Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/eDlrRYg1PGUG8LACYs7BrNUkfng.roa
File: eDlrRYg1PGUG8LACYs7BrNUkfng.roa (raw, json)
Hash identifier: NIH+3MQNgZfrATHsQfOBA5rvVrtCmFQXl/Ja+a4u6Tg=
Subject key identifier: 78:39:6B:45:88:35:3C:65:06:F0:B0:02:62:CE:C1:AC:D5:24:7E:78
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 018F80C37BDEFA3BE254FD0AF227C3BC3B4C
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/eDlrRYg1PGUG8LACYs7BrNUkfng.roa
Signing time: Thu 16 May 2024 09:37:25 +0000
ROA not before: Thu 16 May 2024 09:37:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 91.108.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 May 2024 10:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:c3:7b:de:fa:3b:e2:54:fd:0a:f2:27:c3:bc:3b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: May 16 09:37:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78396b4588353c6506f0b00262cec1acd5247e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1f:da:16:39:00:87:05:f2:6a:3e:e2:cd:04:
fc:22:b1:9f:06:15:fb:6f:b7:32:5a:06:34:db:82:
c6:c7:85:65:91:df:44:7f:53:b2:d2:76:22:32:09:
4c:7b:4c:10:e9:b7:d9:8d:b7:76:92:24:2d:e4:f1:
ca:07:e8:b7:da:6d:0e:37:c0:5d:9d:d5:1a:ad:ac:
ee:3a:aa:3e:04:f7:bc:45:d8:d5:11:0a:18:53:d6:
8f:d7:d9:29:22:86:88:e6:48:54:15:b2:2d:ca:ad:
09:df:a6:bd:05:bb:19:af:ab:b9:5a:94:f3:fd:c6:
a4:d8:e3:a2:a3:ac:9e:e4:2b:15:e7:21:71:ee:fa:
93:80:3f:95:45:50:87:40:63:e8:2b:28:04:01:ff:
53:e3:b4:9c:f3:96:ab:72:ba:f5:80:05:67:60:c5:
5b:1d:eb:49:1b:eb:52:53:b2:56:55:c1:58:8c:34:
f9:39:63:1d:8f:fb:17:0b:c3:0e:ee:ce:ac:d8:71:
15:b4:f7:62:d5:bc:e1:98:d9:d4:4e:7d:c7:0c:d2:
5d:4f:60:07:f8:2d:f4:7a:9d:f8:e1:df:2b:e4:bd:
04:0f:e7:43:24:07:09:cb:83:2a:39:d7:be:dd:7c:
c0:ab:d6:72:78:fa:aa:69:58:69:7b:f7:b7:f3:71:
aa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:39:6B:45:88:35:3C:65:06:F0:B0:02:62:CE:C1:AC:D5:24:7E:78
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/eDlrRYg1PGUG8LACYs7BrNUkfng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.72.0/21
Signature Algorithm: sha256WithRSAEncryption
46:77:df:14:eb:05:52:79:03:bf:57:e0:c3:c2:39:7e:82:de:
f0:a4:d5:b1:9b:f5:0a:11:13:71:d2:58:41:9a:c1:df:21:e7:
ae:6b:77:1b:6b:52:dd:b4:51:86:f3:f7:ef:65:06:5e:cd:8b:
df:70:13:ad:28:01:69:a4:a5:5b:eb:6f:e9:6f:1e:cb:2c:2e:
1c:64:86:bd:bc:57:7a:34:d6:3e:78:74:c8:9b:7d:cf:11:60:
d8:2e:13:e1:90:9f:82:a3:c6:4f:49:bd:cb:3e:e4:7d:fe:14:
6a:dc:39:fa:e6:13:68:7a:c2:33:39:29:72:fe:49:4a:86:0e:
77:93:29:0e:17:f9:c4:eb:0e:26:fd:12:de:cd:01:05:00:f1:
a9:0f:6b:1c:01:47:d0:c2:3f:84:56:37:79:12:5e:b6:8e:33:
3f:1d:3e:75:08:35:e5:f4:b3:58:7d:c6:ca:7c:8e:c3:f4:c6:
ec:8d:f4:4e:a0:75:40:1d:e1:09:fe:8a:07:56:e2:76:1e:3e:
a5:53:bd:db:ea:92:db:ce:5c:03:49:59:ab:38:88:66:f8:c9:
99:ef:64:d2:f2:95:0d:06:17:a4:bf:a5:50:33:bd:22:73:ce:
e5:17:15:85:dc:e0:e2:9b:84:04:2b:28:bd:a1:37:e3:a1:be:
16:d9:eb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:00 2024 by rpki-client on console-fra.rpki-client.org