Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/r7ZyoZUl09tsxWl-p1BS4gIFRHw.roa
File: r7ZyoZUl09tsxWl-p1BS4gIFRHw.roa (raw, json)
Hash identifier: 4HdKybgSJWlAyUuFTkCP2EC1ZgCh2wEq5oDF/h47xyM=
Subject key identifier: AF:B6:72:A1:95:25:D3:DB:6C:C5:69:7E:A7:50:52:E2:02:05:44:7C
Certificate issuer: /CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Certificate serial: 0186921ACB91793D2A3904454BE2163E2006
Authority key identifier: 4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/r7ZyoZUl09tsxWl-p1BS4gIFRHw.roa
Signing time: Mon 27 Feb 2023 09:01:14 +0000
ROA not before: Mon 27 Feb 2023 09:01:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 91.212.121.0/24 maxlen: 24
2a12:89c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:1a:cb:91:79:3d:2a:39:04:45:4b:e2:16:3e:20:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Validity
Not Before: Feb 27 09:01:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afb672a19525d3db6cc5697ea75052e20205447c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ed:d0:12:9b:c3:a3:df:05:2c:6e:92:73:cf:
06:28:cb:7b:bc:62:f8:4a:85:b0:47:4b:89:ee:61:
df:a7:71:3d:27:45:96:2d:42:f7:56:29:c5:6b:6c:
4c:3b:ce:c7:82:1c:51:24:4e:4f:0d:e3:d8:f1:e6:
3b:83:13:c5:8c:ec:52:1d:61:37:3b:83:97:a5:53:
08:06:43:e0:16:76:4b:70:d6:5f:54:08:00:7b:2d:
5a:22:fc:75:b2:8b:5b:52:7b:fa:be:35:dd:4f:f4:
00:91:6f:58:f3:01:b7:5b:80:1a:d2:b8:d6:13:2f:
ea:f7:30:ba:d6:b0:0f:1b:ae:66:5a:19:b6:b9:8d:
66:9d:62:a9:49:8e:e7:cb:d2:fd:e3:8c:dd:c4:f0:
24:36:4a:0c:00:e0:6e:fe:fc:63:f8:50:0b:8a:11:
a3:94:e3:ce:92:e2:e8:ec:6b:02:80:dc:69:8a:eb:
21:ba:08:d1:fd:7c:2f:a6:03:d5:64:58:dc:15:79:
db:f1:58:a5:dc:7f:70:f6:01:ca:87:2d:4d:1d:38:
de:08:1f:5f:49:f6:45:f8:5c:5d:ed:84:f2:d3:c9:
5f:b2:c6:88:c8:24:10:7e:88:64:1b:c7:69:dd:4f:
bc:9b:9c:7c:0c:12:d1:aa:93:0c:85:38:37:e9:d6:
fd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B6:72:A1:95:25:D3:DB:6C:C5:69:7E:A7:50:52:E2:02:05:44:7C
X509v3 Authority Key Identifier:
keyid:4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/r7ZyoZUl09tsxWl-p1BS4gIFRHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.121.0/24
IPv6:
2a12:89c0::/29
Signature Algorithm: sha256WithRSAEncryption
9b:ff:28:fe:a5:1d:22:4d:ce:aa:84:42:b5:54:16:54:a7:7c:
67:2e:44:8b:84:47:6b:24:9e:8c:12:6a:f0:5a:1d:73:d7:00:
07:6b:ee:81:94:3c:6f:43:fa:52:9c:9e:21:2c:30:54:50:c1:
52:d2:61:4e:c5:0d:ea:38:57:8b:3a:56:b8:6c:c3:d1:aa:50:
7f:82:60:80:df:8c:90:18:5c:2a:5a:48:8f:77:a4:e0:5e:8d:
df:b0:af:cf:22:9a:d5:09:da:2e:43:b0:94:2e:f9:cb:73:c0:
f0:38:03:c2:54:56:87:c0:09:57:4d:d8:72:75:29:e3:52:d9:
73:75:f5:97:cf:08:69:e6:38:72:b7:8a:c8:8a:3c:ba:00:e1:
2a:17:cc:86:ef:86:3d:3f:e8:40:ca:78:c1:9c:4f:34:88:c7:
b0:d5:0b:9c:ae:2e:87:24:c6:c1:7a:73:19:eb:6f:22:ba:41:
60:c6:65:29:6a:2e:1b:1d:a6:14:cb:ff:5d:07:49:48:b2:c3:
8d:e1:3b:83:82:40:e5:50:11:b2:11:69:40:73:08:1f:64:08:
ac:18:e4:6d:12:1f:61:27:27:3c:78:43:3b:65:99:33:d6:63:
29:85:54:fa:83:28:d7:2e:22:63:21:12:6b:51:a8:90:2b:d1:
bb:65:12:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:04 2024 by rpki-client on console-fra.rpki-client.org