Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/EfkqHA1_sGJJ1Kze7hGDImStaVo.roa
File: EfkqHA1_sGJJ1Kze7hGDImStaVo.roa (raw, json)
Hash identifier: p0hMswr9Ksg1JvZ90lvMvO1RZIE4tmGodlSDAEIkLfM=
Subject key identifier: 11:F9:2A:1C:0D:7F:B0:62:49:D4:AC:DE:EE:11:83:22:64:AD:69:5A
Certificate issuer: /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Certificate serial: 018EA07BF334980B0A65DAA107B5E1F995B1
Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/EfkqHA1_sGJJ1Kze7hGDImStaVo.roa
Signing time: Tue 02 Apr 2024 20:24:21 +0000
ROA not before: Tue 02 Apr 2024 20:24:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199760
IP address blocks: 91.198.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 May 2024 08:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a0:7b:f3:34:98:0b:0a:65:da:a1:07:b5:e1:f9:95:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Validity
Not Before: Apr 2 20:24:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11f92a1c0d7fb06249d4acdeee11832264ad695a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ea:38:ee:90:be:0e:76:ba:2c:2a:20:6f:26:
77:f9:1f:3b:33:ea:9c:ca:12:b4:1a:b7:4f:3b:f7:
ca:db:95:5a:d2:cf:5e:cf:9a:73:66:a6:80:4a:2d:
6d:27:25:bf:64:8c:10:36:aa:8e:d0:f8:40:15:ce:
da:0c:f7:27:cb:95:24:8a:42:51:f4:c1:ce:dd:bd:
06:02:95:49:23:a7:f3:1f:9e:81:bb:3a:38:55:0b:
3a:7c:76:11:33:22:2a:df:b0:7c:b5:22:08:f4:f3:
46:bd:08:94:91:87:05:f6:83:b0:c0:8c:5a:e2:9b:
02:ef:dc:3e:ff:d5:e5:45:cf:9b:d0:09:47:1f:ef:
92:ae:af:e5:a4:ae:13:47:86:5b:9b:55:59:ad:ea:
48:d6:bd:df:35:a9:9c:97:54:00:1f:61:09:03:01:
1b:2a:b1:6d:d8:25:0c:1b:10:95:99:35:95:7b:e9:
dc:a3:fd:c9:4e:b1:dd:c1:a9:ea:1f:a5:5a:76:41:
e8:e0:92:13:b1:18:9e:3b:e9:24:c2:7e:89:d0:29:
39:d7:20:7e:ab:dd:92:79:eb:06:f3:3a:94:80:06:
1e:a9:5f:84:c3:22:99:31:95:48:ca:1a:52:00:f2:
e0:81:d2:43:40:be:79:06:c6:77:26:6b:62:2f:a3:
5a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F9:2A:1C:0D:7F:B0:62:49:D4:AC:DE:EE:11:83:22:64:AD:69:5A
X509v3 Authority Key Identifier:
keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/EfkqHA1_sGJJ1Kze7hGDImStaVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.95.0/24
Signature Algorithm: sha256WithRSAEncryption
06:33:60:a7:57:d4:df:3b:c6:a3:5b:79:24:93:a2:3e:dc:f4:
5b:16:33:71:d0:13:05:d9:51:67:5f:a3:1e:a0:5a:5f:17:c4:
ca:32:ec:4a:36:3f:b9:e7:f4:47:01:38:7f:c2:99:97:26:f6:
d7:71:a2:e6:88:da:b6:80:bc:4b:b8:7a:23:8d:8f:4b:a6:f7:
46:35:5d:57:f9:2b:53:57:44:09:aa:a3:ba:f8:8d:e9:f6:54:
60:22:ec:a4:17:2f:46:e8:5e:f8:fb:46:b9:9d:db:d2:64:8e:
6e:12:84:34:12:10:ec:85:07:48:2d:e7:d8:53:9b:28:e4:e6:
6d:bc:5c:b7:01:75:f0:57:08:6a:e6:b1:f0:82:51:ad:7d:22:
77:8b:6e:13:9c:71:2b:1e:dc:f4:a4:e5:c8:6c:af:1c:6d:1b:
36:d7:1c:30:ab:97:db:14:af:1d:db:b1:7a:d8:52:25:a7:79:
dd:3a:7d:e6:93:a4:f3:63:d1:a9:9e:ae:23:fa:5c:7b:49:33:
86:78:76:44:bd:b7:76:82:2c:89:ac:2d:41:a5:41:41:d8:78:
51:99:c3:ad:25:20:30:f3:fe:a3:d8:29:ee:3c:18:b5:a6:9d:
b8:e3:18:df:71:ac:c1:80:22:4c:ed:65:1c:c4:6e:0f:df:42:
57:0b:b5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:25 2025 by rpki-client