Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/_cnnm6zY9mRhntF1CV-imF-vDLE.roa
File: _cnnm6zY9mRhntF1CV-imF-vDLE.roa (raw, json)
Hash identifier: 9i1wSmfYO+ZQ7PoVrub68Gz0QxwQQt482mDtGzotfdQ=
Subject key identifier: FD:C9:E7:9B:AC:D8:F6:64:61:9E:D1:75:09:5F:A2:98:5F:AF:0C:B1
Certificate issuer: /CN=1a14445259732aa6736c248234465947fc2374d0
Certificate serial: 019031ED01CB8BB27FA76D14007F05720D47
Authority key identifier: 1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/_cnnm6zY9mRhntF1CV-imF-vDLE.roa
Signing time: Wed 19 Jun 2024 19:15:34 +0000
ROA not before: Wed 19 Jun 2024 19:15:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30823
IP address blocks: 91.214.160.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 11 Jul 2024 10:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:31:ed:01:cb:8b:b2:7f:a7:6d:14:00:7f:05:72:0d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14445259732aa6736c248234465947fc2374d0
Validity
Not Before: Jun 19 19:15:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdc9e79bacd8f664619ed175095fa2985faf0cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:43:de:57:1f:67:59:e0:e8:f6:8c:d3:a0:c7:
ef:16:47:c6:7d:9c:8e:e8:34:d4:c0:5a:63:b2:fa:
dd:45:c9:3b:55:9d:58:7b:d7:fd:c4:66:26:37:99:
b9:ad:ca:91:db:ed:49:c8:c4:fa:ff:6c:58:4b:de:
ca:9a:fe:d5:60:14:db:da:30:3e:bd:b5:cd:2f:4e:
15:1b:61:70:1c:ad:61:38:d0:d7:12:c4:67:67:f6:
e2:bf:59:33:25:31:11:e1:09:31:f0:e0:c1:86:72:
e7:55:6b:56:90:f8:b8:28:e8:4b:5f:c6:73:56:5f:
90:7d:5b:c4:65:22:1c:d8:8b:06:d5:3b:40:2f:8f:
46:3d:a9:9c:2a:91:c3:0d:28:98:6f:d7:4a:8a:f9:
1a:35:aa:2a:5c:05:e3:20:1a:54:f7:6d:f0:dd:6f:
dd:dd:93:00:3e:d0:b3:6b:04:5a:90:36:fa:d5:5e:
10:0e:21:0b:a1:ec:9d:5a:bd:37:75:a6:96:44:b3:
39:29:82:f0:2b:da:93:bb:d3:b2:a8:18:9d:27:25:
3b:c9:ff:bf:8f:a3:de:e6:93:3c:a2:49:7c:ad:8f:
09:6c:ea:a7:ed:af:29:93:b9:8b:6b:e5:40:56:42:
33:1a:5a:af:7a:cc:c1:b0:af:83:24:55:d8:39:0d:
aa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C9:E7:9B:AC:D8:F6:64:61:9E:D1:75:09:5F:A2:98:5F:AF:0C:B1
X509v3 Authority Key Identifier:
keyid:1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/_cnnm6zY9mRhntF1CV-imF-vDLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.160.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:b8:2c:5d:a0:76:41:b4:02:00:19:13:fc:a0:e6:9e:0e:b9:
2a:ae:8d:6d:ca:db:d6:5d:c7:60:68:86:34:44:8a:35:80:09:
3b:47:64:91:a0:a9:5f:71:89:bd:d2:77:79:64:d8:58:cd:15:
83:59:39:f4:df:79:7f:8d:63:eb:9e:54:80:d6:71:a2:80:ed:
4f:2b:26:7e:08:a9:a4:42:4a:8e:a0:9a:5f:3b:c2:3f:84:59:
5e:88:9b:f9:8d:12:e4:c5:25:f9:7d:13:b1:b2:12:af:01:0f:
02:1c:04:58:3a:3c:f2:f4:93:51:30:a4:73:a8:65:7c:92:38:
17:2d:9a:fa:5d:a2:d0:56:1b:c4:29:c5:5d:d8:29:2b:f7:31:
90:30:ac:6f:a7:ff:1b:57:c6:92:01:c8:4a:e8:df:f8:52:c2:
8f:b3:8f:5a:1a:77:6f:cb:b0:a2:ed:17:c9:48:b3:fa:b2:cf:
ed:49:3b:42:44:dd:41:7f:2f:8f:e0:d8:20:10:45:9f:64:3f:
95:83:2e:e7:a8:62:4e:ec:b1:92:ea:18:30:92:2b:07:df:0c:
23:1e:6c:29:d4:5f:54:53:a8:f7:eb:6b:d0:8c:2e:06:23:d2:
bc:76:d4:45:17:44:b3:71:78:ce:b7:86:3f:ed:cd:2f:33:94:
3f:b6:64:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 11:45:41 2024 by rpki-client on console-fra.rpki-client.org