Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/BThSQWwRGX3hqL6ht_pKA9lDhy8.roa
File: BThSQWwRGX3hqL6ht_pKA9lDhy8.roa (raw, json)
Hash identifier: 3KRm4zzq4M92x1CMGQ2Wkl6KZ0i0lZQHhnag//W5Dlk=
Subject key identifier: 05:38:52:41:6C:11:19:7D:E1:A8:BE:A1:B7:FA:4A:03:D9:43:87:2F
Certificate issuer: /CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Certificate serial: 0185729EBE86578B5EE314BC42C10CB964FD
Authority key identifier: 9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/BThSQWwRGX3hqL6ht_pKA9lDhy8.roa
Signing time: Mon 02 Jan 2023 13:14:44 +0000
ROA not before: Mon 02 Jan 2023 13:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197033
IP address blocks: 91.220.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:be:86:57:8b:5e:e3:14:bc:42:c1:0c:b9:64:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Validity
Not Before: Jan 2 13:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=053852416c11197de1a8bea1b7fa4a03d943872f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b6:4a:37:89:05:fb:ef:76:d8:e6:26:d1:38:
6b:39:5a:5a:90:f1:2a:c6:5a:1a:35:81:98:f0:97:
7e:ff:e6:3b:e2:b2:9d:69:bb:c5:7d:d8:de:74:d8:
f0:6f:d1:fc:7a:cf:3c:eb:ec:ec:78:b8:d3:eb:74:
9c:53:17:d5:6a:ae:76:85:3b:f9:81:93:2f:d2:06:
f2:2c:89:e2:23:00:5a:1c:e1:3f:09:4f:39:5d:a3:
c7:ff:60:89:ed:d9:c2:24:a8:31:3f:4c:4e:0a:fb:
37:c9:45:66:ef:65:1d:ef:38:e2:97:8c:8c:38:0d:
33:fc:5e:88:71:04:c4:68:3f:c0:dc:96:97:f1:31:
53:c3:39:27:03:bb:48:db:f9:a1:40:1a:bd:1a:8f:
97:59:e8:52:39:1c:04:ed:61:3d:17:2a:79:cc:03:
03:f9:3c:9f:89:59:bc:50:8c:c0:bc:00:d9:5e:f9:
0c:8f:49:b7:12:4b:e4:2d:ff:32:1d:68:bd:c4:57:
05:9a:06:66:1d:25:4b:4d:44:36:da:61:06:ae:6f:
77:da:91:86:56:7e:00:69:e7:cc:2e:4d:f5:9c:fc:
85:11:f8:f8:38:d4:57:c0:b8:61:0a:e1:7c:94:d9:
b9:74:b7:38:8e:54:03:58:a4:21:7b:0a:5a:29:35:
52:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:38:52:41:6C:11:19:7D:E1:A8:BE:A1:B7:FA:4A:03:D9:43:87:2F
X509v3 Authority Key Identifier:
keyid:9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/BThSQWwRGX3hqL6ht_pKA9lDhy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.51.0/24
Signature Algorithm: sha256WithRSAEncryption
72:08:98:1e:7c:70:9a:5a:f7:c9:e9:a3:33:e0:c4:14:5b:58:
3d:15:da:74:bb:1f:c6:74:1d:04:24:55:fe:eb:67:0b:08:13:
38:69:29:4b:c4:7e:47:09:8a:e0:60:f6:2b:ac:10:a9:af:f1:
6f:78:cc:99:3a:4a:07:b8:d9:cb:5f:1f:41:bf:6a:29:59:bc:
fe:4b:a3:89:20:6d:aa:fd:84:fe:50:8c:36:6e:ea:ed:2f:c3:
34:d0:b4:23:4c:fd:80:ae:9c:e6:29:f8:d3:5c:34:31:7e:6e:
00:d9:a0:9c:fd:21:4a:74:46:c6:c1:d6:a8:5e:71:ac:13:7a:
07:3e:64:2b:2f:88:ca:a7:6e:5f:2b:17:85:3d:27:b4:7b:cb:
35:52:19:8a:59:7b:c6:bc:e7:52:48:48:5c:3a:f4:c1:76:0d:
b5:76:1f:c8:31:0a:4c:12:b1:93:fb:d8:c6:e0:65:97:07:64:
be:f8:e0:39:4b:2f:3e:01:92:28:7e:09:e5:ec:41:ad:c6:95:
a3:4b:84:78:49:3c:55:e2:19:32:60:a7:ea:b8:31:6c:39:aa:
3d:04:33:04:c5:cb:c5:9b:4b:af:df:e1:b5:82:db:19:bc:f6:
a6:2e:03:15:5d:73:b7:b9:04:c6:72:f4:e2:be:d5:e2:65:04:
b6:91:73:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:56 2024 by rpki-client on console-ams.rpki-client.org