Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/40ad8d-a03d-445c-af1e-bb9be892ac5c/1/eRgjMjufyseXqFvgZ7d5Mceq0Ho.roa
File: eRgjMjufyseXqFvgZ7d5Mceq0Ho.roa (raw, json)
Hash identifier: KOZLYsaGyKpiL2KbH6YJ8SysHZfMOyxnpW6tyBehfDQ=
Subject key identifier: 79:18:23:32:3B:9F:CA:C7:97:A8:5B:E0:67:B7:79:31:C7:AA:D0:7A
Certificate issuer: /CN=c0a9ca3a912e87279b43a27a4aa5bb91ca5e2786
Certificate serial: 018BF2B616979148E3E3C127C37E36BEB904
Authority key identifier: C0:A9:CA:3A:91:2E:87:27:9B:43:A2:7A:4A:A5:BB:91:CA:5E:27:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKnKOpEuhyebQ6J6SqW7kcpeJ4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/40ad8d-a03d-445c-af1e-bb9be892ac5c/1/eRgjMjufyseXqFvgZ7d5Mceq0Ho.roa
Signing time: Tue 21 Nov 2023 16:28:21 +0000
ROA not before: Tue 21 Nov 2023 16:28:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50131
IP address blocks: 91.230.73.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f2:b6:16:97:91:48:e3:e3:c1:27:c3:7e:36:be:b9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a9ca3a912e87279b43a27a4aa5bb91ca5e2786
Validity
Not Before: Nov 21 16:28:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=791823323b9fcac797a85be067b77931c7aad07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2a:69:e6:dd:5f:a8:86:68:3e:6e:fc:9c:1c:
8f:31:8f:32:95:62:55:53:90:a6:40:9f:57:44:2a:
2f:27:a4:f6:48:49:65:3f:46:ef:d8:15:73:4c:32:
06:14:b3:e6:89:b2:c6:d2:be:2f:56:10:b1:92:89:
c8:08:02:cc:4d:45:7b:8b:e5:1a:ea:02:d0:26:7c:
b9:85:56:d5:72:c0:5d:09:a3:0a:30:36:3a:4c:27:
55:84:73:02:cc:ae:04:19:4a:30:ef:be:39:8f:e1:
05:b7:c9:5d:67:dd:0e:17:2e:4a:03:7c:ed:24:3d:
3d:0d:ef:f2:8d:db:de:42:5f:a5:81:e5:09:49:89:
f1:cf:e6:ef:16:d7:11:b7:59:2d:80:f8:85:ed:70:
40:82:5f:d4:e7:05:5a:fc:b4:bd:47:bd:c1:e8:43:
8c:15:2e:20:92:c2:02:45:74:dc:c5:cb:6e:43:94:
d3:05:75:ed:c7:b2:c5:ae:9e:3f:08:0b:73:7c:b7:
4c:f7:df:a8:17:52:9c:be:3a:db:10:1d:50:f3:37:
11:b6:d1:d3:15:6a:c9:bc:e2:7d:46:46:94:bb:78:
16:78:7b:2d:78:45:4a:bd:8c:28:0e:3a:f2:bc:72:
d5:ec:a8:ed:48:84:42:6c:fd:1e:f3:a8:2e:dd:9d:
f8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:18:23:32:3B:9F:CA:C7:97:A8:5B:E0:67:B7:79:31:C7:AA:D0:7A
X509v3 Authority Key Identifier:
keyid:C0:A9:CA:3A:91:2E:87:27:9B:43:A2:7A:4A:A5:BB:91:CA:5E:27:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKnKOpEuhyebQ6J6SqW7kcpeJ4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/40ad8d-a03d-445c-af1e-bb9be892ac5c/1/eRgjMjufyseXqFvgZ7d5Mceq0Ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/40ad8d-a03d-445c-af1e-bb9be892ac5c/1/wKnKOpEuhyebQ6J6SqW7kcpeJ4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.73.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:50:dd:c0:71:5a:82:6c:e4:5f:33:e0:c2:b2:1b:ee:9b:bd:
d1:c8:9f:fc:27:28:22:3c:07:5f:de:c8:d6:44:b1:03:ec:49:
60:8c:62:ed:ba:bf:a6:42:f1:78:d9:67:9a:4b:d1:16:b4:d2:
cd:cf:85:4f:b4:e9:9d:1c:c7:24:a8:03:dd:8e:e6:be:8c:24:
fd:78:91:f0:be:21:74:41:43:1a:d4:49:ce:1d:89:95:5e:6c:
d3:4f:f1:45:2f:4c:ad:9c:1b:c0:f1:51:3a:11:01:b5:88:42:
9f:57:49:0c:3a:e5:a0:8b:8f:69:2b:86:95:dd:5d:f5:a4:dd:
52:20:e3:b4:3b:14:ee:39:36:01:c0:a5:07:02:b4:57:b4:fb:
72:24:2c:32:88:ba:a3:6f:f7:25:68:89:d5:6f:66:b0:e9:65:
03:d9:83:1e:ed:74:75:50:a5:7c:67:68:31:e1:4b:9c:c1:d0:
78:57:7d:d4:b3:18:8d:c1:4e:60:b3:3a:35:46:d6:30:ef:0f:
2e:98:eb:9a:e3:98:f8:2c:72:a3:e7:5f:41:8a:e6:79:4c:a1:
b8:66:e9:46:e3:8b:17:18:27:c9:b7:c1:23:45:86:85:2e:17:
69:ee:16:cd:ac:9e:7e:7a:a4:33:a7:f4:91:5a:59:8b:00:f2:
58:12:06:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:55 2024 by rpki-client on console-fra.rpki-client.org