Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/_DjzuSq73ghJsJni01azeEyNgA0.roa
File: _DjzuSq73ghJsJni01azeEyNgA0.roa (raw, json)
Hash identifier: vBcyKoozDs/Pr7awQXWnYbqMkPRK3vLvkUwM2Uu1wBs=
Subject key identifier: FC:38:F3:B9:2A:BB:DE:08:49:B0:99:E2:D3:56:B3:78:4C:8D:80:0D
Certificate issuer: /CN=5d370a48b59fb811495f11c49734482f22b1a392
Certificate serial: 018C5D739A5C10A519DDD0A8921651410AF6
Authority key identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/_DjzuSq73ghJsJni01azeEyNgA0.roa
Signing time: Tue 12 Dec 2023 09:55:06 +0000
ROA not before: Tue 12 Dec 2023 09:55:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.226.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Dec 2023 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5d:73:9a:5c:10:a5:19:dd:d0:a8:92:16:51:41:0a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d370a48b59fb811495f11c49734482f22b1a392
Validity
Not Before: Dec 12 09:55:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc38f3b92abbde0849b099e2d356b3784c8d800d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:99:2d:a8:86:f3:80:09:27:fb:d5:74:7a:9a:
43:55:1e:37:fb:cf:18:51:e0:2b:53:04:9c:94:0c:
dc:58:dd:f1:b4:36:3d:23:47:a7:f3:f2:09:d5:4e:
9c:ac:8a:66:bd:b7:dc:96:b8:7b:31:21:59:79:7a:
75:b0:2f:c2:ed:2f:b4:f1:0b:40:a9:2e:eb:05:20:
7a:1f:7e:88:cd:a4:25:f2:2a:b2:24:67:d4:61:9f:
0a:eb:7c:61:79:2b:b5:d0:83:42:c6:eb:5e:ff:2b:
91:31:a0:39:48:70:cc:af:2d:2e:21:6e:0e:40:f6:
00:84:ee:c7:d3:59:58:82:0e:e8:93:b0:5d:07:b0:
33:68:72:9a:4a:75:6d:4a:89:19:83:ca:3c:c2:25:
43:ff:cc:32:ca:5e:d9:c2:da:a9:47:5c:70:90:36:
10:38:53:25:a7:32:d9:e7:09:3d:d1:8a:44:e9:90:
c6:de:14:c6:6e:b1:b8:07:e5:11:f1:08:f8:71:f8:
0c:4f:dc:2a:80:24:0b:6c:ca:64:d8:a1:ce:21:3a:
79:7e:37:90:e1:35:49:20:2d:5a:8d:f1:02:4b:83:
1e:8b:f1:01:7e:37:68:99:eb:c1:b1:14:21:b5:98:
df:26:cd:1b:46:22:8e:89:a1:50:6e:86:4b:d7:3f:
33:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:38:F3:B9:2A:BB:DE:08:49:B0:99:E2:D3:56:B3:78:4C:8D:80:0D
X509v3 Authority Key Identifier:
keyid:5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/_DjzuSq73ghJsJni01azeEyNgA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.97.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f8:ec:c4:52:f8:c4:01:94:09:3d:ef:c2:40:43:77:b2:5d:
34:c4:af:68:0e:2b:43:a8:5e:d2:42:fd:45:85:c4:93:b0:33:
1d:84:6f:77:96:08:bc:51:8a:a3:fd:95:1c:68:dc:a3:42:20:
3d:a2:81:78:4a:3f:ad:48:c9:fd:a5:7e:a4:7a:28:f5:46:b2:
48:8d:9a:a9:22:d6:14:6f:24:04:80:85:d7:27:d4:05:79:ec:
25:ac:bc:6b:80:69:68:e8:c3:c8:93:90:b3:f1:82:c1:76:0d:
b1:97:93:59:5f:8f:53:e7:90:95:a6:02:ee:ad:7b:26:2b:b6:
f3:e7:52:0b:73:d2:39:68:22:b5:ce:21:2e:26:57:4f:4a:47:
db:37:f3:07:a7:86:26:7a:c1:63:a1:7e:ea:2d:bd:1f:8a:74:
a0:15:5f:ab:56:52:63:2d:ff:b4:04:10:d2:e6:35:df:63:f8:
e3:43:48:26:de:04:4f:bf:2e:87:7e:70:a5:1d:89:91:37:84:
5b:2e:a9:65:60:3a:0b:3d:cd:c5:49:f3:a9:f7:01:0c:76:27:
38:31:e9:fd:06:95:ac:39:0d:77:b4:73:a4:15:8d:45:22:63:
f0:23:ed:cb:3a:48:19:b9:02:9b:7a:13:db:84:23:70:68:24:
e5:dc:32:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:45 2024 by rpki-client on console-ams.rpki-client.org