Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/1dced4-c45c-4515-a8ad-eb89c5c4d384/1/9v1inUm-JBVl-5HakKaWjGCSd4E.roa
File: 9v1inUm-JBVl-5HakKaWjGCSd4E.roa (raw, json)
Hash identifier: /1AZVKez2m7/eCARqa0ATjACGqmnX+xrzYy4CRvEpSU=
Subject key identifier: F6:FD:62:9D:49:BE:24:15:65:FB:91:DA:90:A6:96:8C:60:92:77:81
Certificate issuer: /CN=9b5182aa966af4b9b3cc3ce3eced53fceb0e915f
Certificate serial: 01856F5495D6390DC9A5CCC5A30B48639AA3
Authority key identifier: 9B:51:82:AA:96:6A:F4:B9:B3:CC:3C:E3:EC:ED:53:FC:EB:0E:91:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1GCqpZq9LmzzDzj7O1T_OsOkV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/1dced4-c45c-4515-a8ad-eb89c5c4d384/1/9v1inUm-JBVl-5HakKaWjGCSd4E.roa
Signing time: Sun 01 Jan 2023 21:54:52 +0000
ROA not before: Sun 01 Jan 2023 21:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57749
IP address blocks: 91.234.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:95:d6:39:0d:c9:a5:cc:c5:a3:0b:48:63:9a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5182aa966af4b9b3cc3ce3eced53fceb0e915f
Validity
Not Before: Jan 1 21:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6fd629d49be241565fb91da90a6968c60927781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:1d:ce:6f:d3:12:66:a9:8b:74:46:e0:a8:
e7:01:27:9f:6c:10:59:d5:22:d7:b4:68:c6:d3:cb:
d4:bd:8e:a8:f5:1d:e1:b5:8f:bc:aa:c4:3f:7c:84:
41:61:2b:f6:00:68:67:3f:a1:e8:f1:52:c0:05:d5:
de:84:fd:f9:48:cd:05:80:06:76:c7:14:cd:d5:93:
1f:7f:4f:3e:e7:4a:3d:51:07:fe:39:2d:1f:98:db:
f7:0d:61:a6:18:e8:67:67:bc:ab:63:8d:a6:22:8b:
81:be:bf:89:48:8d:e6:fc:cd:91:63:c3:06:28:9d:
57:79:54:7f:1d:35:7c:0b:0d:87:29:00:31:12:2d:
a3:dc:35:c1:e6:7d:a1:b2:80:f1:27:f8:ad:d5:15:
0a:b2:4f:d4:e8:1f:e1:61:9e:cf:60:fe:f6:4f:90:
f2:ac:d8:ab:82:f4:3f:a3:63:fe:c7:54:ae:de:45:
98:a7:ad:f1:94:12:4c:98:c1:e9:92:a9:5e:e3:82:
57:bd:80:60:72:4b:77:aa:b0:35:db:8b:45:f0:79:
24:80:41:d4:bd:f9:cd:da:ec:96:60:db:32:3e:71:
e5:ef:53:05:82:46:d9:01:7f:84:eb:0e:86:1d:98:
70:cc:42:b3:22:b0:0a:2b:9b:c8:b1:3f:99:3d:66:
df:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FD:62:9D:49:BE:24:15:65:FB:91:DA:90:A6:96:8C:60:92:77:81
X509v3 Authority Key Identifier:
keyid:9B:51:82:AA:96:6A:F4:B9:B3:CC:3C:E3:EC:ED:53:FC:EB:0E:91:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1GCqpZq9LmzzDzj7O1T_OsOkV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1dced4-c45c-4515-a8ad-eb89c5c4d384/1/9v1inUm-JBVl-5HakKaWjGCSd4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1dced4-c45c-4515-a8ad-eb89c5c4d384/1/m1GCqpZq9LmzzDzj7O1T_OsOkV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.177.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:15:fa:45:6c:1e:ef:87:88:40:38:2d:24:60:35:16:d2:c7:
11:a5:63:d3:ce:6e:f7:ed:88:43:16:ab:36:42:ea:ce:f7:fb:
bd:6a:25:ce:34:38:bc:db:01:3a:32:c7:d7:25:8f:d6:14:39:
c5:1f:84:be:28:e6:86:39:d5:79:ec:42:1a:7e:1e:4b:98:97:
4a:9d:71:70:9b:39:26:6a:63:4a:8e:54:d5:5b:74:ef:e2:d0:
75:b8:a7:8e:f6:03:21:d8:a3:b2:48:f5:e7:9c:91:f4:de:f2:
7b:03:d7:86:83:48:1b:77:dc:60:81:f7:5e:cf:d9:6a:5f:df:
8f:71:cd:43:0d:ce:6c:0a:49:3a:04:70:10:45:53:14:09:32:
69:4f:17:fb:47:14:6e:17:19:44:6a:cd:33:66:5b:40:e4:2a:
e1:a7:39:be:b9:60:f2:3c:d5:77:ec:30:5c:50:f6:80:72:61:
08:a6:37:e4:74:4c:48:2e:4d:49:a7:08:49:75:0d:5f:f7:98:
2b:33:8f:6d:47:97:97:f2:5e:94:05:00:8d:5c:06:7a:f9:38:
53:9b:d7:42:72:9c:b9:76:40:c9:59:a9:44:fa:8f:1c:17:49:
dc:1f:84:27:6c:d2:15:2a:d4:48:c7:ec:ab:d7:60:e7:57:b2:
65:3a:b7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:23 2024 by rpki-client on console-ams.rpki-client.org