Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/nlruWZFC3m4NBNJsg5JyDOoFKgE.roa
File: nlruWZFC3m4NBNJsg5JyDOoFKgE.roa (raw, json)
Hash identifier: x3jc2p5ASIzZSIWQZ/cp8ys++wTA6AUtcA7CcStXkuo=
Subject key identifier: 9E:5A:EE:59:91:42:DE:6E:0D:04:D2:6C:83:92:72:0C:EA:05:2A:01
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018ABC9EC869DE7F57E25FDD2D993558C743
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/nlruWZFC3m4NBNJsg5JyDOoFKgE.roa
Signing time: Fri 22 Sep 2023 11:20:37 +0000
ROA not before: Fri 22 Sep 2023 11:20:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31863
IP address blocks: 91.190.186.0/24 maxlen: 24
91.190.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Oct 2023 13:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:9e:c8:69:de:7f:57:e2:5f:dd:2d:99:35:58:c7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Sep 22 11:20:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e5aee599142de6e0d04d26c8392720cea052a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c1:35:00:f1:aa:f5:5a:46:53:31:97:85:2b:
0f:f7:7d:dd:37:7b:c4:e3:6b:51:cc:62:24:84:7c:
35:5e:d8:5a:bb:6c:41:d3:74:bf:65:18:06:42:c2:
42:f0:3b:1f:89:26:8f:88:b6:44:78:3b:48:d4:7d:
41:56:fb:bc:b3:da:34:2d:d8:8b:6a:b4:f7:a7:23:
53:59:18:1c:e8:1e:e5:c1:90:1f:db:75:a6:92:de:
59:6c:78:7d:98:3c:62:f9:2e:33:93:88:3c:6b:d3:
5a:33:0a:3a:f5:1f:69:7f:30:c2:1b:0e:e3:dd:01:
43:2d:c1:0c:dc:63:6a:a3:92:e2:3a:75:f1:21:83:
53:74:5b:ce:e3:eb:38:3a:18:8b:10:80:ec:cf:02:
f0:ea:23:f0:62:b0:6d:db:8b:7d:ae:3f:58:d3:cf:
6a:de:c2:dc:7f:5e:49:8c:fc:ea:f7:12:c2:01:30:
3a:c2:ad:37:f6:e1:19:5b:9e:a7:4b:d2:61:09:af:
0b:6b:a8:31:52:71:b1:70:e1:cc:28:e9:08:f4:4a:
c9:e2:2b:fc:6c:82:41:5a:07:6c:e9:7a:fb:8f:c1:
b0:c7:43:00:41:ea:e2:f6:86:2b:31:5e:8f:de:5c:
93:e3:68:25:ef:cf:b1:ab:39:ab:d8:73:e9:03:fc:
47:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5A:EE:59:91:42:DE:6E:0D:04:D2:6C:83:92:72:0C:EA:05:2A:01
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/nlruWZFC3m4NBNJsg5JyDOoFKgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.186.0/24
91.190.191.0/24
Signature Algorithm: sha256WithRSAEncryption
09:50:07:d0:87:f0:1c:18:b4:ff:f0:b6:14:8d:6a:e0:2c:fb:
d8:3f:6b:73:38:1c:25:68:c5:a2:3c:30:16:c3:e3:d6:ac:29:
a9:e5:1f:0d:fc:ea:1a:16:17:d9:9a:65:52:b8:88:8c:ba:a9:
fc:b9:94:b5:cd:a6:4d:b8:08:f7:f2:e7:5e:b3:fa:83:b6:47:
52:1a:52:1a:10:cd:ba:9f:18:76:4a:bf:b4:f4:df:ac:f5:3e:
bd:04:5f:e6:73:d6:0d:bc:b5:9d:65:90:92:4e:15:98:e6:33:
b9:7f:9f:70:d5:1c:a1:54:5a:7b:50:c8:61:d9:9c:49:16:31:
a8:15:d7:cc:21:d3:6d:11:c0:92:06:3d:08:5b:3d:3d:aa:a9:
c4:c2:3b:e6:91:77:2b:94:af:db:f7:a1:33:f1:19:98:46:ec:
37:87:65:f5:f1:af:e9:d4:b1:b9:be:1c:3b:c9:f7:21:c4:45:
0c:7a:f5:1c:4d:fe:96:6d:eb:55:a3:4f:09:25:43:7f:a5:a3:
a5:bf:e6:a2:2a:c1:71:bd:7e:99:18:a8:a6:62:ce:e0:e9:e8:
77:3a:6b:da:84:e2:00:16:5c:39:64:d5:90:57:9b:fd:4c:4d:
54:a7:c1:47:05:d5:d7:27:d2:00:6b:e1:dc:b8:38:d7:eb:06:
00:ac:a0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:21 2024 by rpki-client on console-ams.rpki-client.org