Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/oHNpq2VSL46veqX0Sk6W4uT9PlU.roa
File: oHNpq2VSL46veqX0Sk6W4uT9PlU.roa (raw, json)
Hash identifier: +3FqhnI9Z9GTe+BHVZkYeK2RwgGrMs/ISQ961YzPqus=
Subject key identifier: A0:73:69:AB:65:52:2F:8E:AF:7A:A5:F4:4A:4E:96:E2:E4:FD:3E:55
Certificate issuer: /CN=a55004661a09e2675fc1599d4e40027d778c404c
Certificate serial: 018A74181E5069C60278F9AE18DF170329BA
Authority key identifier: A5:50:04:66:1A:09:E2:67:5F:C1:59:9D:4E:40:02:7D:77:8C:40:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/oHNpq2VSL46veqX0Sk6W4uT9PlU.roa
Signing time: Fri 08 Sep 2023 09:20:52 +0000
ROA not before: Fri 08 Sep 2023 09:20:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56988
IP address blocks: 91.229.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:74:18:1e:50:69:c6:02:78:f9:ae:18:df:17:03:29:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a55004661a09e2675fc1599d4e40027d778c404c
Validity
Not Before: Sep 8 09:20:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a07369ab65522f8eaf7aa5f44a4e96e2e4fd3e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:79:41:fe:1c:44:69:9c:79:7a:11:fc:21:6e:
1d:1c:e8:a2:81:ed:a1:03:da:c3:72:44:9b:71:e9:
54:e4:0e:12:3f:d6:ae:06:a7:f9:cb:30:a0:f5:5e:
14:fd:27:6f:ae:03:69:13:67:57:84:d2:92:ab:8e:
d2:98:f1:93:17:cf:f2:1e:fc:7b:73:a2:70:ca:e2:
39:d9:76:a4:9e:a4:81:df:11:4a:f0:3e:3b:a8:e2:
ef:d0:ed:01:39:df:54:f5:10:a6:7d:81:5c:e3:30:
2b:95:3d:0f:3a:ab:25:34:70:e3:df:32:2a:ba:93:
71:31:74:a2:cf:a6:50:f0:ea:ba:f2:d3:f5:14:f8:
a1:63:a6:04:d9:2d:7c:1d:2c:5a:be:47:2c:72:ad:
5b:a5:97:32:28:56:c3:31:dc:2b:74:ce:4e:88:fd:
c4:a0:a7:e5:58:8c:3c:ff:ba:99:cb:d4:92:67:1e:
00:fa:43:e0:0a:ff:d7:5a:84:9d:d2:da:30:73:c1:
e1:b6:75:e6:4a:16:0e:94:0d:12:7b:59:ed:1e:48:
16:90:c9:3f:d5:1d:b6:24:f7:63:5b:e6:34:9c:37:
7a:cf:57:13:60:76:fe:7a:5c:46:ad:5b:0b:92:d6:
ce:e3:2d:85:77:26:d1:2f:d7:59:38:ae:dd:8d:e0:
ba:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:73:69:AB:65:52:2F:8E:AF:7A:A5:F4:4A:4E:96:E2:E4:FD:3E:55
X509v3 Authority Key Identifier:
keyid:A5:50:04:66:1A:09:E2:67:5F:C1:59:9D:4E:40:02:7D:77:8C:40:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/oHNpq2VSL46veqX0Sk6W4uT9PlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.224.0/24
Signature Algorithm: sha256WithRSAEncryption
88:f0:00:7c:04:61:c0:86:af:1e:8b:96:17:e9:5d:bb:a4:5a:
14:47:56:e7:f8:1c:fb:6c:a1:00:08:db:26:2b:74:ce:c7:69:
0d:f2:93:0e:cc:03:ad:ee:c4:81:41:cb:8b:41:59:86:f6:01:
62:a0:bc:92:10:0d:0d:dc:7a:2d:12:ed:93:ee:fc:26:09:1e:
fa:58:a3:b2:df:a7:50:7d:ec:50:2f:89:b4:5e:6d:81:2f:f0:
9f:6b:ff:74:31:a9:17:3e:87:93:03:0d:54:96:89:0f:95:02:
49:3b:39:94:d3:32:be:4d:6a:67:76:1c:95:5d:10:4a:64:45:
dd:51:22:b4:5d:a1:74:d7:ec:f1:70:4e:fa:39:6b:01:91:e4:
f0:fe:ea:50:8a:e3:71:d1:e2:06:bb:f9:8d:85:a3:d5:53:78:
22:fd:a7:53:b8:79:e1:11:5e:18:30:09:67:c6:cd:9a:a1:e1:
6b:29:20:33:e6:5f:d8:7e:19:5e:4e:f7:51:a6:5b:a4:54:30:
5c:79:19:1f:8f:e7:da:0b:35:20:86:4c:62:2e:c6:5c:35:d2:
5d:5f:ec:ab:29:22:b7:a0:83:84:68:5a:67:cc:6a:e6:ed:56:
5e:ef:f2:fb:64:41:bc:35:82:2b:8b:2e:c0:75:21:c3:d9:70:
b5:f9:21:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:06 2024 by rpki-client on console-fra.rpki-client.org