB0wCs.roa (raw, json)
Hash identifier: xHWHHsdqJ8ibX6DikdUwaDvRhrEoW8QNR6PBNrVrBU4=
Subject key identifier: E4:E7:27:89:CC:35:95:97:2E:D5:82:BC:6A:9F:75:02:60:74:C0:2B
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018FDD515CEE26EEC84455E51A3B9DE416E6
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/5Ocnicw1lZcu1YK8ap91AmB0wCs.roa
Signing time: Mon 03 Jun 2024 08:57:27 +0000
ROA not before: Mon 03 Jun 2024 08:57:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42689
IP address blocks: 91.190.188.0/24 maxlen: 24
91.190.190.0/24 maxlen: 24
92.61.96.0/24 maxlen: 24
92.61.98.0/24 maxlen: 24
92.61.99.0/24 maxlen: 24
92.61.100.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 11 Jun 2024 18:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:dd:51:5c:ee:26:ee:c8:44:55:e5:1a:3b:9d:e4:16:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jun 3 08:57:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4e72789cc3595972ed582bc6a9f75026074c02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:1d:10:b7:53:67:a0:4f:4e:c2:ec:48:b2:
2e:64:20:a7:e8:9e:85:1b:e4:5a:5b:97:32:24:68:
3d:a7:9e:19:0d:c4:b8:68:75:5e:7b:ae:0e:76:be:
fe:04:f6:4e:0e:a6:bb:34:4c:f6:89:21:41:99:e9:
0e:cb:17:5d:2d:9b:e0:24:97:98:59:a6:b6:1e:f2:
78:73:a4:45:cf:70:f0:ff:7d:c8:f4:15:49:a2:a9:
37:78:df:a2:21:80:da:00:5f:dd:c9:6a:9f:61:4c:
5a:ec:52:9e:e0:c5:df:bb:cf:c8:7c:04:3f:b3:6e:
37:92:50:9c:4e:f7:3c:2d:5b:56:22:03:b7:ec:12:
cc:27:bd:92:58:57:c8:9c:01:3a:82:55:1f:db:06:
64:fc:76:66:eb:22:0a:79:4b:05:14:2a:5e:19:04:
a1:2b:a0:c9:67:a3:e5:3e:79:f4:c7:79:b0:27:75:
8d:38:19:7f:b3:a0:06:9b:ee:4d:21:73:e1:69:fd:
55:78:4e:d1:a3:0c:86:c1:34:0e:18:f4:ee:9e:96:
55:39:c0:bd:6f:37:13:50:b3:9c:43:b0:9c:2d:9f:
d0:28:5f:56:20:58:ae:4a:e8:77:22:84:bb:d9:46:
fc:44:82:24:c0:8d:bd:7d:59:ea:f0:57:8f:20:73:
5a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E7:27:89:CC:35:95:97:2E:D5:82:BC:6A:9F:75:02:60:74:C0:2B
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/5Ocnicw1lZcu1YK8ap91AmB0wCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.188.0/24
91.190.190.0/24
92.61.96.0/24
92.61.98.0-92.61.101.255
Signature Algorithm: sha256WithRSAEncryption
91:80:57:9c:b8:3b:5a:8f:c0:df:99:39:5d:b6:44:37:4e:12:
9d:a7:0e:91:71:d1:60:54:dd:ad:cd:28:1f:b4:b6:53:05:88:
64:6d:94:2e:4b:6c:9b:9a:31:a3:fb:e4:f6:e4:d6:7b:6d:3e:
89:f2:bd:6a:1f:e9:c1:6c:70:ba:24:b3:6d:97:1a:ba:fe:86:
36:50:01:57:76:4d:d0:4a:8a:09:4d:ef:bd:1e:be:c6:e4:b7:
73:d9:17:62:cf:d7:7f:30:0a:40:70:6c:29:ec:58:77:94:42:
40:4c:91:fc:47:82:52:d2:81:5e:b2:d8:fc:46:ac:fa:bd:c1:
97:ec:e4:2e:35:f9:c4:09:c4:11:c1:be:40:ef:1f:ca:2a:75:
49:47:74:73:2e:79:be:fe:e8:98:97:79:ce:ef:92:2f:0e:b8:
26:fb:13:89:e6:d4:9f:fe:61:a8:c1:d0:fa:b4:ee:1c:7d:1e:
f4:96:96:e1:54:67:93:aa:18:82:15:3c:29:95:a9:73:96:74:
ee:8e:eb:d3:00:99:4b:8d:d1:e0:2f:4e:71:b5:e9:24:b3:2f:
70:fb:7e:9c:a2:18:9b:5a:ec:27:82:b0:1d:ef:8f:43:38:c4:
3c:2a:60:65:80:ab:8a:2d:7f:63:f4:c5:ed:b7:14:83:1c:2a:
39:45:18:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 20:46:52 2024 by rpki-client on console-fra.rpki-client.org