Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/mXAXPiiSebwjmZri48hqR_EODyU.roa
File: mXAXPiiSebwjmZri48hqR_EODyU.roa (raw, json)
Hash identifier: oTF19DjCrAuG2thsIsKDSVi1/IKIdzJbNgP/uIlH/LU=
Subject key identifier: 99:70:17:3E:28:92:79:BC:23:99:9A:E2:E3:C8:6A:47:F1:0E:0F:25
Certificate issuer: /CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Certificate serial: 018570D53547DC07D0070F7CB9924E8A3035
Authority key identifier: DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/mXAXPiiSebwjmZri48hqR_EODyU.roa
Signing time: Mon 02 Jan 2023 04:54:59 +0000
ROA not before: Mon 02 Jan 2023 04:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49407
IP address blocks: 91.212.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:35:47:dc:07:d0:07:0f:7c:b9:92:4e:8a:30:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Validity
Not Before: Jan 2 04:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9970173e289279bc23999ae2e3c86a47f10e0f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:a5:cb:ec:31:87:04:d6:a8:d8:b7:4e:bc:
ca:c6:32:6b:4b:49:76:d5:2a:3f:ee:c7:c6:0a:e2:
9c:75:bb:ae:9c:23:a7:cd:6a:75:b2:6f:49:42:39:
e0:36:b0:25:08:56:0b:b6:60:af:1a:9e:1e:3e:8d:
5f:2e:87:bd:41:91:8e:ba:fd:0e:a4:ed:8e:29:f6:
48:06:50:15:d8:96:c2:72:1a:ea:29:0a:04:b5:75:
96:6d:75:e7:7f:d3:90:de:9e:73:3c:66:ac:35:c5:
bf:ca:67:5a:df:cf:6e:fa:a6:ea:14:48:8e:22:4d:
63:a8:94:84:86:d6:81:de:4f:27:63:7d:b9:08:88:
4e:c3:58:33:29:05:e0:01:64:10:e3:17:e2:2a:a4:
ee:ff:7b:56:74:7e:86:10:73:f0:75:f4:e3:40:3d:
a9:fc:a2:21:2e:9f:d9:56:2f:a5:74:8d:93:2a:96:
d9:97:52:b4:54:7f:93:8e:85:8e:2b:0a:34:3e:98:
8b:c3:f5:35:5a:e6:7b:2c:b0:79:c6:e5:22:57:21:
d7:99:fb:c6:7d:92:f3:79:f8:7d:83:95:5e:59:66:
20:c3:0d:ea:b4:1a:e3:2b:eb:3a:74:d0:0f:0d:ad:
7f:ac:88:25:75:ed:bc:e4:24:42:9f:94:59:d6:e4:
86:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:70:17:3E:28:92:79:BC:23:99:9A:E2:E3:C8:6A:47:F1:0E:0F:25
X509v3 Authority Key Identifier:
keyid:DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/mXAXPiiSebwjmZri48hqR_EODyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.208.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:d2:f1:f9:b6:41:41:99:3a:33:87:56:a3:3c:9e:04:21:1d:
d4:94:68:eb:76:66:f0:db:c2:98:4c:c8:49:ce:7e:32:d9:c7:
55:75:3c:2e:8b:e7:72:8c:6f:11:51:5e:38:e8:bf:08:ee:b6:
8c:98:56:70:61:9d:28:43:19:bd:a9:be:d3:77:9a:76:23:90:
ea:a4:44:0a:94:7e:c5:79:5b:55:b2:43:43:43:84:d7:d0:dc:
8c:45:af:b6:2d:97:35:d9:f3:99:7a:42:5f:72:e4:bd:1c:ab:
31:04:30:78:e8:f8:a2:64:c1:0b:e9:a8:42:41:b3:49:36:bd:
6e:25:a3:01:c1:78:2f:8c:b2:5f:5a:2d:57:b8:fb:88:a2:ea:
7d:39:94:14:61:56:1c:e8:4e:5a:81:24:5e:de:2d:7e:17:9e:
cd:3e:ec:a8:13:1f:cb:75:24:1a:aa:86:ee:1d:d1:e6:0b:fd:
05:92:bc:bc:fa:ce:b4:0e:c7:e8:c0:d8:a4:c2:60:cb:e6:06:
cc:0d:42:7c:82:17:c4:7f:62:54:28:27:b6:3c:69:1b:62:88:
84:a7:c8:ae:64:79:03:ce:df:a9:37:90:55:5b:5f:31:d4:33:
a2:74:27:45:44:83:bf:bd:9a:bc:33:dd:4d:71:f2:a6:cd:72:
db:00:4b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:33 2024 by rpki-client on console-fra.rpki-client.org