Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/is0FHXZBNwAlL81PMtHkENo89Bs.roa
File: is0FHXZBNwAlL81PMtHkENo89Bs.roa (raw, json)
Hash identifier: at0FOzCfaoeGM1SgjZCoAS85ituJW2GF0Vji6meYaKY=
Subject key identifier: 8A:CD:05:1D:76:41:37:00:25:2F:CD:4F:32:D1:E4:10:DA:3C:F4:1B
Certificate issuer: /CN=122a2ba3cc18c998501309ecde042706af5b845a
Certificate serial: 0189E97A5D648D573A824D963712382628DD
Authority key identifier: 12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/is0FHXZBNwAlL81PMtHkENo89Bs.roa
Signing time: Sat 12 Aug 2023 11:20:57 +0000
ROA not before: Sat 12 Aug 2023 11:20:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56690
IP address blocks: 91.226.172.0/24 maxlen: 24
91.226.172.0/22 maxlen: 22
185.250.60.0/22 maxlen: 22
91.226.175.0/24 maxlen: 24
91.226.173.0/24 maxlen: 24
91.226.174.0/24 maxlen: 24
2a09:8880::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 13 Sep 2023 13:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e9:7a:5d:64:8d:57:3a:82:4d:96:37:12:38:26:28:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a2ba3cc18c998501309ecde042706af5b845a
Validity
Not Before: Aug 12 11:20:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8acd051d76413700252fcd4f32d1e410da3cf41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dc:af:ae:db:26:bb:32:6b:f5:43:83:65:69:
19:3c:5d:cc:da:a7:7c:39:86:f3:52:b6:23:f0:ac:
a2:c0:54:c8:6f:79:84:ad:c3:1c:16:8e:66:02:24:
c3:03:dc:ff:ae:4a:0a:59:7a:66:03:03:a9:44:49:
5e:de:d2:dc:78:4f:0c:3e:d6:98:69:60:8c:68:00:
bd:12:6e:74:cd:5b:e6:d7:d8:b9:5c:51:eb:e3:b9:
22:6f:a7:96:5c:ec:0a:b3:84:4d:12:27:51:86:c3:
d4:13:06:9c:72:f1:c8:4e:16:97:c5:a6:9d:05:40:
11:4b:14:13:69:66:1c:d6:0d:d6:8a:3b:e2:a1:e8:
6b:c8:02:11:25:47:0d:81:08:10:89:4b:e1:48:1e:
b5:c6:db:34:50:f2:a3:97:90:31:3e:cb:2d:1b:c9:
ae:02:ee:a2:5d:b7:e7:db:f0:4f:8c:b6:64:69:6a:
93:76:e8:ca:a8:f5:cd:d7:23:09:ae:49:f7:95:ae:
5a:f6:b9:30:d8:a3:92:56:cb:b0:86:95:2c:dc:b9:
e7:d4:d3:77:8b:00:15:3d:b0:ce:21:72:b2:f8:ee:
71:f3:1f:98:f0:dd:70:5b:cb:a3:29:e5:87:91:36:
5f:ea:b5:a3:99:43:94:ce:cc:5a:4b:91:2c:35:6f:
51:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CD:05:1D:76:41:37:00:25:2F:CD:4F:32:D1:E4:10:DA:3C:F4:1B
X509v3 Authority Key Identifier:
keyid:12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/is0FHXZBNwAlL81PMtHkENo89Bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.172.0/22
185.250.60.0/22
IPv6:
2a09:8880::/36
Signature Algorithm: sha256WithRSAEncryption
67:8f:b8:13:be:aa:95:1e:2b:c5:1f:7f:c8:5c:74:18:b4:1b:
b5:d7:b9:a4:5a:87:8c:75:be:67:40:a4:22:d3:92:a0:93:88:
91:80:c0:4b:40:f5:a8:b0:87:d6:5c:9c:5f:9b:3d:b9:c5:d6:
e9:6d:ee:a5:11:cf:1a:2c:dc:08:94:24:1d:71:74:c8:71:b7:
90:23:f1:f7:d0:10:3e:7a:4e:0e:06:21:91:e8:bb:31:ae:1a:
2e:23:77:c8:64:d5:ab:54:ac:0d:f1:fe:2b:2a:08:82:79:ca:
19:4e:d8:63:ed:cf:a1:9b:de:01:5e:bd:c3:f5:f3:b6:f7:b2:
7b:77:1f:be:23:54:ab:22:bd:4f:e6:57:55:75:a3:6c:63:eb:
02:1f:00:b9:71:fe:f8:4e:59:48:8d:02:73:2a:11:d3:eb:d3:
b9:cd:06:d0:96:d9:7c:2f:52:c1:55:89:b9:37:5d:38:15:f5:
30:27:b0:53:9b:77:12:41:fc:d2:4f:e6:0c:9b:a3:a2:95:a3:
f3:56:d2:81:c7:13:df:0a:56:3d:85:e1:89:59:36:b2:79:5d:
09:5b:86:df:0b:0c:fe:ae:c7:c9:bb:32:6f:5e:64:f1:ee:8b:
39:42:98:d9:99:7f:26:8c:b8:fa:93:04:d5:02:76:d2:06:bd:
8d:64:1c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:01 2024 by rpki-client on console-ams.rpki-client.org