Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/4SdbdKzlapENOUh7izeAurkoU3k.roa
File: 4SdbdKzlapENOUh7izeAurkoU3k.roa (raw, json)
Hash identifier: Pq3M5Z45ZFdjFzhByrVzp8f+CkE/r8VZCRi6HH3azQ8=
Subject key identifier: E1:27:5B:74:AC:E5:6A:91:0D:39:48:7B:8B:37:80:BA:B9:28:53:79
Certificate issuer: /CN=80e506fcf1d7cf649d388e975ca26252e219fc7c
Certificate serial: 018CC8DF0A4638546A084C0E00F75D37638D
Authority key identifier: 80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/4SdbdKzlapENOUh7izeAurkoU3k.roa
Signing time: Tue 02 Jan 2024 06:31:49 +0000
ROA not before: Tue 02 Jan 2024 06:31:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206766
IP address blocks: 91.198.208.0/24 maxlen: 24
91.198.210.0/24 maxlen: 24
91.198.215.0/24 maxlen: 24
91.198.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Feb 2024 13:08:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:0a:46:38:54:6a:08:4c:0e:00:f7:5d:37:63:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e506fcf1d7cf649d388e975ca26252e219fc7c
Validity
Not Before: Jan 2 06:31:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1275b74ace56a910d39487b8b3780bab9285379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cc:2d:d4:ad:5b:32:95:94:65:1e:68:25:e9:
02:c3:35:43:da:b7:4c:e2:10:d4:ce:87:e5:aa:2c:
01:2f:59:35:4a:fe:18:95:81:54:55:6c:0f:32:42:
b5:11:e5:40:b7:30:9c:08:02:65:9a:ec:96:ba:b9:
1b:66:41:32:fe:fc:9e:91:b8:93:6d:b5:84:0b:57:
2a:dd:c0:73:ed:d0:01:cf:4a:bb:b4:73:a6:ba:17:
8b:2d:ab:51:25:8b:1e:f9:c9:d3:57:9b:f5:fc:ec:
cf:9c:09:75:d4:db:70:bb:b7:2b:67:c0:9e:77:d8:
13:18:0b:42:05:d6:a8:99:85:4c:46:33:28:a9:7e:
0b:d1:b3:cc:fa:df:ab:17:a9:65:04:0e:e1:9c:b5:
d8:cd:76:7a:fe:17:aa:ea:5c:9a:ca:f0:50:37:ca:
6c:83:27:67:f1:3c:8a:6a:87:36:28:47:8d:f6:d4:
0e:1b:b1:3f:02:e4:4b:6b:1d:ff:ce:42:83:bd:30:
60:c6:0e:a6:ac:00:45:e1:21:c4:cc:ec:cb:cb:9b:
be:2b:02:e3:44:2e:4a:8a:27:aa:5c:92:ec:c5:3c:
29:c7:e5:5c:59:6a:24:1c:9a:c1:a2:11:41:bb:a6:
cb:d7:cf:af:60:a0:6a:a7:87:ad:91:b3:47:61:6a:
a1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:27:5B:74:AC:E5:6A:91:0D:39:48:7B:8B:37:80:BA:B9:28:53:79
X509v3 Authority Key Identifier:
keyid:80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/4SdbdKzlapENOUh7izeAurkoU3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.208.0/24
91.198.210.0/24
91.198.215.0/24
91.198.218.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:3b:a3:99:8c:a2:e7:97:33:9a:7e:e8:dd:40:86:81:ad:49:
6a:94:18:8a:4c:f8:a0:7f:61:4f:ef:68:8b:d3:fb:1a:70:6f:
5a:64:53:8c:df:7d:0f:bd:d3:55:46:1a:97:d0:23:24:86:40:
7d:22:c5:78:9c:34:e7:78:4a:fc:00:bc:b8:8c:90:60:40:ec:
72:24:38:5a:11:48:13:ce:1e:6c:11:7b:42:ae:cb:76:88:57:
ab:f4:8e:3d:2b:9e:73:b7:18:a3:c4:48:8b:bc:98:b9:d6:6a:
7b:ef:24:76:8f:78:f8:9d:84:ef:c0:91:76:62:1e:1d:0d:c9:
9b:89:c9:92:82:8b:09:bb:5c:66:06:c2:fc:94:36:a3:3e:28:
4c:e8:ea:57:aa:24:83:ea:e5:a5:36:39:a5:70:6c:57:12:4f:
6c:5a:da:2e:7e:a3:cf:7d:3d:6e:76:96:c6:ea:7f:a1:dd:80:
35:39:c1:1f:c8:7f:57:cb:42:d4:88:ae:9e:c7:41:93:a9:52:
a9:d7:af:e3:d8:fb:1d:23:2e:df:05:17:09:78:21:ab:dc:4c:
07:cb:23:c6:00:7b:00:de:55:07:cb:b6:a3:89:f8:ed:d6:ee:
18:f8:8c:d3:6d:64:4f:ef:0c:f0:22:65:67:cd:80:23:20:a1:
c3:d1:46:6d
-----BEGIN CERTIFICATE-----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Generated at Sun Feb 25 16:24:47 2024 by rpki-client on console-fra.rpki-client.org