Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/dot9tbSDLGVDqXfmXoaQib80EBA.roa
File: dot9tbSDLGVDqXfmXoaQib80EBA.roa (raw, json)
Hash identifier: /jP3EPPCG1GkNJJZHyvQmo0kWuzS9ENysXNXdh/mCd4=
Subject key identifier: 76:8B:7D:B5:B4:83:2C:65:43:A9:77:E6:5E:86:90:89:BF:34:10:10
Certificate issuer: /CN=34f78361a077b0d789135ccd68b1261db138f950
Certificate serial: 01856C01471F17A2A8A52560E1167B470ADB
Authority key identifier: 34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/dot9tbSDLGVDqXfmXoaQib80EBA.roa
Signing time: Sun 01 Jan 2023 06:25:01 +0000
ROA not before: Sun 01 Jan 2023 06:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197881
IP address blocks: 91.227.110.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:47:1f:17:a2:a8:a5:25:60:e1:16:7b:47:0a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f78361a077b0d789135ccd68b1261db138f950
Validity
Not Before: Jan 1 06:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=768b7db5b4832c6543a977e65e869089bf341010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ce:ab:0a:9f:95:78:ca:c2:c9:a6:a0:00:32:
98:17:d4:fc:ce:95:27:8a:66:3f:1c:20:41:1d:0b:
e1:a0:a1:16:92:65:81:7f:d4:ad:5a:8b:60:2e:f4:
25:dc:26:1a:ff:a9:9b:88:dd:ce:6c:f1:9f:cf:d4:
52:9a:b9:e5:a7:bf:4e:95:b0:ca:eb:54:ff:ec:d4:
02:02:a9:0e:20:f5:20:0e:3f:e8:30:51:6a:67:ca:
e3:8a:d2:61:44:33:bf:43:d7:c0:57:74:68:22:c9:
8f:58:43:ea:df:9b:8a:86:e3:e0:1c:79:f0:16:8f:
21:8f:ec:07:49:c2:d6:e3:03:24:99:fa:6e:71:46:
32:29:a6:65:ed:4b:05:eb:a0:48:66:08:40:4c:c7:
c3:0b:3c:fd:e8:51:84:db:5f:7f:7a:63:d8:c9:f9:
87:d1:89:cd:81:5d:03:19:a2:3a:e4:39:0c:d4:67:
c7:de:46:b5:40:55:14:9d:04:1c:42:a5:32:10:c4:
5b:e2:3c:e9:64:e1:41:12:b3:1f:57:f6:58:97:42:
f1:d4:7d:75:70:87:61:99:fb:3f:d4:5e:9a:ad:44:
6c:36:d3:55:85:9b:45:da:90:c7:14:d2:40:4e:de:
3f:31:de:97:07:fe:3e:d4:a1:e5:f7:67:de:1c:a8:
3f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8B:7D:B5:B4:83:2C:65:43:A9:77:E6:5E:86:90:89:BF:34:10:10
X509v3 Authority Key Identifier:
keyid:34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/dot9tbSDLGVDqXfmXoaQib80EBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.110.0/23
Signature Algorithm: sha256WithRSAEncryption
13:3d:29:d9:3d:61:07:51:86:73:19:b5:ea:b9:52:e1:37:e2:
99:db:d1:95:31:fa:d7:a3:66:f8:cc:64:b2:41:1d:ea:fa:06:
bb:28:d4:9b:66:7f:c0:96:b6:53:73:c0:72:cf:40:a4:e9:62:
62:85:b1:c5:4d:4f:28:a7:c7:2a:90:bf:36:ee:9e:f2:cd:dc:
8e:be:78:dc:10:73:19:b0:f0:c7:98:17:8d:e0:1d:95:7c:90:
91:18:4a:e2:b8:0f:a9:2c:d4:5a:89:18:86:94:ba:4a:27:11:
e8:f2:62:20:e7:cb:78:a9:97:3d:eb:9e:df:c2:39:ec:c6:f0:
dc:46:9f:70:b9:8f:ac:76:8b:8b:df:f1:18:d9:ac:7b:04:2f:
d3:fd:60:60:1a:05:f9:f1:c8:93:b9:16:27:04:6f:38:3f:f1:
94:33:f8:1c:96:9b:1e:23:0c:71:4f:57:41:98:5b:4d:e4:42:
63:60:ee:c8:a8:33:de:aa:d2:6a:ec:3a:ba:6b:0c:41:85:39:
5c:ca:f3:45:21:ca:85:be:c9:40:82:66:a0:eb:77:2a:23:e3:
9e:c5:b4:2b:68:1e:b3:cf:84:ad:de:de:e4:60:95:69:15:d5:
96:64:c4:69:da:ae:47:64:c0:c9:cd:93:6b:b4:d8:86:aa:20:
b0:69:db:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:25 2024 by rpki-client on console-ams.rpki-client.org