Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/96xj2lcwAhRk5-s-LIq3vbsEuQU.roa
File: 96xj2lcwAhRk5-s-LIq3vbsEuQU.roa (raw, json)
Hash identifier: nxb6Kqvj7Dp958T9v5sJOsJzyrbodidpq915K4ILTuc=
Subject key identifier: F7:AC:63:DA:57:30:02:14:64:E7:EB:3E:2C:8A:B7:BD:BB:04:B9:05
Certificate issuer: /CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Certificate serial: 0186BA90DA1EB0E04D64BEB522F2EE7E1CDD
Authority key identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/96xj2lcwAhRk5-s-LIq3vbsEuQU.roa
Signing time: Tue 07 Mar 2023 05:35:00 +0000
ROA not before: Tue 07 Mar 2023 05:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31059
IP address blocks: 91.200.178.0/24 maxlen: 24
46.227.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ba:90:da:1e:b0:e0:4d:64:be:b5:22:f2:ee:7e:1c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Validity
Not Before: Mar 7 05:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7ac63da5730021464e7eb3e2c8ab7bdbb04b905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:34:43:43:9f:a9:ea:e0:6a:7c:15:42:a0:aa:
df:99:8a:33:0d:eb:b2:39:14:84:51:08:79:d0:f1:
90:05:a4:d1:89:16:f5:18:12:c2:b1:ba:d4:e6:97:
a8:53:56:48:46:7c:3e:9c:94:8e:e0:d8:17:cc:f4:
87:bd:17:a2:3e:ed:86:db:80:25:1b:3c:67:7d:76:
61:71:f0:e8:eb:62:2e:fe:5e:28:9b:c6:5d:02:93:
4b:90:c1:3c:84:ff:35:d9:a7:fa:24:69:a3:0c:18:
0f:10:99:47:f3:ed:91:07:70:26:fd:fb:01:83:8f:
0b:9e:7b:3e:87:c4:1b:2b:a1:e2:d7:db:eb:90:d2:
66:c9:31:27:d9:c6:27:fd:09:0b:46:f5:a8:3f:9b:
ad:fa:40:21:1c:c8:3b:3d:79:e0:ad:68:d5:33:61:
16:d9:48:4c:95:d7:59:01:1a:99:86:6b:9c:14:08:
22:c4:15:d8:b9:e9:4b:e6:d5:41:27:a9:91:22:7e:
65:ef:93:97:61:6d:fe:1a:56:be:88:2e:ed:45:c0:
5d:44:43:38:96:b5:1b:8e:b4:e9:de:b2:c9:d9:61:
57:73:de:bd:98:c8:48:87:a8:43:19:4e:aa:43:37:
da:43:1f:45:3a:e7:7f:0d:3e:91:55:9f:f7:25:9e:
d2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AC:63:DA:57:30:02:14:64:E7:EB:3E:2C:8A:B7:BD:BB:04:B9:05
X509v3 Authority Key Identifier:
keyid:95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/96xj2lcwAhRk5-s-LIq3vbsEuQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.165.0/24
91.200.178.0/24
Signature Algorithm: sha256WithRSAEncryption
00:2b:60:b4:71:a8:6b:41:0d:4b:8f:1a:9f:21:6a:a9:1e:35:
85:46:e1:53:4f:46:9b:09:7d:d0:23:51:d5:84:3f:e9:19:4e:
82:b7:14:a9:bb:08:70:5c:77:f0:f9:6a:9a:2a:3a:f3:2f:aa:
a9:06:f9:87:56:70:9a:13:68:94:0a:bb:09:5c:da:f3:d7:f8:
e6:6c:26:9f:b3:27:de:77:d9:d2:eb:b8:12:51:5e:04:a8:86:
0f:29:8b:be:0c:8b:1b:0f:b6:34:22:b0:ef:43:85:20:e5:8b:
ce:5e:1c:ea:f2:29:16:89:9b:76:17:6a:26:5a:dd:a2:f8:a8:
23:a8:43:ca:c3:4d:d8:a2:aa:d4:a8:4c:8a:54:73:f7:55:ef:
39:d3:c3:d9:2c:73:da:50:55:1c:6c:ac:c4:74:9c:74:e8:08:
98:e9:42:91:90:3b:84:7f:b6:1a:86:47:3c:1c:ce:04:38:f0:
7b:97:56:74:8b:1a:4d:68:ec:c9:34:4f:3c:af:4c:73:ec:4b:
6b:6b:db:c2:c1:a7:14:af:4d:28:df:e8:53:fb:5f:ad:2f:e5:
3b:1b:5d:49:49:56:14:f3:bf:73:2c:49:98:07:5a:4d:cd:57:
5a:4d:8e:b7:3e:d1:c7:7c:17:60:47:ab:f0:a5:c3:c6:18:86:
14:ba:55:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:41 2024 by rpki-client on console-fra.rpki-client.org