Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/a0uBxIXeww-YgGotO7LOxWr5TP4.roa
File: a0uBxIXeww-YgGotO7LOxWr5TP4.roa (raw, json)
Hash identifier: GMTTkvXLHX8vCjqkTApoPWEd4upmhTU4ynWV/quib/0=
Subject key identifier: 6B:4B:81:C4:85:DE:C3:0F:98:80:6A:2D:3B:B2:CE:C5:6A:F9:4C:FE
Certificate issuer: /CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Certificate serial: 0185701534DFC8919146B99ACE82387ECE49
Authority key identifier: 9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/a0uBxIXeww-YgGotO7LOxWr5TP4.roa
Signing time: Mon 02 Jan 2023 01:25:16 +0000
ROA not before: Mon 02 Jan 2023 01:25:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48332
IP address blocks: 91.209.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:34:df:c8:91:91:46:b9:9a:ce:82:38:7e:ce:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Validity
Not Before: Jan 2 01:25:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b4b81c485dec30f98806a2d3bb2cec56af94cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:10:62:70:34:8d:5f:a2:20:6e:77:b4:3b:cb:
94:50:dd:a6:2b:ce:85:55:f0:87:79:c1:ce:f6:b7:
ec:38:e2:e2:36:53:1f:de:3a:43:dd:a1:61:93:7f:
81:49:76:eb:a7:20:9e:58:7f:69:14:47:42:04:52:
e0:fd:5e:9e:1d:33:b4:89:f4:f8:00:65:f9:57:03:
03:66:78:ee:70:a2:c5:23:8e:ca:f8:40:3b:f5:65:
6b:92:b5:03:f4:dd:37:e7:ca:0b:3a:f1:91:2e:49:
62:ea:fc:d9:7a:58:a7:c2:52:70:7a:6b:cf:d7:09:
f0:4a:76:65:f9:41:4c:fb:33:83:4b:bc:6a:ce:47:
2b:76:70:b3:ee:d4:23:41:b3:59:e4:3e:a9:8f:e7:
9b:ce:c5:2f:22:17:f3:ed:6b:c2:b5:6b:7d:ce:de:
b1:c1:2e:03:b7:38:fd:7c:39:2b:93:07:53:a4:68:
2a:d7:53:da:f0:bf:30:a4:e5:b2:f4:22:3a:c1:e4:
47:01:3b:69:5d:97:04:47:b9:7a:4d:bc:2a:ab:82:
77:2b:84:c5:df:a3:73:90:34:cd:92:7a:7d:5e:a5:
b0:20:74:1b:e6:83:9f:98:02:ab:9b:2b:fa:fd:68:
47:b0:14:8e:f3:42:f1:72:e7:e5:e0:68:d5:17:69:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4B:81:C4:85:DE:C3:0F:98:80:6A:2D:3B:B2:CE:C5:6A:F9:4C:FE
X509v3 Authority Key Identifier:
keyid:9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/a0uBxIXeww-YgGotO7LOxWr5TP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.109.0/24
Signature Algorithm: sha256WithRSAEncryption
34:80:d8:0f:11:24:07:be:9e:f4:67:44:e6:c7:b5:eb:1e:d3:
83:52:28:09:26:d2:43:c0:d8:e8:ba:f5:e0:95:8e:9e:97:d7:
b1:42:d5:82:2a:15:88:36:09:ab:d6:42:bc:18:46:b7:38:c2:
44:55:4c:1e:a9:d2:a9:24:e2:f6:28:d6:d2:5c:2c:ec:42:50:
52:84:e4:7f:3c:dc:50:c1:cc:33:5f:e0:45:3f:35:ea:ae:0a:
35:ec:4c:e6:e9:ba:ca:f4:44:ee:79:2c:aa:d3:39:9a:88:fc:
8b:17:69:d7:c8:4f:29:a6:94:a0:d3:0d:5c:17:11:bd:ae:05:
d9:b4:ce:62:a5:ec:c8:d4:59:6e:67:a2:be:4d:de:2d:d7:07:
bc:f3:02:52:02:c2:0d:10:68:88:74:f9:c3:df:8c:93:20:b2:
71:74:3b:d8:85:20:7a:9a:a6:7b:da:75:c2:26:73:2a:89:02:
2e:3a:0e:0a:33:64:c9:c2:e7:11:76:3e:8c:c0:10:35:e8:af:
4f:49:71:62:be:97:00:52:6d:ab:f0:12:bd:ec:02:f0:67:0c:
38:96:34:b8:7e:ce:c0:89:57:c2:f0:ce:62:0d:4a:46:21:40:
5a:a8:e4:49:21:da:52:60:3e:b4:aa:a4:1f:bf:78:b0:9e:c8:
c8:f4:df:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:29 2024 by rpki-client on console-fra.rpki-client.org