Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/E07x64DR-xGIsm8oj5NIMKnauvQ.roa
File: E07x64DR-xGIsm8oj5NIMKnauvQ.roa (raw, json)
Hash identifier: i3DY9qwbcOy522oKnoIQSFSIfDT+kZKqgdYNTLj8gWI=
Subject key identifier: 13:4E:F1:EB:80:D1:FB:11:88:B2:6F:28:8F:93:48:30:A9:DA:BA:F4
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 0189304C415863C0BA9325DD40211D1F791C
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/E07x64DR-xGIsm8oj5NIMKnauvQ.roa
Signing time: Fri 07 Jul 2023 12:20:51 +0000
ROA not before: Fri 07 Jul 2023 12:20:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 91.190.184.0/24 maxlen: 24
91.190.186.0/24 maxlen: 24
91.190.191.0/24 maxlen: 24
91.190.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Sep 2023 07:05:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:30:4c:41:58:63:c0:ba:93:25:dd:40:21:1d:1f:79:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jul 7 12:20:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=134ef1eb80d1fb1188b26f288f934830a9dabaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:24:d6:c0:5e:92:f7:aa:60:cb:10:5f:2d:44:
b6:f7:03:3f:6e:da:28:37:d3:5f:8c:c3:db:82:4b:
d1:2b:2e:7b:a4:ee:5d:59:dd:02:04:6c:0a:c1:c2:
94:28:d3:fa:c6:e3:67:ba:28:aa:5b:3d:10:62:9a:
e0:2e:ca:45:3b:6c:44:41:3e:62:81:6f:8e:bb:c9:
78:86:a1:9e:c5:57:60:e8:75:e8:ee:65:cc:69:01:
32:2a:57:a6:c1:e1:0f:39:6e:6a:82:45:2f:35:c3:
f9:07:90:70:4d:bb:49:e7:3d:f8:d6:32:0e:40:a3:
44:dd:b0:e6:9e:4b:9d:70:69:9e:51:57:1b:6b:17:
a8:b6:cf:ec:69:14:16:e6:19:03:70:b5:bf:a7:75:
53:20:fb:e4:79:78:72:4b:d8:ae:c3:f9:57:f1:7e:
4b:6e:25:cc:e3:2c:22:e3:a2:a3:8d:1b:9a:2b:6e:
6f:9a:52:11:f1:a1:a9:cf:8b:a9:ba:dc:8e:9d:11:
50:5b:e8:ba:a9:62:13:f3:72:05:fa:98:6c:62:68:
ac:a9:cf:2c:c4:11:62:c2:7a:db:a6:fd:69:9e:ab:
4d:1d:db:be:36:07:8b:3f:af:21:17:ed:e4:5a:3d:
c9:b2:4b:0e:65:14:cc:2b:0f:38:e7:0e:4c:a1:6b:
0c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4E:F1:EB:80:D1:FB:11:88:B2:6F:28:8F:93:48:30:A9:DA:BA:F4
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/E07x64DR-xGIsm8oj5NIMKnauvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.184.0/24
91.190.186.0/24
91.190.189.0/24
91.190.191.0/24
Signature Algorithm: sha256WithRSAEncryption
61:53:72:50:ef:22:c2:ee:6c:06:ee:6a:35:d9:87:66:17:f2:
90:29:6c:14:7c:ef:6d:c0:50:74:5a:d7:89:83:97:96:66:b7:
40:ca:ce:a4:96:2b:1d:89:e3:14:3d:74:27:8d:da:5d:c2:4d:
2c:14:87:5f:ed:eb:eb:cd:e9:d5:53:3f:64:ff:fe:69:37:29:
b0:ed:c3:90:57:45:24:d0:7c:d6:e7:fe:80:36:4e:28:81:da:
22:b2:f6:44:ae:6e:9e:16:cb:d7:df:d9:0e:eb:1a:ee:58:1c:
1a:a6:5c:46:f9:ea:e2:9d:86:fd:e0:07:ea:67:9f:7a:26:75:
35:cc:c1:27:ba:73:bd:95:cb:9c:20:4c:cb:a3:87:54:2c:ea:
69:dc:6d:4e:9d:6c:39:14:80:93:55:81:8d:7e:20:a0:68:f0:
ab:b9:02:f4:4a:96:e4:c0:50:b3:79:79:09:95:78:da:64:4e:
04:52:b9:a5:86:43:db:99:53:41:f0:aa:96:9d:1e:b4:89:52:
fc:72:55:41:cc:d4:60:0a:7d:7d:4d:78:7c:3e:48:9a:74:d7:
17:46:b3:03:74:4b:10:61:3d:02:b8:20:61:c9:71:15:01:87:
87:a0:2b:f6:92:88:0b:a8:4e:3e:34:87:25:2a:ad:52:c6:ed:
2a:78:83:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:21 2024 by rpki-client on console-fra.rpki-client.org