Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/ubSdM6O49r_Aint2hBWZKAvqFyU.roa
File: ubSdM6O49r_Aint2hBWZKAvqFyU.roa (raw, json)
Hash identifier: 8YaBCd2cOP3El7srGAhBwQC11dn8Cf3ek2h0vOAcVTI=
Subject key identifier: B9:B4:9D:33:A3:B8:F6:BF:C0:8A:7B:76:84:15:99:28:0B:EA:17:25
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 01856E14389C56B7D6D23B58940C2EC90B0C
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/ubSdM6O49r_Aint2hBWZKAvqFyU.roa
Signing time: Sun 01 Jan 2023 16:04:57 +0000
ROA not before: Sun 01 Jan 2023 16:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206926
IP address blocks: 91.126.90.0/23 maxlen: 24
91.126.103.0/24 maxlen: 24
91.126.102.0/24 maxlen: 24
91.126.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:38:9c:56:b7:d6:d2:3b:58:94:0c:2e:c9:0b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Jan 1 16:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9b49d33a3b8f6bfc08a7b76841599280bea1725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:a0:f0:9d:b3:aa:7d:96:82:fe:72:e3:ef:
13:b2:59:5c:ac:23:db:d0:5d:f4:e6:35:81:8d:86:
94:fc:1c:73:84:00:46:91:1c:ca:03:2b:87:cd:c6:
c4:b8:e1:e2:66:e4:41:d1:b8:8a:71:a2:6a:04:67:
59:74:42:cc:96:13:b2:a6:e4:ff:91:0d:77:fb:9d:
2a:bb:7f:b0:f7:3e:c9:fc:45:38:5a:72:d4:fc:f3:
ff:cf:80:9a:6c:ec:30:1e:8e:18:8d:14:0e:7b:f2:
39:03:1c:c1:7b:f2:0a:17:1a:a6:de:5f:c5:6c:c0:
79:1a:ad:51:d5:59:29:ae:0b:f6:06:72:4b:07:71:
86:fa:74:c4:09:d5:75:0c:6c:a1:f4:4f:a8:00:d4:
01:2e:3a:73:56:76:1b:94:a2:65:75:e0:ae:2d:d4:
aa:56:25:e6:7a:cf:34:39:2d:14:29:a7:bb:dc:ba:
5d:18:3a:5b:c6:96:2f:c5:cc:d5:8f:f1:5c:ee:bd:
7a:b8:45:44:b5:f6:89:e1:73:77:31:6a:1c:ea:ef:
4f:ba:37:7c:4b:fa:99:7b:29:6a:44:35:05:77:03:
5b:06:83:67:54:74:1d:2e:73:56:78:c5:25:b6:6e:
63:62:92:aa:5e:da:5a:b3:af:89:28:d4:63:88:a7:
72:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B4:9D:33:A3:B8:F6:BF:C0:8A:7B:76:84:15:99:28:0B:EA:17:25
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/ubSdM6O49r_Aint2hBWZKAvqFyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.126.90.0/23
91.126.101.0-91.126.103.255
Signature Algorithm: sha256WithRSAEncryption
1a:6c:a5:2f:9d:fb:d9:0e:19:8f:ca:63:29:99:b8:13:18:9d:
32:9b:4e:ea:36:bd:c5:db:ec:84:aa:19:18:43:87:0d:11:1a:
88:57:37:2e:6c:e6:d4:97:ce:bb:18:d0:80:72:d8:73:e8:3f:
47:31:fc:db:b7:04:2d:4c:af:28:33:a1:43:a9:32:25:1b:c1:
ff:f2:04:61:71:e2:e5:e1:67:a9:0d:18:e2:fd:f7:65:a8:ef:
cf:94:e6:b6:f0:6b:e0:3e:b2:4b:a3:0c:6a:db:ba:a8:18:d2:
af:60:85:72:eb:1c:c8:f2:43:e7:4d:b5:43:19:7b:9a:b2:46:
d9:3d:1b:2a:64:8f:1c:e5:26:09:3e:c7:dd:00:5b:75:f5:03:
55:ad:38:ab:ae:71:ee:ac:7d:ae:75:bb:ac:be:bb:89:f1:21:
19:bd:2e:16:a8:16:c1:31:f2:da:b6:0c:6e:d7:6b:fa:ab:36:
42:30:6d:4e:a0:11:c0:5d:fa:df:64:f8:7e:b9:89:14:33:7a:
61:3f:1a:4e:17:91:4a:95:5a:b6:d6:ea:44:58:91:28:f7:aa:
13:01:5a:8d:16:fd:fe:bb:ce:45:40:0d:12:2d:73:2f:4a:8a:
db:f2:4e:fa:37:5f:85:6c:c7:d1:7a:71:50:99:0c:c4:10:88:
14:ad:d5:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:13 2024 by rpki-client on console-fra.rpki-client.org