Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/6wAaTdfT46uXg2R-qnayWuWXFGY.roa
File: 6wAaTdfT46uXg2R-qnayWuWXFGY.roa (raw, json)
Hash identifier: tvaPzueEgwqegC0MWE+XYzYBQ4MOX4LT839NHa4YON8=
Subject key identifier: EB:00:1A:4D:D7:D3:E3:AB:97:83:64:7E:AA:76:B2:5A:E5:97:14:66
Certificate issuer: /CN=64ee0489158fe95e1991fd5ce725ea067e11a1fb
Certificate serial: 018C7CF2A6427F20BF7C45E4A506999A7E64
Authority key identifier: 64:EE:04:89:15:8F:E9:5E:19:91:FD:5C:E7:25:EA:06:7E:11:A1:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/6wAaTdfT46uXg2R-qnayWuWXFGY.roa
Signing time: Mon 18 Dec 2023 12:42:06 +0000
ROA not before: Mon 18 Dec 2023 12:42:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53856
IP address blocks: 91.218.50.0/23 maxlen: 23
91.218.48.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7c:f2:a6:42:7f:20:bf:7c:45:e4:a5:06:99:9a:7e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ee0489158fe95e1991fd5ce725ea067e11a1fb
Validity
Not Before: Dec 18 12:42:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb001a4dd7d3e3ab9783647eaa76b25ae5971466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:dd:7f:e9:a3:d1:47:22:f1:92:8e:20:84:
c4:44:4e:bc:d4:59:22:df:7c:3d:0f:87:ba:ba:52:
d0:da:b3:00:68:3c:ae:e6:69:b0:bc:55:fe:ac:e1:
2e:3d:24:03:32:8b:d8:c4:c5:e3:b6:69:0c:95:00:
1d:66:9c:d3:04:ba:69:5b:a1:aa:30:7f:57:34:bd:
25:75:e7:17:fa:a5:77:67:96:42:70:31:9a:1e:6f:
da:1c:7e:86:b9:8c:81:c5:28:3b:bf:e0:8d:03:76:
dc:5d:a6:18:47:9b:44:dd:b8:1a:00:bc:26:28:15:
07:e3:77:99:2a:b1:e4:24:b1:93:a3:ee:b9:36:7b:
9b:6f:07:30:c3:d2:d0:29:03:e6:31:a0:66:1b:d2:
a6:b0:c7:6e:56:e4:d4:55:88:92:63:ea:6b:da:42:
d1:10:73:9f:35:1f:12:b1:91:4f:76:7d:a3:22:2a:
c4:c7:46:4d:32:ee:5c:fb:6f:77:5d:0d:60:e0:42:
e0:e5:8d:28:d6:f0:60:ca:72:24:fb:74:fe:c9:58:
03:5a:8a:cc:2b:b1:a1:a9:a1:c2:96:5d:85:2e:b1:
93:02:59:95:27:70:89:9c:65:83:0d:a8:d9:45:76:
f9:bd:2b:15:e6:52:ff:47:5c:99:a4:92:08:e1:2e:
5d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:00:1A:4D:D7:D3:E3:AB:97:83:64:7E:AA:76:B2:5A:E5:97:14:66
X509v3 Authority Key Identifier:
keyid:64:EE:04:89:15:8F:E9:5E:19:91:FD:5C:E7:25:EA:06:7E:11:A1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/6wAaTdfT46uXg2R-qnayWuWXFGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.48.0/22
Signature Algorithm: sha256WithRSAEncryption
80:6e:a1:f5:fb:2a:fd:a5:54:af:e1:b2:2e:9b:09:58:76:a4:
0e:8c:c0:7b:a1:47:e5:81:f2:3d:69:fb:0e:19:71:b4:47:f7:
54:0b:60:42:83:9f:22:4e:51:aa:49:fe:b2:cf:87:39:fd:bc:
e6:41:86:a7:c9:10:8f:9f:e9:05:48:73:83:04:af:6b:f8:77:
8b:b4:85:e5:a3:a1:72:c1:da:1e:94:fc:23:8a:8e:e5:6d:63:
4f:2f:67:9c:51:3f:0b:d0:66:54:8d:72:de:37:b5:c1:ff:dd:
58:9c:66:6d:79:4b:50:04:41:b4:84:41:fa:1e:c5:5c:01:d8:
21:5c:b6:37:7b:68:0a:89:99:09:28:33:c0:dc:78:01:b1:63:
7f:6a:65:00:74:c5:33:72:78:02:d7:25:25:84:95:65:59:71:
dd:fa:e9:e8:30:ab:94:bf:c3:41:a6:92:f9:47:07:52:2b:44:
21:18:06:a9:ad:7b:5b:e4:49:50:8b:f2:67:86:4c:1e:91:42:
07:e5:d9:0c:10:9c:1f:26:2e:36:68:59:66:76:e6:f2:8a:9d:
39:93:2f:42:8a:1a:99:26:9c:27:cf:a1:83:ae:65:ad:f8:9f:
3c:6a:6c:5f:b7:ab:cc:a8:51:22:0a:87:d7:9a:54:4f:b1:49:
63:f0:3f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:28 2024 by rpki-client on console-fra.rpki-client.org