Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/0ibf8u_cx3xe4q0Th0JPqKkU99I.roa
File: 0ibf8u_cx3xe4q0Th0JPqKkU99I.roa (raw, json)
Hash identifier: 3vp/ISk9LTu5wtbUStQGHvVOonwHiO7I+VAl3oFcG1g=
Subject key identifier: D2:26:DF:F2:EF:DC:C7:7C:5E:E2:AD:13:87:42:4F:A8:A9:14:F7:D2
Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial: 01856F8B6EEC7DCF67F27C53CD49DE5D46F6
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/0ibf8u_cx3xe4q0Th0JPqKkU99I.roa
Signing time: Sun 01 Jan 2023 22:54:46 +0000
ROA not before: Sun 01 Jan 2023 22:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43397
IP address blocks: 91.194.230.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Aug 2023 13:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:6e:ec:7d:cf:67:f2:7c:53:cd:49:de:5d:46:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Validity
Not Before: Jan 1 22:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d226dff2efdcc77c5ee2ad1387424fa8a914f7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0b:55:95:18:05:b6:a9:e7:00:4c:86:c1:29:
6d:51:37:e4:33:35:15:19:54:32:98:2b:86:36:c7:
a3:a2:b2:04:89:1d:71:3f:4a:d5:ac:0c:0c:78:d1:
ef:6d:11:7b:5e:a2:0e:e4:63:ca:03:1d:68:7f:10:
f1:5b:70:11:3e:38:19:9b:a5:ab:10:a0:f3:f2:cf:
8b:97:4f:4f:7a:af:49:e0:2d:dc:f9:43:23:81:04:
e4:ff:a9:cc:a0:af:5b:d0:c0:14:e0:df:c9:d2:11:
7d:a4:a7:e5:32:80:e1:8a:1f:26:8e:6d:ee:a3:ee:
c2:d8:d8:a7:11:8e:f3:ca:ee:63:37:cf:37:97:f1:
07:19:f4:7b:bc:82:42:37:04:9e:3c:1b:57:60:af:
63:75:36:3c:60:1d:5b:a6:cb:8e:c4:e6:a5:84:6d:
3d:99:ed:46:66:2c:ee:4b:89:6e:53:5e:8d:5d:16:
60:7c:6d:ed:60:7d:7e:a5:b7:79:c4:44:03:48:c4:
99:e6:0c:ad:7f:0e:ea:aa:74:3f:9b:98:77:f4:7b:
d0:46:db:2a:2c:08:cc:01:b7:36:4c:27:97:2b:b6:
76:d2:8d:59:87:4c:a0:b8:85:27:4f:ca:40:da:60:
5d:25:04:6b:6d:20:cb:eb:93:93:08:df:8d:33:bb:
0e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:26:DF:F2:EF:DC:C7:7C:5E:E2:AD:13:87:42:4F:A8:A9:14:F7:D2
X509v3 Authority Key Identifier:
keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/0ibf8u_cx3xe4q0Th0JPqKkU99I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.230.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:d6:68:17:7a:1e:c3:a6:c4:6c:78:c8:2d:ff:d7:fe:9f:61:
f0:12:ab:5e:80:4a:d5:a6:b5:a9:4c:26:6b:0d:2f:87:3b:87:
ac:be:ff:ed:ce:aa:ad:81:64:34:38:b5:77:78:2c:70:01:9c:
f6:c8:16:f5:2f:5d:04:51:3f:4b:00:c2:61:aa:c1:73:c1:45:
b4:d8:5e:39:87:75:1d:e3:00:ce:10:23:4a:1d:69:3f:dd:0f:
55:ab:8c:b3:36:8d:df:d1:b7:fc:20:4c:99:49:e2:9e:7f:f2:
d6:84:21:4b:02:c4:f5:4a:6f:aa:ac:cd:cf:c0:65:fb:12:d3:
53:6c:07:18:06:55:bc:3d:f1:9f:9f:80:c3:27:68:74:67:e0:
9f:e0:09:be:7f:9c:e7:a3:54:21:4e:14:25:c7:fb:a3:9f:df:
cc:23:f8:a8:f4:a6:32:98:e5:d5:ae:6c:f6:56:f0:10:e5:06:
f5:ea:d2:ab:d0:a7:14:9f:fd:2d:fb:28:3a:67:b4:c8:bf:0e:
85:e7:bb:4f:17:29:8d:dd:ba:56:d4:f4:dd:e1:4e:21:15:0c:
0c:6f:a8:e2:7e:c4:3d:47:e7:9b:22:9a:aa:00:ca:33:24:bb:
e2:9b:6b:ec:bb:af:31:38:92:6e:de:9c:4c:6d:90:a2:b5:60:
30:93:47:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:08 2024 by rpki-client on console-fra.rpki-client.org