Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/7QrEIB2UxufU4FTKI0VZlSJLEPA.roa
File: 7QrEIB2UxufU4FTKI0VZlSJLEPA.roa (raw, json)
Hash identifier: jXItlyiEOR3sqO4To8vOq9MrgabwNInea4lGcNDCaEs=
Subject key identifier: ED:0A:C4:20:1D:94:C6:E7:D4:E0:54:CA:23:45:59:95:22:4B:10:F0
Certificate issuer: /CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Certificate serial: 01856D41AB7C5E7613E0E206119BCA0924D8
Authority key identifier: A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/7QrEIB2UxufU4FTKI0VZlSJLEPA.roa
Signing time: Sun 01 Jan 2023 12:14:58 +0000
ROA not before: Sun 01 Jan 2023 12:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48944
IP address blocks: 91.239.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:ab:7c:5e:76:13:e0:e2:06:11:9b:ca:09:24:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Validity
Not Before: Jan 1 12:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed0ac4201d94c6e7d4e054ca23455995224b10f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:d3:bb:d1:d8:ce:85:ee:b1:40:dc:a3:a9:
4a:71:9b:27:97:58:cb:cc:99:2d:b3:51:bc:44:98:
75:d6:5a:56:39:95:90:cd:0c:dd:96:bb:04:35:48:
18:38:15:a3:95:72:68:d1:c0:ec:08:e8:42:62:5f:
5f:9e:f3:fc:e0:23:fd:9a:c5:29:49:16:6e:fd:5a:
2c:7a:40:e6:3d:82:90:7b:77:31:c7:87:3b:36:37:
05:3d:af:f2:1e:99:c5:0a:68:2c:ce:cb:0d:43:6b:
4b:cb:78:7d:ec:be:da:c9:8a:14:58:de:64:c0:75:
ba:e6:6e:1a:c3:d3:3b:16:08:51:ee:0f:76:83:c3:
67:dc:fd:43:88:95:80:8b:be:f7:7a:ea:6e:6b:b7:
2e:ad:b2:e2:e5:1c:19:a9:8f:66:63:94:35:ba:6a:
49:a3:6c:41:ed:85:e1:4e:29:4d:59:2e:43:12:26:
a0:db:5a:8a:78:31:76:c4:56:ce:42:90:0e:5a:86:
97:1a:96:1d:c7:b1:9e:7d:d0:5f:f6:ed:f4:ee:b7:
d9:88:eb:fd:d7:54:13:1d:c1:76:0f:04:f0:28:49:
ab:c6:d6:1c:ac:d9:69:6b:79:9c:ef:c2:e8:08:66:
7e:f8:47:1a:37:87:50:02:4e:5b:16:88:bc:82:fa:
a3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0A:C4:20:1D:94:C6:E7:D4:E0:54:CA:23:45:59:95:22:4B:10:F0
X509v3 Authority Key Identifier:
keyid:A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/7QrEIB2UxufU4FTKI0VZlSJLEPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.210.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:0d:9f:a0:bb:23:e4:a9:56:5a:7b:fb:d2:39:06:8d:1b:f4:
c3:7d:8f:dd:3e:64:86:83:9a:8e:4e:ac:88:7d:42:0d:71:8a:
8d:ec:34:46:2a:13:c9:75:18:ce:9b:4d:73:00:a5:0f:9e:3b:
59:f7:c5:91:fd:41:f8:11:cd:cb:8d:7d:74:a0:50:95:e8:e0:
16:99:1c:46:66:f8:bd:64:de:34:c5:84:b9:e4:0b:d0:a0:1b:
45:ba:f4:ba:2d:ed:c4:f8:4c:66:9f:f6:be:19:56:44:b5:bf:
e5:b7:73:45:3a:a5:b4:3c:04:30:d7:12:cb:33:e1:d2:f8:b2:
ea:cb:0b:2e:f6:79:a4:93:c1:3d:57:be:bf:9d:4f:16:6f:94:
00:2a:44:52:59:3e:30:5d:d0:3d:b1:f5:12:44:67:17:c1:99:
5c:e2:b8:16:d4:e4:c8:34:81:f9:49:0f:e7:b4:41:8b:31:dd:
8f:5c:6c:ce:17:8a:a3:82:e6:06:88:1e:a9:19:fc:a8:2f:5f:
b0:20:3c:59:55:3e:89:de:13:81:7e:99:0d:74:35:d2:c1:96:
8e:5f:6b:1f:11:bd:7e:ac:2b:f8:c0:84:3d:31:3d:4a:b0:8d:
e7:47:1d:f6:d8:3a:98:b8:84:9a:d3:ce:48:b9:91:e8:b9:99:
6e:c7:e1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:41 2024 by rpki-client on console-fra.rpki-client.org