Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/ALd4y2wndvZ2SSJOgQMo7EB7jKQ.roa
File: ALd4y2wndvZ2SSJOgQMo7EB7jKQ.roa (raw, json)
Hash identifier: XTsAuuc5cisjIFIAJPwabmEXeM4vre0QWpt1nah4xSg=
Subject key identifier: 00:B7:78:CB:6C:27:76:F6:76:49:22:4E:81:03:28:EC:40:7B:8C:A4
Certificate issuer: /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Certificate serial: 01856CEF09466E27886F918C178A96A8D5DE
Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/ALd4y2wndvZ2SSJOgQMo7EB7jKQ.roa
Signing time: Sun 01 Jan 2023 10:44:42 +0000
ROA not before: Sun 01 Jan 2023 10:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213157
IP address blocks: 91.218.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:09:46:6e:27:88:6f:91:8c:17:8a:96:a8:d5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Validity
Not Before: Jan 1 10:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00b778cb6c2776f67649224e810328ec407b8ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:1d:0a:e0:38:cf:15:60:fd:7a:e0:9b:57:37:
07:9d:08:f1:c0:84:de:20:dc:ec:d5:19:82:ac:2b:
ce:87:35:c2:a3:7c:eb:b3:8f:a3:9e:8f:ae:3a:6e:
2a:f2:80:e1:04:71:93:3a:c7:39:af:a3:bf:39:85:
4a:e7:40:b6:78:a7:09:bb:59:2a:e7:ac:c8:56:9f:
ac:1e:3e:29:09:56:f6:3d:de:2a:b0:00:7d:2e:e0:
30:c6:f3:d8:a2:19:4a:23:ed:c2:73:f0:66:fd:be:
4a:ff:bf:07:5c:1e:7c:df:35:b4:e5:25:9e:1f:b2:
d4:94:77:ac:45:5b:bf:42:ac:c2:98:5e:c5:66:ad:
4d:77:c7:90:4d:56:e1:58:84:47:86:bc:06:a8:fd:
42:f8:72:7e:08:af:33:1b:06:15:8b:4d:52:a3:c4:
d6:ad:92:8b:8d:2a:58:79:40:5b:52:1f:ae:ac:bd:
b3:3f:5e:ce:99:ff:9d:fa:f5:8c:ec:d6:94:67:a5:
99:08:11:33:09:ac:7c:ff:e3:88:96:42:c4:0b:e4:
a2:6d:d5:af:ab:13:d8:ce:0f:c4:fd:3a:94:19:c7:
20:09:3f:04:a4:0e:16:b8:09:fc:41:59:29:f0:8a:
ed:13:a3:c9:6d:fd:92:e8:2f:86:2b:b2:f9:9a:df:
05:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B7:78:CB:6C:27:76:F6:76:49:22:4E:81:03:28:EC:40:7B:8C:A4
X509v3 Authority Key Identifier:
keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/ALd4y2wndvZ2SSJOgQMo7EB7jKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.21.0/24
Signature Algorithm: sha256WithRSAEncryption
95:c0:d1:cc:f9:9b:14:f8:9d:3b:c9:b6:c2:90:d3:06:12:06:
06:ff:04:b8:ef:96:ea:bc:20:09:bd:0e:ff:28:e0:f9:92:ed:
7b:dd:a4:27:76:6e:0c:57:d6:44:9c:8d:e5:2f:34:d6:8b:31:
12:e3:86:95:ad:5a:57:50:45:08:78:d0:28:60:d9:d7:27:4a:
d9:a7:1f:48:95:8b:ba:cc:f4:99:62:2d:d4:f1:e9:00:68:da:
88:fa:59:12:3f:6b:da:40:2a:02:84:22:4a:cd:ce:c5:96:99:
34:0e:09:30:23:be:97:c0:87:ab:bf:68:0d:92:75:bc:33:43:
01:7c:fc:97:98:6d:83:bd:91:fb:66:ea:89:64:7b:06:57:3b:
cc:85:ae:46:2f:4c:bf:81:af:36:a2:cc:d0:40:1d:5d:a7:b3:
38:ea:02:52:9c:a6:21:7f:9b:0c:96:e5:bf:f0:70:46:96:e8:
e9:15:06:5a:2a:b8:5d:83:fa:fd:33:e1:5d:6b:19:e1:5a:ff:
a7:00:44:61:67:30:94:e0:8a:24:a1:ac:4e:8e:f1:7e:68:dc:
5a:4c:b2:24:11:d4:18:95:4c:c1:f1:d6:4e:17:48:ff:b7:6a:
0d:b0:73:68:e3:fa:70:57:ad:e4:ba:92:f9:a9:b5:6f:aa:e3:
54:1a:d9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:07 2024 by rpki-client on console-fra.rpki-client.org