Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/uRtmt5Ejkods6TmKjOuHZa0CwjE.roa
File: uRtmt5Ejkods6TmKjOuHZa0CwjE.roa (raw, json)
Hash identifier: sUfdamYldwGWDLyPMr1PJ5edQ9pyasSKwq7yihR21/I=
Subject key identifier: B9:1B:66:B7:91:23:92:87:6C:E9:39:8A:8C:EB:87:65:AD:02:C2:31
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 0186694E7EC3384C25F0F432D512BD677760
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/uRtmt5Ejkods6TmKjOuHZa0CwjE.roa
Signing time: Sun 19 Feb 2023 10:53:17 +0000
ROA not before: Sun 19 Feb 2023 10:53:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48108
IP address blocks: 91.241.47.0/24 maxlen: 24
193.19.110.0/24 maxlen: 24
91.203.235.0/24 maxlen: 24
193.43.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:69:4e:7e:c3:38:4c:25:f0:f4:32:d5:12:bd:67:77:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Feb 19 10:53:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b91b66b7912392876ce9398a8ceb8765ad02c231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:50:03:66:32:ec:16:51:58:70:1b:0e:6b:
9f:f6:66:43:e4:2e:36:6a:84:20:c2:10:96:eb:2a:
81:1a:44:28:25:da:e2:27:57:27:7c:d0:6a:b7:e5:
b2:46:30:de:a2:19:52:87:8c:b4:8b:c3:eb:ef:0e:
73:00:ae:ca:39:95:ac:ca:3a:97:70:28:7d:5a:a8:
34:6f:ce:21:3f:cc:be:84:a3:f2:bc:15:b4:74:d0:
b7:63:ba:35:bf:21:d8:c8:df:23:05:77:a4:62:53:
26:66:7e:eb:59:86:28:e0:51:a1:47:6c:27:a2:83:
ff:ae:53:a6:ef:69:50:65:a5:51:88:ff:cc:06:ff:
79:dd:69:62:59:71:51:db:10:b3:0f:45:ef:1d:a6:
20:ed:4f:67:93:36:1e:1a:8d:f4:83:48:65:52:82:
77:e2:55:03:f6:4a:c9:39:0a:40:94:17:75:f3:21:
4c:e8:0a:1d:e3:16:e7:a0:ed:f2:5b:ff:a8:64:cb:
9f:1d:a8:5e:a8:b8:a2:16:b6:40:f6:71:a2:b2:15:
15:0a:41:2c:e1:54:d6:e2:05:fd:5b:c5:30:af:a2:
2e:3c:3d:df:2d:f3:56:78:03:98:ee:64:ec:77:df:
7a:f6:3a:a0:8d:37:44:14:42:8e:a2:8f:b0:58:da:
c8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1B:66:B7:91:23:92:87:6C:E9:39:8A:8C:EB:87:65:AD:02:C2:31
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/uRtmt5Ejkods6TmKjOuHZa0CwjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.235.0/24
91.241.47.0/24
193.19.110.0/24
193.43.248.0/24
Signature Algorithm: sha256WithRSAEncryption
77:7f:b9:81:31:21:49:8d:11:4e:b7:7e:da:bc:70:9a:78:e6:
ba:03:db:5f:47:5c:dc:ca:46:99:d5:9b:3c:d7:12:f0:c8:9f:
74:1c:3f:6a:b2:62:0e:63:4c:4d:fb:a4:50:f0:20:73:ca:88:
54:44:aa:e5:f2:fd:51:59:ba:73:87:24:e8:80:56:6d:5c:d6:
60:1e:e8:23:21:e8:b6:8c:5e:7a:93:02:b3:70:99:91:72:6b:
31:b3:6c:c4:76:78:e4:ef:25:31:a9:47:fa:46:b9:f0:5e:86:
7e:59:80:58:4c:d1:b8:51:37:b5:f2:33:77:39:b6:b9:b9:9b:
c9:9c:37:b0:e2:81:bc:c8:20:57:5c:6c:37:3c:1d:1e:71:25:
07:cc:82:a2:ed:a1:26:1d:d4:98:a0:46:f7:41:99:ad:d3:de:
9b:89:43:80:cd:da:73:3d:c3:32:90:74:db:d9:ab:db:01:03:
d0:c2:d1:ee:d8:09:2f:07:e0:4f:56:af:88:3f:bd:36:2e:5f:
7d:2c:6b:bc:18:ef:9f:4a:5a:97:26:9c:a0:7e:81:93:84:50:
d1:56:69:e1:45:25:d8:ee:e7:fc:3a:d9:27:32:43:ce:b9:9b:
d8:58:2f:d7:89:97:5e:61:b7:d3:7b:a3:26:6a:37:b4:c8:04:
f4:a8:e6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:52 2024 by rpki-client on console-ams.rpki-client.org