Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/5II-3eCVVJq0zVPU4x627nBKY68.roa
File: 5II-3eCVVJq0zVPU4x627nBKY68.roa (raw, json)
Hash identifier: 6NFzrZ389Iywj08a57pQLG5X1ZxVamCg9kaW04k3zWo=
Subject key identifier: E4:82:3E:DD:E0:95:54:9A:B4:CD:53:D4:E3:1E:B6:EE:70:4A:63:AF
Certificate issuer: /CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Certificate serial: 01861D0C49AB89B4DB517F2C5A3147DC307A
Authority key identifier: E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/5II-3eCVVJq0zVPU4x627nBKY68.roa
Signing time: Sat 04 Feb 2023 15:29:49 +0000
ROA not before: Sat 04 Feb 2023 15:29:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8811
IP address blocks: 91.231.148.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1d:0c:49:ab:89:b4:db:51:7f:2c:5a:31:47:dc:30:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Validity
Not Before: Feb 4 15:29:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4823edde095549ab4cd53d4e31eb6ee704a63af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4b:37:81:2c:73:50:a9:5d:77:7c:3a:63:dc:
d8:a0:8a:43:61:99:af:91:0d:14:df:46:23:b6:2c:
de:bb:c7:e3:97:fa:79:d4:b9:b4:d4:7e:7f:ae:0a:
dd:75:d5:50:45:e7:6e:ca:ce:b6:74:73:e8:8b:48:
2a:1b:11:eb:41:3e:fa:e0:67:1b:9b:78:da:f6:bd:
66:dc:e8:6d:47:b2:cb:8b:47:5d:e1:19:3a:11:92:
5f:c7:17:49:f1:b3:a9:55:20:bf:8c:99:81:9c:ba:
f4:1b:52:ba:95:18:bf:7f:26:41:84:25:e0:fb:ae:
67:2e:f5:87:0a:fe:b3:91:54:9e:d1:7c:07:50:14:
90:dc:b9:e4:67:3e:59:09:6d:b1:1c:8a:85:f6:0c:
88:59:b1:cd:f1:bd:61:7f:0c:b9:67:4a:64:9e:be:
9c:84:69:9b:f6:a1:75:05:e4:70:b2:91:62:80:8e:
65:2a:5f:1f:93:57:ad:f6:b1:5c:67:f4:e0:26:66:
dc:ba:ca:32:c0:66:a0:fc:7f:97:27:03:ad:c4:ce:
cf:a8:e4:88:2c:58:c3:0b:98:4f:b5:cb:d8:84:6b:
01:1b:67:79:29:b7:ac:4c:42:8d:46:57:ed:95:31:
38:6b:a3:1e:fd:28:b5:0b:93:59:b7:b0:77:f7:cc:
ec:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:82:3E:DD:E0:95:54:9A:B4:CD:53:D4:E3:1E:B6:EE:70:4A:63:AF
X509v3 Authority Key Identifier:
keyid:E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/5II-3eCVVJq0zVPU4x627nBKY68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.148.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:2f:0b:b6:6d:25:c7:f9:1c:4c:94:2d:0e:d6:27:31:84:79:
41:fb:70:e0:2d:c0:19:75:fb:45:55:d2:02:dc:47:2d:69:e4:
80:62:65:a2:3c:2d:82:dd:da:29:27:10:7d:f7:8a:b2:b5:8d:
82:2f:be:a9:af:59:e0:47:9b:bc:c4:2f:c9:7f:15:b3:a5:6d:
65:81:b4:c8:2e:90:f7:35:4d:4b:43:3b:3b:8c:03:2e:ef:ff:
04:d9:35:0a:cc:10:d6:94:db:31:35:21:81:9a:41:0f:f1:e9:
8a:09:ab:33:84:af:5f:ee:84:72:1a:18:6f:8e:95:58:86:60:
b2:f9:c6:b4:60:ad:ad:71:c9:8b:1c:b3:0b:9b:45:1f:08:f5:
fd:28:c2:d4:fa:27:a9:04:4b:ed:b0:d5:94:91:f1:b8:0a:2f:
6b:ac:18:36:20:22:20:cc:a7:50:d0:ee:31:39:d6:05:dd:3c:
0d:02:10:2d:29:0f:b6:37:b8:31:a8:f4:09:75:46:23:01:0c:
e8:82:81:f9:39:4d:e8:ba:44:9b:31:50:55:21:52:ef:2c:b0:
14:43:d0:3a:fc:ce:63:57:c6:78:8d:c2:81:37:8f:1c:d1:37:
29:73:96:27:91:8b:39:56:87:24:6b:88:3b:f3:59:a1:54:b0:
31:5e:61:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:12 2024 by rpki-client on console-fra.rpki-client.org