Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/swSDZJcYmOzwKWm1XzrOaKfQtzM.roa
File: swSDZJcYmOzwKWm1XzrOaKfQtzM.roa (raw, json)
Hash identifier: e6hGPlXLhmecSTfOElid7sZj10HIezrirTWGPlIevDU=
Subject key identifier: B3:04:83:64:97:18:98:EC:F0:29:69:B5:5F:3A:CE:68:A7:D0:B7:33
Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial: 018B265090014720EA96ACEF8F91F857797A
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/swSDZJcYmOzwKWm1XzrOaKfQtzM.roa
Signing time: Thu 12 Oct 2023 23:54:55 +0000
ROA not before: Thu 12 Oct 2023 23:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 91.194.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Nov 2023 14:36:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:26:50:90:01:47:20:ea:96:ac:ef:8f:91:f8:57:79:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
Validity
Not Before: Oct 12 23:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3048364971898ecf02969b55f3ace68a7d0b733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:97:a6:22:ba:89:c9:35:e3:a8:b7:7b:40:8d:
f6:45:4e:76:66:c9:85:6e:40:60:34:69:61:20:45:
c0:3d:69:25:96:61:72:de:a1:90:28:cb:fe:e9:bc:
9e:fa:f4:14:87:0e:b5:0f:71:f0:b5:a9:18:79:f5:
fb:4b:37:5d:40:b2:e9:13:64:18:a0:98:7a:7b:03:
1e:49:ab:4b:80:cc:ed:69:c1:61:12:4b:71:aa:e1:
67:03:da:53:be:59:33:f2:1a:b3:73:02:e4:29:c3:
c5:4b:54:fd:9c:f6:d7:4d:ad:e9:a1:7a:64:c3:f0:
9e:f6:dd:1d:b3:10:0f:8b:1d:94:69:5d:27:7e:68:
48:15:72:f6:70:48:2f:5e:a9:f7:7d:01:c4:18:88:
2b:44:16:ae:7d:57:d9:9d:ad:4b:49:2d:7d:fa:59:
7f:50:9f:9f:52:1f:bb:3e:ba:38:70:e3:50:0e:b6:
46:f2:c3:f8:da:d1:2a:dd:06:75:e9:9b:3f:db:1a:
ff:a7:22:c2:57:9f:0c:24:43:09:49:29:52:7f:68:
c0:f9:4d:9d:47:90:97:79:3a:a6:62:a2:74:6c:3f:
ba:a4:9e:92:51:c9:be:6c:65:e8:51:69:52:27:0e:
57:92:67:12:60:92:83:41:b1:58:56:f1:34:28:72:
a6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:04:83:64:97:18:98:EC:F0:29:69:B5:5F:3A:CE:68:A7:D0:B7:33
X509v3 Authority Key Identifier:
keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/swSDZJcYmOzwKWm1XzrOaKfQtzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.236.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:47:00:e3:db:26:c8:db:c3:70:25:9a:57:b6:20:f3:6e:da:
af:89:f5:ff:16:09:3f:e3:0c:77:dc:ec:f0:91:b3:4c:de:a6:
a0:f6:7e:f2:c9:fb:51:e9:25:62:a5:46:55:66:a6:00:87:c1:
f0:a8:f7:52:40:ac:0f:63:8d:e7:c9:14:f5:c6:41:0b:51:d1:
3f:ae:e3:d7:81:33:0a:ca:a7:1c:52:80:a6:0d:94:c4:25:9b:
3d:e2:e1:12:33:91:20:9c:e6:36:77:8d:a3:6d:33:8d:97:2d:
8c:f1:6a:11:51:31:00:de:d1:01:32:0f:dd:3b:7d:bf:8f:0e:
0e:2b:a1:19:02:b9:4f:3e:30:9d:2a:76:ec:bd:ef:63:24:5a:
13:65:41:f8:42:65:7a:07:c6:10:ee:5b:84:a6:fc:9c:1c:c0:
d4:70:cb:b6:b4:27:ad:dc:07:54:e2:bd:ad:50:64:50:dc:14:
f1:b9:f1:f6:1a:04:19:2c:a7:52:34:37:35:16:ff:a1:71:a6:
09:a6:31:29:8c:76:81:5e:c3:e1:3e:53:5c:71:04:f8:58:3c:
e2:3f:a2:d4:bf:ab:ce:ca:fa:c9:7c:c0:0b:44:4a:b3:1d:32:
c8:c8:5f:31:42:61:71:7c:0d:1f:3d:cf:3d:95:71:c3:99:7c:
25:32:30:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:39 2024 by rpki-client on console-fra.rpki-client.org