Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/G6O-cdt4Ik3gYzgiFHgLIyU23gY.roa
File: G6O-cdt4Ik3gYzgiFHgLIyU23gY.roa (raw, json)
Hash identifier: rVAKbUH0FZGhg9NWlIMwTjzByGAIzwuX7PR+MvCzI9M=
Subject key identifier: 1B:A3:BE:71:DB:78:22:4D:E0:63:38:22:14:78:0B:23:25:36:DE:06
Certificate issuer: /CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Certificate serial: 018E7C7F932473F366309092BCA7EC9D2EBD
Authority key identifier: 45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/G6O-cdt4Ik3gYzgiFHgLIyU23gY.roa
Signing time: Tue 26 Mar 2024 20:41:59 +0000
ROA not before: Tue 26 Mar 2024 20:41:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212150
IP address blocks: 91.217.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 20:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7c:7f:93:24:73:f3:66:30:90:92:bc:a7:ec:9d:2e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Validity
Not Before: Mar 26 20:41:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ba3be71db78224de063382214780b232536de06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1a:25:66:d0:9e:74:29:d7:75:70:fa:be:f7:
c2:58:83:db:43:2d:03:e9:d5:2e:0c:4f:50:4a:32:
47:26:6c:17:57:f5:cc:79:96:8a:42:50:c0:f8:63:
c8:a9:20:66:17:31:02:8f:3b:87:12:d9:16:d3:6a:
b0:a9:1e:80:a1:97:67:eb:0f:a1:9d:3a:4f:81:23:
04:ba:46:e1:0b:c7:c6:d8:39:85:9f:ca:c1:d6:b6:
85:cb:0f:d3:68:cf:39:6f:e0:60:f7:30:e3:2c:b3:
a3:04:ab:74:b0:c9:b3:5b:4c:29:68:1a:74:a2:35:
a8:99:cd:f1:ce:f8:15:12:66:08:bd:a0:3e:6a:e9:
ae:e5:26:00:2b:c4:d3:6c:d8:18:26:d3:fd:48:46:
e3:8c:d4:cb:fc:e7:b4:b4:ad:49:28:c1:fa:16:c6:
0e:17:06:03:9a:e0:4f:00:8c:c4:bd:80:18:5b:09:
52:30:d3:12:d7:4a:df:0e:9e:28:df:e3:72:35:73:
2d:d5:19:68:a6:cf:06:14:5a:67:6b:5f:9c:06:e9:
97:9b:f6:07:bb:55:25:9b:bf:d1:fb:81:fe:b3:6b:
4a:f0:fc:da:25:ad:63:63:58:c2:95:dc:c1:ed:e2:
30:13:ef:d8:c6:76:1d:a7:38:a7:77:83:f8:d7:fd:
15:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A3:BE:71:DB:78:22:4D:E0:63:38:22:14:78:0B:23:25:36:DE:06
X509v3 Authority Key Identifier:
keyid:45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/G6O-cdt4Ik3gYzgiFHgLIyU23gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.149.0/24
Signature Algorithm: sha256WithRSAEncryption
89:83:47:4a:2b:f1:38:0c:78:4a:a5:d0:f0:50:b3:dc:d9:62:
31:81:98:a5:21:2d:fd:25:39:f4:f2:9c:8c:92:af:d7:4c:53:
e6:42:be:79:68:2a:41:ad:68:7e:04:47:36:4a:e5:f9:0b:02:
f8:ed:9a:fb:ca:73:56:db:92:72:11:bc:5c:da:9c:fa:bc:21:
75:c9:72:67:65:b3:27:01:8f:71:a0:94:38:b3:40:9a:46:cb:
b8:f7:9c:47:9d:2f:5d:56:03:66:75:9f:1e:40:10:01:b2:84:
5f:02:b1:91:51:5b:fa:30:4c:b5:ab:2a:a1:23:65:36:23:22:
d2:b7:75:64:ce:69:1d:70:f9:02:ec:24:b7:bb:ce:dd:56:13:
1c:1d:19:3d:7b:a8:17:d3:c7:a2:31:a4:32:0d:39:87:33:c6:
83:a0:1e:14:7c:a3:98:5d:37:bb:b8:8a:3a:8c:dc:bc:c2:97:
46:dd:80:2f:e3:68:fa:37:8f:c1:eb:d5:f3:8a:39:b0:06:f8:
f9:d0:57:e4:83:31:ba:86:3f:88:7f:51:b1:1e:3e:38:c5:80:
62:95:12:71:1c:9b:58:e5:fa:2e:18:1f:28:f0:f7:e2:8d:45:
18:c9:ad:e1:6f:52:c5:2d:3d:16:2d:48:08:00:80:3e:ab:ad:
ec:8c:2f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 23:28:35 2024 by rpki-client on console-ams.rpki-client.org