Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wDCQZkr990khz4cU7XwMKCu8nXk.roa
File: wDCQZkr990khz4cU7XwMKCu8nXk.roa (raw, json)
Hash identifier: NKjavjnWxIoBooaSenLGFelx4ckbK2Eo0gkODorCpOs=
Subject key identifier: C0:30:90:66:4A:FD:F7:49:21:CF:87:14:ED:7C:0C:28:2B:BC:9D:79
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019090D24A9DC181DA3B519576549B96B845
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wDCQZkr990khz4cU7XwMKCu8nXk.roa
Signing time: Mon 08 Jul 2024 05:30:19 +0000
ROA not before: Mon 08 Jul 2024 05:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215433
IP address blocks: 91.92.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Aug 2024 14:18:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:90:d2:4a:9d:c1:81:da:3b:51:95:76:54:9b:96:b8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 8 05:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c03090664afdf74921cf8714ed7c0c282bbc9d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e5:3a:2f:f4:56:92:38:10:1d:c7:7b:a2:02:
d8:05:78:88:40:33:89:5f:2f:b6:ab:c5:43:02:b0:
56:4c:6c:69:b1:00:1c:90:8a:1c:4a:f2:f8:46:af:
b4:fc:cb:ab:b3:2c:65:7a:68:c9:21:c4:7d:d0:6f:
e7:1a:f4:5d:0e:80:2b:2e:16:e1:82:87:64:44:4c:
73:2a:de:72:7c:cc:fc:f1:a5:10:5c:8f:68:6a:e2:
b5:97:58:a4:ec:17:68:fe:60:f6:25:46:d3:f0:3b:
16:0f:9f:02:3b:11:47:6f:cb:04:d5:cb:80:4f:08:
0b:87:50:dc:cc:4d:2b:e6:00:86:63:97:85:3b:dc:
3f:23:03:67:87:74:d2:0b:13:19:3a:b9:c7:c9:20:
25:be:1e:01:56:e2:3d:a7:4d:33:ea:4c:ba:c5:3f:
30:37:ec:79:c6:7e:dd:9b:ef:53:c1:cb:f3:03:8c:
df:ae:2e:db:2b:99:33:da:ad:09:88:01:07:b9:67:
70:76:ea:c8:f4:a8:10:1e:b6:76:6d:35:24:67:16:
89:09:11:c1:8c:c2:3c:94:4b:5b:a8:94:14:82:f5:
f4:73:6c:58:83:a9:68:f7:af:6a:6f:ce:e5:a8:f9:
91:d0:4b:db:aa:11:c3:24:bd:2c:21:d3:a2:e8:f1:
ed:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:30:90:66:4A:FD:F7:49:21:CF:87:14:ED:7C:0C:28:2B:BC:9D:79
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wDCQZkr990khz4cU7XwMKCu8nXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.27.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:14:dc:e0:9c:63:e6:d4:49:ff:b0:b8:74:b8:f9:aa:d3:8c:
40:78:e2:c1:84:4d:0d:8e:e2:e0:e1:c3:f3:d4:95:f6:5c:c7:
31:3d:ff:97:d4:d1:b4:46:50:e7:17:5f:1e:9e:a7:37:c8:f8:
f0:2f:af:8f:0f:f4:9d:f7:a3:a5:c6:05:e7:e3:fa:7f:c8:f2:
7c:bb:0d:a7:ce:00:7a:c1:ed:cf:f5:d1:ef:fc:70:63:9d:34:
43:c2:64:d8:f5:ee:c4:5a:1f:c1:c9:59:46:a5:2b:96:a4:c5:
bf:db:ce:2d:5d:3b:82:b6:98:e6:a6:08:62:f4:00:19:cf:3c:
6f:80:14:7a:11:e8:9d:5b:8f:85:22:33:fe:a1:91:2d:ed:b6:
28:ae:13:ea:a5:17:17:37:18:2d:23:b8:d6:e8:b8:9d:05:a7:
7e:65:07:44:7d:71:bf:6f:85:12:b9:28:0d:ad:01:22:0c:56:
dc:c4:4e:57:bb:af:ab:a8:34:d0:57:da:6f:75:6d:43:96:10:
37:68:a6:31:1e:fe:d2:f4:bc:d9:be:1f:11:c6:20:c7:d4:a6:
fc:fd:de:e8:9a:d2:b3:68:f0:13:64:99:56:9c:4b:bb:22:7e:
8b:6d:4d:70:30:26:5b:ba:e5:68:98:52:60:00:1d:83:a5:cd:
f0:a6:a8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 17:59:58 2024 by rpki-client on console-fra.rpki-client.org