Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/lDzZIrGSnT0gWOgLBhjZP-7CXyo.roa
File: lDzZIrGSnT0gWOgLBhjZP-7CXyo.roa (raw, json)
Hash identifier: Ux2yIoQz+NnMm74B6YMmNWMM8rZxBi8VhGDDRDbObMI=
Subject key identifier: 94:3C:D9:22:B1:92:9D:3D:20:58:E8:0B:06:18:D9:3F:EE:C2:5F:2A
Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial: 018B265090A8C0ADFE6673ADE862DC141878
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/lDzZIrGSnT0gWOgLBhjZP-7CXyo.roa
Signing time: Thu 12 Oct 2023 23:54:55 +0000
ROA not before: Thu 12 Oct 2023 23:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201011
IP address blocks: 91.194.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:26:50:90:a8:c0:ad:fe:66:73:ad:e8:62:dc:14:18:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
Validity
Not Before: Oct 12 23:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=943cd922b1929d3d2058e80b0618d93feec25f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:80:cf:39:91:52:bd:e9:da:5a:12:39:14:1f:
1d:a2:a9:2e:a4:1a:f7:4a:50:a7:a3:77:1f:0a:27:
0b:1b:53:ed:10:bf:7b:8a:df:09:fb:be:d3:88:ca:
f7:ea:69:5c:cc:db:22:49:a5:e4:5e:db:30:99:0e:
4e:68:fa:be:cf:5f:ff:f3:9b:84:39:bb:07:5a:ef:
63:69:60:1c:1c:aa:19:c4:fd:ca:fb:26:4a:1e:32:
47:50:30:e8:46:23:c8:5b:29:d8:ee:16:a5:1b:97:
6e:02:03:e3:92:9c:20:2d:74:8a:49:e2:1d:47:75:
7b:5d:34:81:c2:d1:ca:04:f7:33:77:19:f3:be:67:
63:21:c8:11:b9:07:03:45:13:cb:48:e0:12:dd:3b:
67:b2:48:c3:e8:e6:6f:51:57:f7:ab:a1:09:41:f4:
68:5c:d6:c9:fb:29:57:78:b0:01:d0:91:e9:fb:00:
eb:be:ec:a1:df:de:c9:98:bc:66:f1:a4:f6:59:e2:
da:e5:ea:9c:e1:1c:59:ed:6c:6a:c0:22:f6:7a:5a:
16:30:65:00:96:c9:11:09:1f:82:49:f7:33:16:4f:
aa:15:c0:b1:00:95:47:a6:cf:4b:6c:4a:59:14:92:
b8:7c:86:71:f5:85:b9:5e:35:f3:51:bf:45:ea:b0:
4a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3C:D9:22:B1:92:9D:3D:20:58:E8:0B:06:18:D9:3F:EE:C2:5F:2A
X509v3 Authority Key Identifier:
keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/lDzZIrGSnT0gWOgLBhjZP-7CXyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.237.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a1:62:da:2a:45:de:be:6c:6c:dc:74:c4:ad:08:2c:87:44:
0b:68:e5:ef:bb:70:fb:50:62:a0:c3:56:04:44:6e:5b:78:a6:
f5:86:4f:c7:c5:53:15:af:28:3c:08:66:88:65:6a:89:b6:85:
ef:72:42:2b:6a:98:d1:a1:31:1a:aa:2a:21:8f:90:21:5c:4b:
0e:30:19:2b:e5:19:bd:91:4c:9e:f5:70:43:13:a0:6d:ef:ad:
cb:a0:8f:5d:64:64:14:16:51:5f:19:f5:c9:09:49:54:ec:05:
47:da:80:cd:00:99:96:04:11:07:92:b8:47:fb:84:ff:2b:93:
fa:20:0d:c6:9b:66:5d:c0:c5:1c:c9:87:82:48:79:0d:86:7e:
a3:72:ae:79:0f:07:58:42:33:9a:07:98:91:b8:55:05:bd:9f:
e8:d8:34:83:6e:ee:72:fa:7b:7f:72:31:bd:fe:21:50:a5:0c:
83:ef:27:a4:db:d2:3f:4b:83:03:11:99:0c:53:8d:e4:0a:e6:
30:b9:26:36:95:81:37:06:1f:af:9a:cf:21:65:15:82:a8:de:
b2:3c:6c:ba:50:f3:8d:1f:fd:b3:3c:e9:ea:c9:1f:e1:5c:19:
4d:d5:cc:57:3d:eb:57:b6:7f:4b:ae:52:28:56:37:8a:1a:47:
b6:46:08:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:22 2024 by rpki-client on console-ams.rpki-client.org