Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/sl-clopmJ7t6zx_yqqDaEEqinzY.roa
File: sl-clopmJ7t6zx_yqqDaEEqinzY.roa (raw, json)
Hash identifier: 4dnAUrISAplcx/BDRNCqC8Bec+531N3wYQtE9Wy3aDw=
Subject key identifier: B2:5F:9C:96:8A:66:27:BB:7A:CF:1F:F2:AA:A0:DA:10:4A:A2:9F:36
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 01872CDACBB2E97C485C1A9C13AB64604FE6
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/sl-clopmJ7t6zx_yqqDaEEqinzY.roa
Signing time: Wed 29 Mar 2023 10:12:29 +0000
ROA not before: Wed 29 Mar 2023 10:12:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199152
IP address blocks: 91.241.47.0/24 maxlen: 24
193.19.110.0/24 maxlen: 24
91.203.235.0/24 maxlen: 24
193.43.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2c:da:cb:b2:e9:7c:48:5c:1a:9c:13:ab:64:60:4f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Mar 29 10:12:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b25f9c968a6627bb7acf1ff2aaa0da104aa29f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:59:34:97:e0:fa:44:38:6b:87:94:12:0c:
b8:95:fd:3a:69:9e:b1:2a:47:e5:67:a9:c0:b4:7d:
5c:42:11:3b:fc:0c:ae:7b:5c:6f:4d:46:53:45:6c:
fe:ed:2b:14:af:74:45:0c:db:39:b9:ae:f1:0d:0c:
58:30:56:f7:48:85:73:b0:b2:93:d3:7d:4f:77:f7:
df:4f:9c:76:b7:05:04:19:5f:90:20:f2:fd:c7:5e:
09:6a:ff:5f:b5:55:0b:7f:a9:b9:a8:f2:bf:82:b0:
3b:13:1b:3d:b4:56:39:c1:48:07:cf:2a:b9:61:a5:
cf:5b:db:aa:11:35:d8:09:78:ab:a2:12:3c:c0:2f:
ac:d7:a9:e2:ff:ec:e7:6c:20:44:1c:81:84:d6:e8:
8a:a8:59:5a:dc:94:78:b8:49:eb:d6:d6:21:b4:8e:
10:14:0d:83:e1:07:9c:11:a9:f8:92:ca:69:0b:84:
cf:f3:c6:17:6c:b3:15:cd:bb:0a:a0:58:ca:7d:c7:
3f:81:33:79:17:fc:e3:16:4a:c4:fc:90:78:e7:bb:
7a:44:15:9c:c6:e6:27:c9:b1:6a:67:91:9b:87:eb:
88:d4:83:ac:ab:f7:47:c9:fa:f9:50:7d:b9:b8:de:
33:7b:f6:f8:e1:2e:17:91:e1:07:92:47:7d:eb:7d:
a5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5F:9C:96:8A:66:27:BB:7A:CF:1F:F2:AA:A0:DA:10:4A:A2:9F:36
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/sl-clopmJ7t6zx_yqqDaEEqinzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.235.0/24
91.241.47.0/24
193.19.110.0/24
193.43.248.0/24
Signature Algorithm: sha256WithRSAEncryption
90:cb:b7:b7:0e:40:97:bb:be:4a:d9:2a:2d:99:a3:a7:42:ca:
2b:fe:7f:2c:cd:90:10:b1:25:97:36:0f:7c:bc:1c:04:36:fd:
b2:ba:ee:cc:6a:9f:b2:6f:b0:a6:a9:b8:13:fc:90:be:a4:42:
55:6e:b0:b2:b3:6a:4c:e4:18:86:25:2a:76:46:7b:e4:10:3b:
c7:56:4b:b0:7e:a5:d6:f6:fd:05:f9:f1:c7:d7:51:64:8f:1d:
39:6e:81:a7:e7:3d:a5:fd:25:01:55:83:42:43:d5:6c:72:c6:
63:6c:9d:25:48:83:41:1a:5c:4c:14:4e:56:3d:bc:33:8b:e7:
30:ef:31:d8:c2:de:77:26:ee:0d:d4:97:46:e4:d9:e2:68:55:
27:d6:93:fc:be:02:cc:1c:2e:e5:9d:1a:fa:d1:6c:5a:71:b6:
c3:a2:a7:55:f5:bd:7f:3c:60:6c:47:4f:6a:de:56:df:59:2a:
77:9e:89:fc:0d:f1:f3:1f:51:89:63:f1:eb:50:91:72:11:79:
f5:5d:e6:89:9b:7d:82:e2:9f:3b:85:1c:81:11:ad:81:49:c0:
c6:c5:a0:06:cd:be:3e:e6:63:1f:e9:6c:a9:c9:c8:89:53:ff:
92:c9:f5:e7:b8:e0:66:86:6b:47:d0:23:44:d0:9d:4e:18:06:
61:ce:57:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:52 2024 by rpki-client on console-ams.rpki-client.org