Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/Rto1G4dwWTHcrC7ZagCWM_KWCUs.roa
File: Rto1G4dwWTHcrC7ZagCWM_KWCUs.roa (raw, json)
Hash identifier: C07noh4BCHPZJG5GV2fk2deF+MeHXnS4dtgNLvIu+rk=
Subject key identifier: 46:DA:35:1B:87:70:59:31:DC:AC:2E:D9:6A:00:96:33:F2:96:09:4B
Certificate issuer: /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Certificate serial: 018B80B583F041D468B312D95C6E32BC4F8E
Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/Rto1G4dwWTHcrC7ZagCWM_KWCUs.roa
Signing time: Mon 30 Oct 2023 13:11:01 +0000
ROA not before: Mon 30 Oct 2023 13:11:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50942
IP address blocks: 91.207.26.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:80:b5:83:f0:41:d4:68:b3:12:d9:5c:6e:32:bc:4f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Validity
Not Before: Oct 30 13:11:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46da351b87705931dcac2ed96a009633f296094b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0c:5e:ec:87:3b:f5:82:2a:47:0a:72:4b:f2:
1a:09:69:df:73:db:b2:61:98:a8:51:3c:05:97:87:
f9:5f:15:73:5f:93:9b:c3:69:4a:2e:53:ca:8d:8b:
c9:36:5f:8d:e0:95:a9:2b:66:30:8c:61:68:f9:17:
c8:d9:ad:c7:49:52:95:7c:99:3b:68:e6:c1:80:c8:
fc:51:91:8c:a8:94:ec:76:14:ad:c2:86:a6:2e:8f:
8d:3f:ce:36:a9:e8:65:55:a0:e3:9d:e5:a8:f6:19:
0d:6e:0b:c4:22:88:34:51:97:6e:45:9c:2a:bc:65:
79:19:28:c5:d9:2b:61:83:4e:64:17:15:1e:9f:f0:
60:0f:07:b8:9a:76:e3:6c:03:cb:63:3d:91:de:8a:
65:c6:5e:5f:0c:3d:93:31:51:8c:6f:70:ca:03:b0:
f8:a0:0c:df:50:56:64:df:90:43:be:91:32:26:4a:
65:50:00:77:63:04:1d:3a:95:10:06:81:dc:db:db:
97:69:a4:2c:02:71:e8:95:5a:80:04:07:d6:14:44:
78:19:95:7e:56:13:1a:0a:79:88:42:42:ad:85:9f:
07:99:d8:c4:c8:ac:01:ad:c0:46:bd:56:5e:c0:e9:
4b:08:9c:f9:53:00:0e:ab:5f:b1:4d:44:8e:58:ec:
32:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DA:35:1B:87:70:59:31:DC:AC:2E:D9:6A:00:96:33:F2:96:09:4B
X509v3 Authority Key Identifier:
keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/Rto1G4dwWTHcrC7ZagCWM_KWCUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.26.0/23
Signature Algorithm: sha256WithRSAEncryption
98:e3:98:2c:fb:e6:0e:9a:ba:0d:6f:df:01:de:96:79:e2:68:
7f:fd:b4:01:2d:a8:44:9d:81:b3:8b:10:71:2a:b0:ae:6d:f5:
ea:8c:58:e4:86:0c:4b:6b:6a:ae:e0:6f:37:0e:53:ab:0c:4f:
6a:e5:dc:30:3d:18:af:b1:1a:5f:60:18:c2:4f:a9:ca:92:66:
14:c2:74:88:7b:e4:67:6f:51:e3:3f:94:78:b3:2e:13:8c:bf:
55:9a:e9:13:1a:69:9e:76:ec:ba:c4:f1:67:1e:bd:0b:61:fc:
d9:26:81:92:c2:70:50:d5:7d:46:14:1c:b5:e4:f0:ef:32:dd:
25:6b:10:f2:d2:19:cb:ac:45:5e:d2:07:b1:0b:ba:8d:4e:ea:
e4:96:55:92:11:7a:4b:9a:12:6d:44:3d:53:30:5b:19:2c:a6:
dd:48:af:39:67:7b:a6:cf:f1:38:c4:c2:60:a4:46:b7:8b:10:
7e:39:8a:cc:5b:1b:1f:70:d1:a9:7d:b0:5b:2c:25:17:20:7e:
18:e2:28:60:8a:95:02:e2:6d:df:a8:95:06:4c:8a:8c:02:bf:
6b:26:ab:0b:7b:5e:3e:e8:18:bf:2b:51:57:4b:3a:af:73:3c:
a6:90:db:9b:56:45:12:b2:36:50:f0:c5:a3:80:ab:25:1d:68:
36:0e:cc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:21 2024 by rpki-client on console-fra.rpki-client.org