Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/15ZeWgxlon7gevoLEyybnNsicy4.roa
File: 15ZeWgxlon7gevoLEyybnNsicy4.roa (raw, json)
Hash identifier: IqJouPkL2bpnK5lAiDk1gj64ebK7tZ2kri446xR8IJg=
Subject key identifier: D7:96:5E:5A:0C:65:A2:7E:E0:7A:FA:0B:13:2C:9B:9C:DB:22:73:2E
Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial: 01856EB8E7BA8A57D839F5C9B9FA67B47B4F
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/15ZeWgxlon7gevoLEyybnNsicy4.roa
Signing time: Sun 01 Jan 2023 19:04:49 +0000
ROA not before: Sun 01 Jan 2023 19:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 91.213.126.0/24 maxlen: 24
2a12:7280::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:e7:ba:8a:57:d8:39:f5:c9:b9:fa:67:b4:7b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Validity
Not Before: Jan 1 19:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7965e5a0c65a27ee07afa0b132c9b9cdb22732e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ad:9c:4b:55:03:18:b6:13:59:92:2f:12:eb:
5d:2f:50:3f:c8:57:00:97:4a:31:da:52:ce:4a:a1:
1e:84:3d:ec:ac:a6:69:c4:46:09:c9:77:24:7a:d6:
4c:51:b0:0c:cf:5d:a0:7a:1b:00:7e:f2:19:32:c1:
da:bf:ca:62:d2:72:8d:76:ca:0a:11:5d:46:97:d6:
44:1e:93:e4:b1:40:89:e8:9e:9b:9a:9d:af:1b:7b:
87:29:39:70:e9:fc:a3:f0:13:4f:24:6c:09:fd:1d:
b2:44:40:7d:d6:dc:a8:e9:52:ee:d8:6b:11:1a:22:
1f:1b:91:aa:f0:64:71:3f:e8:3c:dc:cb:f3:ea:70:
04:ad:06:c6:47:14:fd:2f:42:f7:0a:45:d3:7e:97:
aa:4d:3c:da:01:ab:50:f8:5f:48:1e:f8:d2:68:9a:
15:7a:4d:7b:25:6f:2b:6e:1f:60:78:23:7f:ab:b8:
d6:ed:c4:0f:c9:88:3a:90:6b:66:75:4a:e2:70:70:
fc:f6:2e:cc:56:61:85:e6:78:97:ca:b7:f6:66:98:
be:64:59:e4:cc:88:31:e3:26:86:1b:70:2f:13:73:
c5:0b:d7:aa:f7:ad:01:40:80:dc:94:4b:be:23:10:
f3:8d:b4:d0:a4:95:17:12:c4:2f:12:47:6e:eb:15:
82:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:96:5E:5A:0C:65:A2:7E:E0:7A:FA:0B:13:2C:9B:9C:DB:22:73:2E
X509v3 Authority Key Identifier:
keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/15ZeWgxlon7gevoLEyybnNsicy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.126.0/24
IPv6:
2a12:7280::/29
Signature Algorithm: sha256WithRSAEncryption
57:08:b9:b4:13:4e:a6:db:ee:3a:bc:22:f1:ca:88:15:45:74:
dc:03:ac:aa:fc:d3:b4:76:56:9c:c0:7f:69:e4:24:ed:fb:36:
3b:ac:13:40:67:70:4e:db:1a:eb:0f:d9:9a:d6:85:5b:11:35:
2f:52:9e:3a:1a:46:d7:6d:ca:4f:c4:e8:81:0a:7b:f5:03:e8:
95:4e:8c:fd:f0:56:60:64:76:bb:0c:0c:d7:2c:57:82:6f:66:
b4:2e:89:da:70:54:31:80:0d:38:df:b7:8b:ff:97:c5:50:7a:
77:a6:cd:3c:be:00:4b:02:8d:4f:41:ef:81:24:ff:31:cf:03:
58:33:23:53:d7:73:6a:25:d3:03:eb:85:ea:96:99:69:b5:b6:
ba:72:5d:d4:da:38:d9:d5:17:90:c4:49:15:f4:fc:72:54:21:
8b:50:c8:86:6d:e3:11:64:25:52:7b:90:ea:30:0a:cc:e7:f9:
70:84:9d:56:9d:c8:0e:5e:c1:12:1c:d4:df:68:bb:bb:0b:d8:
81:8d:4b:60:26:cd:0d:bb:9f:b0:22:da:e8:c2:71:cf:98:75:
f4:36:58:05:a7:f0:63:f8:62:90:56:44:dc:27:36:3c:5b:44:
39:83:67:2b:ea:67:2a:db:49:64:a3:b2:55:cc:6c:ca:3b:d0:
96:a7:ef:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:45 2024 by rpki-client on console-fra.rpki-client.org