Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/KtGrV7OEHQ-9-bG7SA7CgAfP4YY.roa
File: KtGrV7OEHQ-9-bG7SA7CgAfP4YY.roa (raw, json)
Hash identifier: RwzEUcyaQcQrLwSttzGIP5BPNCaIbvOj56C50sgx3io=
Subject key identifier: 2A:D1:AB:57:B3:84:1D:0F:BD:F9:B1:BB:48:0E:C2:80:07:CF:E1:86
Certificate issuer: /CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Certificate serial: 0186BA90DAA6BC07C7D93D85B59A3D43C6F1
Authority key identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/KtGrV7OEHQ-9-bG7SA7CgAfP4YY.roa
Signing time: Tue 07 Mar 2023 05:35:00 +0000
ROA not before: Tue 07 Mar 2023 05:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208783
IP address blocks: 91.213.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ba:90:da:a6:bc:07:c7:d9:3d:85:b5:9a:3d:43:c6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Validity
Not Before: Mar 7 05:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ad1ab57b3841d0fbdf9b1bb480ec28007cfe186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:4b:8d:b0:5f:89:7e:6d:2e:ac:8b:ac:06:
64:d6:1f:a6:08:b3:09:cb:ee:07:ce:e7:e8:e5:af:
6e:c9:a3:b7:d6:d2:29:4a:00:9c:ca:a8:65:93:8b:
07:25:1b:ea:54:3a:cd:d4:14:92:3e:0c:6d:63:52:
b7:0d:76:78:5b:f9:ff:fc:60:bd:c7:fb:7a:2e:0a:
b8:d9:c1:35:aa:4a:73:6f:c3:d1:46:02:92:e6:a2:
29:78:1b:5d:74:a4:22:3b:23:21:93:bb:79:f2:d2:
fc:a6:7c:e0:0f:bf:e9:6f:a7:14:d4:3f:75:a4:7a:
17:47:c7:b8:75:7c:8f:43:71:b8:8f:53:5b:68:8b:
c3:fe:45:c1:63:ce:19:26:d6:5f:49:f4:b5:19:09:
5e:f8:b7:20:2e:15:12:ff:67:47:67:1b:e3:a3:1c:
99:da:0f:1c:32:87:13:34:a0:ea:75:da:70:df:58:
9a:ad:3a:f4:a6:81:a1:2c:a5:ac:da:eb:f5:e9:fd:
ea:22:e6:0b:db:ba:9a:47:1e:7d:cc:cd:90:1d:02:
68:0c:ae:65:6f:9f:fa:bd:4f:f9:3c:68:de:a7:43:
21:81:47:db:cb:4c:e8:2c:42:9c:c1:48:e6:d4:7c:
3d:b1:fe:a8:af:9d:7a:22:9f:94:78:32:18:ea:f4:
e1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D1:AB:57:B3:84:1D:0F:BD:F9:B1:BB:48:0E:C2:80:07:CF:E1:86
X509v3 Authority Key Identifier:
keyid:95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/KtGrV7OEHQ-9-bG7SA7CgAfP4YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.251.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a7:d4:14:6d:19:f1:95:ec:91:31:8e:df:94:0e:b7:01:00:
70:3d:4c:d1:b8:b4:89:7c:d3:ac:1f:c8:0f:1b:74:8a:a5:66:
dd:8e:a1:76:d6:5c:19:f5:68:02:85:43:57:aa:44:be:d7:40:
62:fc:d5:14:80:f4:22:0d:74:4d:06:41:69:5e:70:73:42:40:
e7:a2:25:9f:6e:61:49:ed:28:7b:d0:d6:8e:cb:d8:c7:e3:41:
1c:b0:06:70:c7:1f:81:2c:e7:1f:3d:7c:c3:7e:b1:d7:b5:24:
b1:4d:c4:94:be:4b:e8:26:2d:7f:a3:d1:fb:a7:7c:df:f0:02:
33:e3:7f:b7:b4:80:20:44:e7:c1:2b:90:9c:fb:87:2b:16:69:
65:bb:bc:c4:17:b9:d0:ee:a9:e9:f8:d0:fd:53:60:49:bd:20:
d8:5b:7a:d3:3e:96:68:0e:ea:4e:60:63:cf:c7:26:91:a5:0f:
d0:fe:af:c2:1a:cf:1c:6e:03:9e:55:51:12:a3:aa:d6:fc:5d:
a7:1d:20:50:8f:40:de:ab:9c:4f:b0:5d:e8:94:27:c2:cb:6a:
dd:c3:80:89:72:b5:b8:b9:9f:fb:a4:25:e8:32:8b:aa:70:fb:
56:21:1c:55:aa:fd:f4:4b:c0:2d:f9:26:ad:4a:e5:fb:58:e8:
dc:45:58:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:41 2024 by rpki-client on console-fra.rpki-client.org