Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/V96eJHuWw8dN4q8vC6r7ytxCJM0.roa
File: V96eJHuWw8dN4q8vC6r7ytxCJM0.roa (raw, json)
Hash identifier: tyOb2wi2rf5SZ2Rg3dB/Q8Wdk+HLvODABsjYGtbHRhc=
Subject key identifier: 57:DE:9E:24:7B:96:C3:C7:4D:E2:AF:2F:0B:AA:FB:CA:DC:42:24:CD
Certificate issuer: /CN=28c2202a443537fb8fb280567a17485f1230c411
Certificate serial: 01856F26E9E3692907D9E4BB9E603F484D2D
Authority key identifier: 28:C2:20:2A:44:35:37:FB:8F:B2:80:56:7A:17:48:5F:12:30:C4:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/V96eJHuWw8dN4q8vC6r7ytxCJM0.roa
Signing time: Sun 01 Jan 2023 21:04:59 +0000
ROA not before: Sun 01 Jan 2023 21:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51926
IP address blocks: 91.220.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:e9:e3:69:29:07:d9:e4:bb:9e:60:3f:48:4d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c2202a443537fb8fb280567a17485f1230c411
Validity
Not Before: Jan 1 21:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57de9e247b96c3c74de2af2f0baafbcadc4224cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:72:a6:a5:e7:16:99:5d:ce:2b:3e:4a:63:88:
db:64:00:e7:54:9c:9c:97:38:8f:80:eb:2d:6a:c8:
4e:82:0c:c3:7b:3c:98:d7:3e:43:d2:37:66:c8:a4:
5e:77:de:5d:38:e8:db:8f:82:ba:f8:a2:85:92:3d:
ab:32:e8:f1:ca:89:d9:c1:99:65:6c:19:be:35:83:
be:c5:81:4a:47:b5:60:0e:c8:ea:6d:70:f4:ea:88:
80:31:83:d5:23:16:85:4c:bf:5f:ff:56:20:18:51:
2c:9c:b7:10:61:5e:ff:de:cc:cd:19:e7:2d:f3:6c:
67:29:42:c4:75:d3:d7:6c:c2:8d:d5:37:22:49:c3:
a9:61:a4:b7:c1:10:b6:e0:bd:dc:58:8e:00:f8:09:
df:d5:5a:35:c2:e9:3f:55:4c:dd:9f:60:45:46:2c:
ea:d0:4d:01:50:18:10:28:c8:a4:3e:c8:9d:bc:51:
af:11:4a:2a:32:eb:60:2a:5a:62:f7:c2:4d:4d:67:
6d:b6:ec:05:62:9d:ae:26:55:0a:7f:a6:ea:50:54:
a6:1c:f0:35:2b:12:64:f5:0e:3f:64:ef:23:e6:79:
55:32:32:9d:be:91:3c:72:0e:83:7c:12:3a:c8:74:
c8:d5:dd:9a:82:a9:2c:85:26:a0:ab:c2:cc:62:ce:
e3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DE:9E:24:7B:96:C3:C7:4D:E2:AF:2F:0B:AA:FB:CA:DC:42:24:CD
X509v3 Authority Key Identifier:
keyid:28:C2:20:2A:44:35:37:FB:8F:B2:80:56:7A:17:48:5F:12:30:C4:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/V96eJHuWw8dN4q8vC6r7ytxCJM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.160.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:11:c0:01:43:45:e9:41:c1:35:f3:ae:b8:4d:e7:cd:27:ab:
9c:2f:ac:d6:2e:ed:02:ae:c4:f9:f2:51:f8:f7:71:4c:5b:ce:
6c:56:d5:fe:1e:8b:af:6f:b9:91:07:cd:69:d5:f8:67:bc:e5:
56:bb:f6:4e:77:f7:69:77:a5:99:93:a5:d1:59:f7:68:93:e8:
13:0d:a0:37:e5:07:8a:7c:27:31:15:60:0a:48:3c:84:13:66:
33:68:60:4d:88:2a:2d:3e:62:67:e4:e9:0a:69:93:51:b4:2c:
9e:af:02:67:20:0f:aa:d2:0b:37:97:48:e6:21:3a:38:b2:65:
e2:44:8d:49:4a:97:3c:f0:73:22:e0:47:63:f8:45:54:89:74:
dc:74:ce:5b:03:d8:da:bb:a6:f2:02:3e:e9:e9:fe:1d:dd:27:
a1:88:b2:5b:7a:87:f9:ec:11:41:e4:67:ee:79:47:df:4e:09:
43:d1:38:43:92:eb:63:fa:af:99:49:74:22:e9:6a:3b:5a:22:
8f:db:2f:2e:e3:d6:17:64:a8:06:13:18:21:dc:b2:ff:67:2c:
9b:b6:4e:ac:0b:61:fb:e6:5f:77:01:95:d8:1c:fe:da:66:8f:
62:9d:15:d6:99:e6:61:ff:7d:fe:ad:13:05:31:f0:ca:5f:9d:
7e:23:36:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:00 2024 by rpki-client on console-fra.rpki-client.org