Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/A4GeLWsp_hG4foxfN9VVKVHYPis.roa
File: A4GeLWsp_hG4foxfN9VVKVHYPis.roa (raw, json)
Hash identifier: f3s42vA/0guJAYWJvQb1kEwhlaH2zKAUCxsJCUDp0ZY=
Subject key identifier: 03:81:9E:2D:6B:29:FE:11:B8:7E:8C:5F:37:D5:55:29:51:D8:3E:2B
Certificate issuer: /CN=593b53fb9306346f272494928d77839cbaf9ddc7
Certificate serial: 01856DA659390A93E6123F26726BF851F6D7
Authority key identifier: 59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/A4GeLWsp_hG4foxfN9VVKVHYPis.roa
Signing time: Sun 01 Jan 2023 14:04:56 +0000
ROA not before: Sun 01 Jan 2023 14:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198785
IP address blocks: 91.234.46.0/24 maxlen: 24
178.218.160.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:a6:59:39:0a:93:e6:12:3f:26:72:6b:f8:51:f6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=593b53fb9306346f272494928d77839cbaf9ddc7
Validity
Not Before: Jan 1 14:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03819e2d6b29fe11b87e8c5f37d5552951d83e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d2:7e:1c:4a:75:b5:a0:ae:94:9a:30:49:2f:
c1:a2:9a:7e:44:28:73:06:63:82:0a:0a:d4:79:e0:
3c:99:cb:55:5c:37:27:c4:b8:d7:ce:20:89:ed:da:
c7:5f:22:e3:96:b3:0b:f7:44:47:72:6c:29:b7:04:
d9:5b:6c:5c:86:b7:7b:76:80:06:fb:78:a9:01:bb:
91:ed:39:2a:b8:79:c6:a4:77:03:91:2f:4c:b3:0e:
a7:ad:4c:90:d1:72:52:68:20:25:78:b2:fa:84:52:
de:00:84:21:bf:64:ff:e7:49:b5:a9:6a:d5:3e:69:
d4:73:06:cf:11:61:28:88:d2:1b:0b:a9:ff:20:69:
77:80:65:ad:9e:ab:09:fb:35:aa:25:a1:5c:ae:84:
64:49:99:41:f8:29:de:af:26:20:d4:dc:c9:9b:df:
79:ea:1f:cb:65:53:c2:c4:72:d6:5d:13:d5:3e:96:
1d:b0:40:2f:50:62:f3:3c:3f:68:17:b6:88:27:73:
99:99:16:06:88:ed:e5:98:23:96:cb:5d:72:ce:06:
d7:a4:7e:04:88:3a:bd:6d:1c:a4:05:98:95:d7:be:
df:16:ab:32:f7:f5:89:da:9a:18:7a:94:e0:34:c2:
51:93:c4:91:06:49:98:ea:ea:d2:b1:3b:ce:a1:88:
7f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:81:9E:2D:6B:29:FE:11:B8:7E:8C:5F:37:D5:55:29:51:D8:3E:2B
X509v3 Authority Key Identifier:
keyid:59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/A4GeLWsp_hG4foxfN9VVKVHYPis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.46.0/24
178.218.160.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:ac:bc:88:5b:e9:f2:99:6a:0d:e6:22:67:bb:bf:2f:73:8e:
1f:a5:00:1d:cc:a8:e9:98:50:bf:95:b3:89:32:75:f8:6f:74:
8a:cd:5a:07:77:27:25:ad:de:31:23:e0:82:ed:41:64:44:44:
7c:ad:cd:7f:29:de:4b:f8:ff:bc:04:50:00:0c:9f:e5:97:f0:
69:cf:e1:09:17:24:27:26:7e:84:69:3d:8c:e5:46:bf:26:e2:
07:2f:51:69:63:2a:4a:ac:76:a8:2f:4d:89:79:eb:b2:07:ac:
a5:7b:eb:3e:29:de:51:5b:b3:42:69:3b:5d:11:52:2a:b1:d2:
da:ec:ab:2e:5b:87:8d:63:3e:4a:d3:6d:b0:1c:94:2a:be:7b:
78:bc:b5:ad:32:be:40:32:d1:2b:24:e4:95:53:f1:04:3f:cc:
77:95:1f:bf:b8:2c:17:2f:9f:c2:f4:f2:bb:e2:38:b5:a3:b6:
7e:73:a6:74:11:5f:5b:54:99:83:58:ba:fc:6c:3f:c0:0e:31:
ad:31:f7:dc:d8:6c:f1:35:48:88:d6:71:d4:45:7e:d8:93:6f:
58:5a:0a:cb:4f:d6:9e:f6:bb:5f:a3:ba:7e:53:b1:7c:c7:20:
3a:d6:2a:1a:ee:62:b6:16:3c:c2:b7:fd:a9:ef:ab:9d:30:26:
0a:cb:ed:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:18 2024 by rpki-client on console-ams.rpki-client.org