Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/bMv5KKWpsAUIb5F839qV5MDsgqQ.roa
File: bMv5KKWpsAUIb5F839qV5MDsgqQ.roa (raw, json)
Hash identifier: 9vKoBXPdEx5/4oJZKb7PWkWOD0j+4z5wjdqXBCG7vBI=
Subject key identifier: 6C:CB:F9:28:A5:A9:B0:05:08:6F:91:7C:DF:DA:95:E4:C0:EC:82:A4
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018BFCD8B16CCDE20FB55311C7F2F30B6C2B
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/bMv5KKWpsAUIb5F839qV5MDsgqQ.roa
Signing time: Thu 23 Nov 2023 15:42:21 +0000
ROA not before: Thu 23 Nov 2023 15:42:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 92.61.104.0/24 maxlen: 24
91.190.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fc:d8:b1:6c:cd:e2:0f:b5:53:11:c7:f2:f3:0b:6c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Nov 23 15:42:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ccbf928a5a9b005086f917cdfda95e4c0ec82a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7b:58:e1:4f:8e:95:7d:d0:33:4e:ea:41:be:
83:2d:e2:da:f1:bc:7e:b8:2f:4e:bc:e8:36:21:40:
c7:cf:96:64:31:98:d1:bc:1e:23:30:a8:d4:ac:f5:
3f:9f:73:75:37:dc:21:5e:cc:4f:92:51:6b:6d:46:
af:0e:a8:68:69:c9:90:2e:90:11:37:d1:9d:87:22:
88:56:74:b4:ef:7b:ce:ea:76:e6:b2:ec:09:91:b9:
89:f1:fa:c4:3e:5b:d1:c7:24:b5:92:7a:39:b4:ff:
98:bf:be:61:7f:2f:d2:b7:f1:ad:ee:37:e1:bb:ca:
33:b6:79:ef:9b:f0:37:b4:6b:2d:4e:5c:05:e5:9e:
47:5c:ff:bf:7c:2c:16:7c:46:b2:40:0a:85:14:5c:
f3:33:c9:d6:50:43:8c:54:b1:3f:a9:07:83:cf:e6:
fe:51:c6:b9:6c:97:a9:fb:18:09:50:92:20:b1:a3:
a4:32:e5:a5:b5:58:b3:58:e2:bd:45:a3:56:af:f3:
47:a7:8e:2f:b5:17:ec:fc:b1:16:27:5f:db:e1:b3:
af:3f:86:6a:87:61:2f:d9:8d:0a:0f:fb:94:82:76:
22:2d:b8:5f:76:49:b1:7a:8a:2e:e8:d5:b1:20:6a:
79:58:1d:49:0f:ed:67:5e:36:9f:cc:47:14:6a:5f:
a2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CB:F9:28:A5:A9:B0:05:08:6F:91:7C:DF:DA:95:E4:C0:EC:82:A4
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/bMv5KKWpsAUIb5F839qV5MDsgqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.189.0/24
92.61.104.0/24
Signature Algorithm: sha256WithRSAEncryption
68:fe:9b:27:42:e3:9e:30:c0:44:e6:7c:35:9e:e9:1f:32:76:
bb:1b:81:f8:7b:37:bc:64:80:36:f1:2f:25:6a:c0:2b:08:ac:
ad:55:3b:69:10:af:22:24:62:bf:19:3b:95:15:9e:92:b1:cc:
29:b5:f6:29:df:53:d9:14:34:a9:ca:f1:ab:9b:6b:20:5d:f5:
73:b8:8f:80:ed:31:f8:b2:d9:6c:e1:3e:fc:bf:33:e1:43:2a:
60:8d:20:f4:7b:be:ca:7b:e9:89:bb:49:ef:ba:3f:2a:6d:ef:
65:76:96:35:83:56:23:78:81:7e:31:5e:fa:8b:f2:15:a1:f5:
a0:a7:5c:c0:fc:98:df:1e:65:f8:a3:6d:1d:fe:4d:eb:c1:22:
02:5a:f4:33:bc:6a:05:3d:02:7d:20:ba:55:c5:35:dc:fd:0d:
ce:dc:6c:a2:65:69:3e:d0:14:2d:59:3f:04:32:c1:74:b2:33:
90:9d:5d:d4:0c:43:36:cc:1d:84:dd:c3:cb:11:05:95:dc:e9:
49:a1:9e:63:ca:fe:4b:7b:51:7e:36:41:d5:86:c8:68:a0:3a:
66:a8:f9:e0:5d:a3:ff:76:aa:f2:37:a5:ba:dd:bb:69:d8:00:
8e:df:93:43:c1:be:f9:89:aa:a2:fc:3c:55:99:76:ad:65:90:
ef:da:86:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:21 2024 by rpki-client on console-fra.rpki-client.org