Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6e7437-7b10-4ed1-bd3b-be56d1cf73c4/1/zurQEDcXwspTk_Ug8H7SHay-6eU.roa
File: zurQEDcXwspTk_Ug8H7SHay-6eU.roa (raw, json)
Hash identifier: CCUCemYbEc+nkLr15jiSZDbIw8FVU/HFSgG9ppLcfsM=
Subject key identifier: CE:EA:D0:10:37:17:C2:CA:53:93:F5:20:F0:7E:D2:1D:AC:BE:E9:E5
Certificate issuer: /CN=e40b9ed33e8a343296829e8fa4a9aba88a0d93d3
Certificate serial: 018CC94E3A83D9454A1E23486B66964B7DBD
Authority key identifier: E4:0B:9E:D3:3E:8A:34:32:96:82:9E:8F:A4:A9:AB:A8:8A:0D:93:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Aue0z6KNDKWgp6PpKmrqIoNk9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6e7437-7b10-4ed1-bd3b-be56d1cf73c4/1/zurQEDcXwspTk_Ug8H7SHay-6eU.roa
Signing time: Tue 02 Jan 2024 08:33:16 +0000
ROA not before: Tue 02 Jan 2024 08:33:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12414
IP address blocks: 91.212.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 18:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:3a:83:d9:45:4a:1e:23:48:6b:66:96:4b:7d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e40b9ed33e8a343296829e8fa4a9aba88a0d93d3
Validity
Not Before: Jan 2 08:33:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ceead0103717c2ca5393f520f07ed21dacbee9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:99:c6:2a:38:b1:c8:d6:b8:1b:b2:53:81:
e7:c0:ff:13:12:2d:ea:94:17:8c:e1:f9:92:5a:9f:
bb:6c:6b:5a:ef:51:34:69:7f:c5:17:3a:b3:24:17:
d0:7f:84:28:43:ea:3b:19:ef:c2:67:b4:7a:65:5e:
a8:21:32:16:47:84:e4:f7:d6:4b:64:1a:17:6c:0d:
d0:eb:20:2e:95:cf:70:a0:98:f3:82:78:ff:d4:01:
4e:eb:31:ad:f4:4b:5b:fb:9f:82:40:04:9f:85:93:
25:82:ce:2e:7b:01:16:c7:ba:6e:39:17:fe:c2:bb:
b2:fb:65:fb:7b:b8:37:85:5a:92:48:1e:4b:ae:23:
78:c7:1f:11:e9:ae:7a:2a:9c:92:19:1e:70:2d:2a:
f5:ec:2f:7a:ab:2f:d1:95:5b:f9:37:6f:2f:ef:8e:
6c:dd:d4:15:50:a8:6d:df:e8:db:5f:da:9e:26:e5:
c4:e7:a2:fe:b5:13:da:0e:a3:cb:60:22:88:43:4a:
27:b1:d4:5a:e7:de:79:64:ff:45:46:91:fd:1a:32:
e7:3a:ad:1b:1a:ae:49:ee:4d:4f:3f:22:e0:19:36:
99:bd:f4:6d:07:e2:7e:2e:0e:4b:1b:d6:7a:50:17:
55:ea:3d:b0:dd:2c:1f:38:cc:b8:02:92:14:5a:80:
8f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EA:D0:10:37:17:C2:CA:53:93:F5:20:F0:7E:D2:1D:AC:BE:E9:E5
X509v3 Authority Key Identifier:
keyid:E4:0B:9E:D3:3E:8A:34:32:96:82:9E:8F:A4:A9:AB:A8:8A:0D:93:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Aue0z6KNDKWgp6PpKmrqIoNk9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6e7437-7b10-4ed1-bd3b-be56d1cf73c4/1/zurQEDcXwspTk_Ug8H7SHay-6eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6e7437-7b10-4ed1-bd3b-be56d1cf73c4/1/5Aue0z6KNDKWgp6PpKmrqIoNk9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.184.0/24
Signature Algorithm: sha256WithRSAEncryption
19:fe:d0:e9:09:84:03:e0:38:97:78:55:4d:cd:7f:c7:09:91:
d9:bd:2d:dc:af:6f:05:2d:81:a6:7d:84:21:6c:67:2b:52:09:
32:47:97:b8:79:3e:f8:43:10:49:c4:52:5c:ca:c2:ec:35:8b:
0b:f2:69:19:12:77:ff:be:1a:9a:32:8d:4a:44:3d:0f:16:0b:
4b:6a:68:b9:ac:5c:77:df:79:1f:fb:4e:7f:06:4a:41:94:a8:
92:f0:b7:18:dd:7a:2b:9c:63:49:2f:6f:ea:93:1f:d6:76:4c:
60:b5:74:6c:2d:3c:e4:a6:57:9a:dd:ea:b5:4d:d5:3f:1a:dc:
43:39:ac:42:47:09:a0:08:bc:04:8a:db:7d:1a:84:a8:2a:2d:
1c:26:24:5d:59:42:a6:28:cb:11:b1:86:3b:4d:59:d1:0f:e4:
cd:60:09:fe:99:72:e5:da:78:34:03:1b:1c:d8:9c:4f:fb:e7:
4e:09:27:06:d1:20:4d:80:63:ee:87:b4:3a:dc:da:10:58:4b:
b6:16:13:16:93:eb:d2:ec:d2:7c:38:79:fc:55:22:ab:fa:fe:
1e:b1:63:eb:96:a7:83:77:63:e9:fa:bd:5b:06:b1:46:e3:8b:
3a:d7:0b:ae:19:dc:9f:83:4b:19:db:06:bc:91:db:1b:4c:70:
a8:00:8e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 20:18:55 2024 by rpki-client on console-ams.rpki-client.org