Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/EE1GyHZfVlJ-eHPWxXemwoi9jSw.roa
File: EE1GyHZfVlJ-eHPWxXemwoi9jSw.roa (raw, json)
Hash identifier: Cmoi6Mfc5IW1ofkeFuUalAOQg+hQRaiCmKYmLSY+BLk=
Subject key identifier: 10:4D:46:C8:76:5F:56:52:7E:78:73:D6:C5:77:A6:C2:88:BD:8D:2C
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 0189C499766459FDDA07D2A13295CE6B156E
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/EE1GyHZfVlJ-eHPWxXemwoi9jSw.roa
Signing time: Sat 05 Aug 2023 07:28:58 +0000
ROA not before: Sat 05 Aug 2023 07:28:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197937
IP address blocks: 91.190.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c4:99:76:64:59:fd:da:07:d2:a1:32:95:ce:6b:15:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Aug 5 07:28:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=104d46c8765f56527e7873d6c577a6c288bd8d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:a5:e7:83:6a:b2:8a:90:f1:83:61:31:5b:
dd:6f:58:c0:e0:13:d2:a6:20:e3:20:0e:28:3d:b7:
3e:75:2a:ab:78:84:de:96:22:52:d0:fa:b8:f8:d5:
39:25:85:8a:2d:e8:44:12:14:f3:c9:5c:2a:3d:9c:
c8:f3:29:53:65:c9:da:5a:13:0c:b7:75:3c:96:56:
0c:fa:c0:e7:76:f5:d7:4a:7f:be:18:35:f0:80:bf:
56:0f:78:f9:25:32:1a:3e:19:cd:de:7f:ae:aa:4f:
64:93:d8:e7:39:e0:bc:ae:8e:c7:09:87:e6:25:5a:
42:a2:2d:25:88:80:ab:e3:8b:69:1b:83:2e:6c:cf:
92:85:86:f8:ce:45:75:f5:95:53:2d:be:a4:b5:2d:
7e:20:07:40:87:03:0e:a1:c5:1c:db:b9:3a:e7:6b:
ea:a1:04:54:6c:4d:02:0d:74:c9:69:2d:a0:6f:5e:
dc:b3:7e:21:42:2c:bb:cb:e4:ec:07:9e:46:18:42:
29:d1:30:e6:b1:3b:37:56:3d:9d:bb:6f:65:9c:18:
66:9e:12:21:a2:cb:2d:98:f6:8d:44:d9:5c:84:ed:
76:2c:99:cf:5e:df:4b:12:8d:d2:af:23:42:98:be:
35:e0:02:3e:09:c1:8e:90:9e:3a:df:b5:d4:12:a9:
82:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4D:46:C8:76:5F:56:52:7E:78:73:D6:C5:77:A6:C2:88:BD:8D:2C
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/EE1GyHZfVlJ-eHPWxXemwoi9jSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.190.0/24
Signature Algorithm: sha256WithRSAEncryption
72:82:7a:7c:d1:90:11:c3:38:c1:1f:60:20:09:3f:21:70:af:
27:7e:91:19:2b:77:82:af:ed:dd:d2:de:b9:da:78:34:59:a6:
bd:a6:32:04:83:fa:8d:e6:d9:30:a5:bc:01:ca:c8:36:ba:bd:
42:ff:37:34:43:04:d8:79:d9:55:53:20:d4:10:ab:0d:94:2c:
9f:40:c1:da:88:53:bc:12:23:c0:7a:45:57:bb:b9:b3:13:29:
92:9b:83:8a:07:5a:1a:06:5b:a1:b8:68:b8:7d:e6:57:6d:28:
81:14:f5:60:37:6f:d6:be:e2:94:bb:30:1b:39:b5:5d:64:98:
47:bf:96:d7:7a:25:a2:8a:54:e0:06:77:f3:89:2a:d6:2a:ec:
ec:96:bc:70:fe:59:55:94:c3:df:51:30:3b:f0:fb:03:0c:20:
b0:08:c4:00:a4:cb:b9:6d:6a:17:6d:11:a7:b5:28:f8:51:78:
e8:16:17:75:54:4b:42:fb:d1:f7:d7:1e:86:81:c2:4d:1d:25:
56:28:f3:34:a2:59:ce:cf:9a:24:de:10:cd:60:73:6c:6a:ed:
f4:4a:4f:e2:22:4c:d6:e3:17:f8:04:58:9a:6a:dd:74:61:07:
f2:f3:b9:ad:a7:e3:81:fe:88:18:41:cb:b6:bd:49:83:9f:e8:
18:46:49:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 11:09:10 2023 by rpki-client on console-ams.rpki-client.org