Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/r6c9ZWToGyh3grfOOtFqijgpGdg.roa
File: r6c9ZWToGyh3grfOOtFqijgpGdg.roa (raw, json)
Hash identifier: pMYnXMfa6l8Bw0CQHWovgaZv35Yf3UWnzvElOFnE5f4=
Subject key identifier: AF:A7:3D:65:64:E8:1B:28:77:82:B7:CE:3A:D1:6A:8A:38:29:19:D8
Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial: 0188D782AABC614740069D812E8B545B11C4
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/r6c9ZWToGyh3grfOOtFqijgpGdg.roa
Signing time: Tue 20 Jun 2023 06:34:04 +0000
ROA not before: Tue 20 Jun 2023 06:34:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30885
IP address blocks: 91.212.110.0/24 maxlen: 24
194.102.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d7:82:aa:bc:61:47:40:06:9d:81:2e:8b:54:5b:11:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Validity
Not Before: Jun 20 06:34:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afa73d6564e81b287782b7ce3ad16a8a382919d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:b7:86:77:6e:82:76:22:d3:39:6f:da:e9:
ea:f0:9e:27:b3:07:96:b2:91:5e:91:a8:2c:93:21:
5c:5e:56:1c:c6:df:24:a0:71:36:6e:92:73:fe:9f:
1e:b9:c6:71:7a:3f:17:26:b4:28:d0:ce:cb:95:59:
6b:61:7b:0f:78:9c:4d:fa:6d:a4:35:70:ae:de:51:
3f:70:de:76:34:82:7b:80:28:58:ad:5f:f5:5f:ea:
24:7a:1c:b0:a8:6e:8e:ee:ca:40:29:a9:89:1d:c0:
4f:08:d4:ab:45:c0:32:d0:30:28:9d:98:e2:d2:d7:
57:3a:de:2e:01:bc:00:26:3a:8c:f8:6b:40:cc:fa:
0e:44:66:11:a8:fd:0b:83:6c:cc:ff:f5:69:9b:fb:
4b:67:16:87:b2:c7:58:81:95:51:a7:ec:32:82:6a:
3b:ca:d3:ba:bb:dd:3b:52:69:50:60:09:52:b7:03:
f5:b9:a6:98:24:91:7f:ee:a6:4a:1b:34:fc:cf:78:
47:38:cb:e4:ce:7c:07:63:08:a3:f4:63:91:41:4b:
95:05:ce:78:2e:19:32:cd:1c:df:b6:bd:bd:b4:43:
d9:5f:ae:96:2c:0f:08:1b:13:4f:36:f2:bc:a8:1a:
b1:94:f8:1d:4c:96:ea:d8:b8:66:9b:9d:ed:b6:97:
34:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A7:3D:65:64:E8:1B:28:77:82:B7:CE:3A:D1:6A:8A:38:29:19:D8
X509v3 Authority Key Identifier:
keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/r6c9ZWToGyh3grfOOtFqijgpGdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.110.0/24
194.102.208.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:93:8f:54:d9:fc:9f:3d:c6:1a:88:f3:23:61:91:b7:06:fc:
36:e9:72:e9:ed:2b:a0:17:1a:d4:b7:dc:3c:9a:6a:92:bc:2f:
8d:39:77:56:c1:ee:b4:a8:9f:4e:1b:1b:17:6a:a1:07:4c:7e:
44:aa:d7:14:ea:38:eb:5b:7e:b3:dd:3b:71:b8:ba:0d:9b:d7:
04:08:92:9b:89:4b:2d:ea:78:69:01:95:05:90:4c:36:ee:42:
12:e3:4e:e2:a0:40:be:2d:57:76:84:0b:07:5b:fb:3f:66:2d:
52:d3:45:4b:82:13:a5:37:6c:44:41:98:3f:1b:ba:31:e9:2d:
a1:ff:64:14:43:fa:9e:17:b7:f4:d0:97:58:fc:98:db:6e:fc:
d5:97:90:31:66:62:1f:6c:9e:25:a4:a9:6e:e3:a5:29:60:e7:
1c:72:c4:99:9c:47:cb:26:c9:46:11:f2:24:8e:63:67:0a:d7:
45:8e:ac:ed:08:e1:31:6d:4f:03:0c:bf:54:c7:50:89:3e:2b:
7f:23:1f:52:c9:0c:0b:ae:94:42:09:65:33:1a:b4:1a:f6:d5:
4c:7e:88:81:7f:af:3a:b0:c3:d8:c7:7f:a6:9e:a3:b3:22:c5:
8e:f1:0e:39:5c:d8:b2:e9:f8:c7:c1:f3:0b:85:b6:ac:65:58:
0c:8a:d7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:26 2024 by rpki-client on console-fra.rpki-client.org