Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/Ld6B3QJLPlZzBVdrDLaOYwgffsU.roa
File: Ld6B3QJLPlZzBVdrDLaOYwgffsU.roa (raw, json)
Hash identifier: 4LSoD1GhbG9U//viX+rCRNZLcAzT+jshxUzjDaSlXzk=
Subject key identifier: 2D:DE:81:DD:02:4B:3E:56:73:05:57:6B:0C:B6:8E:63:08:1F:7E:C5
Certificate issuer: /CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Certificate serial: 018570DE620CEDE0D31281B4B94DB04FEC55
Authority key identifier: 2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/Ld6B3QJLPlZzBVdrDLaOYwgffsU.roa
Signing time: Mon 02 Jan 2023 05:05:00 +0000
ROA not before: Mon 02 Jan 2023 05:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208842
IP address blocks: 91.209.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:62:0c:ed:e0:d3:12:81:b4:b9:4d:b0:4f:ec:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Validity
Not Before: Jan 2 05:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2dde81dd024b3e567305576b0cb68e63081f7ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:eb:df:ce:34:4e:bb:f4:ce:28:60:0d:49:
ee:d4:5b:48:7a:c2:8c:f5:65:46:2b:f3:8e:6a:b9:
c8:08:8e:e4:18:d8:b4:38:86:61:92:05:b1:46:3e:
4f:d5:2b:f8:fc:e1:25:db:23:22:02:31:24:2e:cf:
b6:60:5c:f2:5f:ad:e6:13:2d:0b:bd:15:d6:dc:39:
0b:4e:a6:5c:f0:93:e2:02:1a:ee:18:3a:ad:13:f2:
8e:8d:a5:79:da:d0:7a:42:2c:8d:db:b5:a9:2b:1d:
33:58:58:dd:fa:44:c1:1d:9b:38:03:7b:cc:ef:6c:
87:fe:8a:86:c8:34:ba:f0:a4:9b:12:74:21:58:3e:
8d:1c:27:68:57:85:5d:18:17:0f:86:b3:e5:31:7f:
3c:07:9d:8d:8a:3f:e7:c6:bd:31:92:68:3b:10:56:
67:4d:7a:85:19:08:ff:cb:60:c3:4b:dc:3e:30:aa:
23:e8:15:d8:8e:12:3e:fe:e0:f9:b7:e8:4c:aa:d6:
2f:7b:ec:e5:88:ed:63:7e:c0:dc:a3:27:92:00:99:
28:bc:65:ed:5c:2a:35:c6:9c:77:b4:ca:db:d6:10:
e7:30:8a:c2:53:72:c5:3b:9b:04:27:9b:ad:14:98:
b9:42:ae:14:aa:6c:c4:b1:cd:83:30:35:3e:9e:77:
0d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DE:81:DD:02:4B:3E:56:73:05:57:6B:0C:B6:8E:63:08:1F:7E:C5
X509v3 Authority Key Identifier:
keyid:2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/Ld6B3QJLPlZzBVdrDLaOYwgffsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.4.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:4c:b0:82:87:be:cb:4f:04:c3:51:5b:77:0a:21:7a:4e:52:
a6:0d:c3:f5:d7:ff:59:7f:12:59:c0:34:4e:39:19:5e:84:e1:
3f:f2:13:54:6f:f6:f8:51:03:94:55:5f:87:cc:68:fb:8f:d1:
c0:cd:b6:ef:df:f8:f6:20:36:66:ca:2a:b8:a0:45:6d:57:5a:
1a:7c:7d:20:9c:5b:55:d3:5a:80:b8:23:41:50:60:f8:3b:9a:
ec:26:c5:a6:97:70:63:9d:ae:7f:43:1c:a7:d8:74:3c:66:a4:
89:cc:a1:76:9b:f8:2a:03:32:c1:30:f0:41:11:96:e1:e7:ae:
2c:63:4a:df:e9:3f:8f:a9:16:a9:83:13:f2:30:f6:a4:ed:ee:
d8:7e:d9:0c:4c:26:ca:eb:01:45:a7:2a:0a:a9:b4:c1:08:8d:
f5:3f:51:fc:98:20:60:e6:e7:27:71:44:4a:e2:01:ff:89:a4:
79:d6:ea:11:c1:13:ba:7c:e3:67:d6:9d:ac:4f:12:3c:f8:e5:
65:b9:f5:87:16:19:ff:5c:30:d3:22:de:61:b9:8a:18:55:17:
05:1e:f7:d9:f9:ee:e6:90:9f:2e:8d:0c:0e:90:4d:fa:f6:9a:
3d:bb:ad:ba:fa:9f:02:6e:a4:6a:6e:15:5c:66:68:77:d0:9b:
2a:49:96:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:23 2024 by rpki-client on console-ams.rpki-client.org