Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/1-xr4jpCE5i9yvT8pano9wF4Qh5I.roa
File: 1-xr4jpCE5i9yvT8pano9wF4Qh5I.roa (raw, json)
Hash identifier: L9dsiuRcUDhQU9swjjPJNM6fb/1d7RlYHQhpLAL46gM=
Subject key identifier: FB:1A:F8:8E:90:84:E6:2F:72:BD:3F:29:6A:7A:3D:C0:5E:10:87:92
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 0188E6F77219AC386D182E4FCA21432228F4
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/1-xr4jpCE5i9yvT8pano9wF4Qh5I.roa
Signing time: Fri 23 Jun 2023 06:35:56 +0000
ROA not before: Fri 23 Jun 2023 06:35:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197695
IP address blocks: 91.204.75.0/24 maxlen: 24
91.204.74.0/24 maxlen: 24
91.204.73.0/24 maxlen: 24
91.204.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e6:f7:72:19:ac:38:6d:18:2e:4f:ca:21:43:22:28:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Jun 23 06:35:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb1af88e9084e62f72bd3f296a7a3dc05e108792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:98:f9:b0:55:b7:46:a1:b0:81:36:8a:f3:9c:
1b:20:e1:ca:22:bf:44:de:21:24:49:e7:9f:fd:71:
76:85:71:60:42:f0:e0:80:63:b6:71:88:a4:f5:94:
78:ec:77:a6:8d:63:31:d3:c3:a3:7e:3e:ab:95:55:
ac:36:fd:98:ce:50:32:50:d6:fc:f3:61:b6:4e:80:
50:62:4f:34:e9:14:90:71:78:d3:df:44:61:29:9f:
7a:59:e3:f2:29:00:11:5b:4e:f3:05:19:76:a3:d1:
1e:d9:81:b5:e3:23:d5:fc:ac:63:9a:14:8a:e8:19:
8d:d7:bf:c0:d1:1d:8d:65:aa:34:7d:9e:f2:01:91:
74:92:06:34:39:9f:a3:0e:66:66:66:74:b3:9d:53:
3b:db:56:34:8f:12:5f:9c:da:d6:49:ba:a0:83:71:
7f:ac:13:be:82:8c:e3:ba:8e:f4:2a:c2:dc:9f:ab:
c0:37:06:28:fa:b8:6d:b9:53:24:50:99:68:d8:51:
65:e3:ca:15:01:aa:53:cf:74:17:d0:25:8c:6a:77:
7b:7e:6c:97:90:36:c9:8d:8b:d4:02:8a:85:c0:27:
c9:61:bd:57:1e:57:c2:cf:7f:03:31:31:8d:e3:0d:
ff:6b:8e:ef:3f:bf:7c:78:ef:47:4b:40:85:4e:fe:
ca:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1A:F8:8E:90:84:E6:2F:72:BD:3F:29:6A:7A:3D:C0:5E:10:87:92
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/1-xr4jpCE5i9yvT8pano9wF4Qh5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.72.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:b4:20:51:13:24:df:f9:d4:58:01:de:87:37:95:bc:5a:5a:
80:76:3e:c9:2d:27:23:fd:ba:58:4b:51:fd:e9:35:4f:37:fb:
36:c1:e0:7c:4e:ed:e5:27:6f:7c:85:23:ed:98:83:1c:a8:f7:
4c:97:28:36:19:03:26:58:d1:dc:01:36:00:cc:62:3a:7b:06:
af:02:ac:93:f5:4c:f1:de:ec:57:a0:c0:8e:c1:9a:19:2b:70:
78:3b:8e:f1:a4:f3:49:2d:cb:87:e2:e4:bb:18:ac:81:fc:37:
3e:ca:61:fd:c6:7a:80:c8:52:07:98:fe:f9:ec:ec:d8:98:2c:
ec:ed:43:24:27:56:9f:c6:ab:97:53:76:8f:b7:fa:90:4e:f1:
be:6f:34:92:d7:39:26:5e:77:a6:49:f3:b3:e7:4c:c3:be:e3:
b0:8e:a2:23:5e:f2:49:27:86:a3:c9:87:bd:25:0e:be:22:65:
a6:bf:21:10:53:1b:a3:a9:6f:f7:1d:23:aa:12:29:75:2f:79:
1f:49:c2:8c:b8:17:a8:e9:db:41:78:34:c1:79:db:ab:d5:08:
5f:a5:fd:18:2d:a8:ef:c6:30:e7:55:78:6c:85:65:bb:e6:25:
4c:f8:d8:c0:6d:00:fb:cd:af:83:db:88:29:dc:21:e2:ff:eb:
9c:96:53:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:33 2024 by rpki-client on console-fra.rpki-client.org