Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/q9Zy6fMZTQNfWeu9rtTPCYd7OFo.roa
File: q9Zy6fMZTQNfWeu9rtTPCYd7OFo.roa (raw, json)
Hash identifier: B9Ix+orVBKOaM47jW3HPOfkZFsW2c8un4Te14O5P49c=
Subject key identifier: AB:D6:72:E9:F3:19:4D:03:5F:59:EB:BD:AE:D4:CF:09:87:7B:38:5A
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 018AFC4C12C9B64C30C9BDD5E035300030C3
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/q9Zy6fMZTQNfWeu9rtTPCYd7OFo.roa
Signing time: Wed 04 Oct 2023 20:05:58 +0000
ROA not before: Wed 04 Oct 2023 20:05:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57246
IP address blocks: 91.108.41.0/24 maxlen: 24
95.140.84.0/24 maxlen: 24
95.140.84.0/22 maxlen: 22
95.140.85.0/24 maxlen: 24
95.140.87.0/24 maxlen: 24
95.140.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fc:4c:12:c9:b6:4c:30:c9:bd:d5:e0:35:30:00:30:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Oct 4 20:05:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abd672e9f3194d035f59ebbdaed4cf09877b385a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:db:a3:d9:1e:2b:33:ac:4a:b5:3d:06:06:11:
90:de:dc:9c:db:6e:39:d4:7e:34:f2:c7:39:6a:5e:
e8:e1:00:f4:67:88:60:29:44:1b:98:77:9d:3d:dc:
b3:f9:35:b1:9f:32:68:96:e1:bf:a8:e1:f0:49:93:
a5:53:63:24:8a:bc:37:2b:8a:b6:2f:a1:1f:16:2e:
5a:68:71:f2:4d:5a:3a:aa:cb:c7:a1:ab:fb:8d:f6:
a8:6d:dc:f9:a4:ff:93:76:5c:20:4f:a1:4a:60:21:
05:0f:f1:9e:fd:30:4c:b1:a2:ad:f0:21:28:27:64:
14:e3:71:9a:f6:33:d6:ab:18:70:86:4e:ff:3c:a9:
ba:f6:fc:38:e5:cc:4d:23:1b:36:f0:88:b8:58:21:
0b:a7:6c:35:fb:bf:82:6d:1a:2e:eb:5f:4b:3f:0c:
ef:0c:2f:b6:c5:e0:dd:72:8f:96:40:34:1d:a3:ad:
89:3e:8a:7b:67:02:8a:9e:e4:c0:38:38:ef:0d:23:
87:55:02:b5:3c:50:32:d3:7f:3e:1f:b3:ff:61:57:
ba:59:b7:fd:15:96:f1:0e:23:b4:cb:58:e9:4a:73:
2d:a5:5d:da:bf:b3:23:dd:4c:09:85:1b:df:c4:f3:
3c:9f:48:0d:2a:23:cf:1f:26:a3:22:da:98:13:e3:
db:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D6:72:E9:F3:19:4D:03:5F:59:EB:BD:AE:D4:CF:09:87:7B:38:5A
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/q9Zy6fMZTQNfWeu9rtTPCYd7OFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.41.0/24
95.140.84.0/22
Signature Algorithm: sha256WithRSAEncryption
76:e2:82:03:89:67:fe:e1:06:82:a4:d8:d5:32:56:39:19:59:
3b:65:7b:0f:c6:b0:91:6d:2e:f4:9c:f1:46:98:74:11:cb:d9:
90:f7:61:10:12:62:0d:59:a1:84:e0:17:ee:38:b2:eb:f6:d3:
8a:6f:27:93:a2:60:f6:00:85:81:4e:54:9c:22:9b:44:4a:a5:
a4:3f:e9:dd:48:6a:c5:e2:b2:2f:c7:44:a1:cf:26:54:b0:46:
4c:41:25:cd:a9:6b:3e:6d:f7:9d:74:ea:90:10:de:e8:4c:2e:
92:6b:35:c0:47:0f:39:e2:ac:2c:96:0b:72:42:89:86:75:49:
ea:c9:e0:2f:4b:f9:72:df:89:0e:ff:49:d1:ea:e2:22:c8:7d:
49:79:8b:bf:1f:fc:5a:43:fa:18:dc:9f:68:99:e6:01:ef:13:
bf:7a:6c:3a:85:8d:0c:53:f7:45:b5:b6:fe:88:b8:32:42:4f:
33:42:0e:2b:33:48:56:4c:58:38:ec:d4:90:ac:d4:dc:63:f7:
a7:dc:13:b8:05:61:81:99:0f:42:5a:ce:f3:a5:45:25:7b:74:
b5:bd:c1:9e:84:b8:eb:0e:a8:c6:e4:9f:c9:50:84:1f:4f:e3:
72:ed:13:b8:e2:71:d3:9b:85:8d:c9:85:bf:33:f4:ed:a3:82:
7c:e6:48:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:16 2024 by rpki-client on console-fra.rpki-client.org