Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/DaYoJhuHN06UuIoIXAo0XR9cT2Q.roa
File: DaYoJhuHN06UuIoIXAo0XR9cT2Q.roa (raw, json)
Hash identifier: Rxf7XvaXLTPVGY05OSDvB/pzjchZCBV8WI8l14DfqW0=
Subject key identifier: 0D:A6:28:26:1B:87:37:4E:94:B8:8A:08:5C:0A:34:5D:1F:5C:4F:64
Certificate issuer: /CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Certificate serial: 018C8C074F1583C4335DA0F2D1880B872B82
Authority key identifier: D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/DaYoJhuHN06UuIoIXAo0XR9cT2Q.roa
Signing time: Thu 21 Dec 2023 10:58:58 +0000
ROA not before: Thu 21 Dec 2023 10:58:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208772
IP address blocks: 91.216.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8c:07:4f:15:83:c4:33:5d:a0:f2:d1:88:0b:87:2b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Validity
Not Before: Dec 21 10:58:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0da628261b87374e94b88a085c0a345d1f5c4f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:25:51:dd:5e:96:23:a4:33:24:9b:62:aa:e6:
03:2e:8a:a7:1e:57:66:f7:2e:89:d4:bb:b0:4d:07:
8d:ed:ac:a2:9e:3f:33:97:02:51:52:ee:4c:ef:66:
14:ee:e1:e0:3a:20:ac:e5:34:64:16:e9:57:34:c6:
68:3d:57:0d:12:88:b7:77:3d:24:fe:64:2b:cc:bf:
89:7f:04:59:ac:2a:33:5e:63:02:2c:05:d9:e0:1c:
34:42:df:33:c6:9e:66:78:93:b1:0b:fc:18:27:03:
aa:c1:aa:10:4a:cb:f2:c7:f5:80:40:2e:0a:85:7a:
4e:83:4e:70:fc:ef:cd:ab:ce:99:be:57:af:c8:2b:
74:ba:ad:b5:ea:9d:fd:f1:00:b6:7e:ec:7b:69:1b:
2a:19:bd:36:64:b4:8b:84:5a:ee:e4:c7:b7:82:3f:
23:a3:96:2b:35:1b:24:e4:72:a8:27:63:b5:49:b2:
b5:9e:1c:67:1e:00:78:87:1a:f0:2b:62:40:0f:89:
72:c5:cc:43:86:e8:9c:6d:e7:a8:ee:ea:ab:0c:6d:
ed:42:04:3c:ff:5f:01:57:44:2b:08:40:70:59:c0:
43:91:e6:2e:ea:2c:e9:72:85:38:be:78:2f:2b:ec:
53:3e:72:d8:5b:b5:ad:fe:04:5d:49:10:7e:62:c0:
1d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A6:28:26:1B:87:37:4E:94:B8:8A:08:5C:0A:34:5D:1F:5C:4F:64
X509v3 Authority Key Identifier:
keyid:D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/DaYoJhuHN06UuIoIXAo0XR9cT2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.35.0/24
Signature Algorithm: sha256WithRSAEncryption
26:5a:dd:ce:89:62:b7:fe:2c:8b:e1:c9:26:5f:8e:95:8b:a1:
37:3e:b4:fd:ab:be:8c:d8:83:90:38:c7:0f:93:7f:6a:e2:a7:
96:2b:e0:0b:98:41:dc:b8:d7:4e:bd:e4:b1:89:42:50:6a:57:
76:04:7b:1f:d3:bc:cd:d4:1a:4b:ab:46:0e:3a:05:32:3b:82:
78:ac:c0:64:1a:fb:ad:fa:68:69:15:1d:40:ed:eb:1b:f9:03:
e4:9c:02:c3:a5:6a:90:aa:0a:89:62:05:52:73:c2:39:1a:3f:
92:4f:e3:e0:04:47:74:51:f7:34:12:ea:f4:3b:18:e5:25:66:
53:22:cc:8c:95:8b:a1:c7:1e:80:88:a8:52:77:84:8c:01:e0:
f1:80:d4:95:8f:e1:fe:5a:d0:7d:42:f6:8d:54:b4:bf:c7:4c:
e1:b4:17:fe:fc:55:f5:f7:84:12:ef:7d:fd:7f:7b:ef:ce:33:
7d:39:02:1e:4c:1f:9c:e8:cd:71:89:d9:35:53:9f:28:b9:1a:
6b:bd:00:f4:28:24:78:78:1a:bc:86:dc:92:71:15:4f:af:12:
ff:40:a4:f0:ad:32:ae:82:61:f6:92:12:94:6d:44:a6:54:91:
9c:b8:9e:70:dc:cd:fb:ac:e9:c5:72:11:e3:b0:76:a9:a5:61:
c8:b1:66:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:50 2024 by rpki-client on console-fra.rpki-client.org