Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/iXgUPIHB7Q2d2rRGr_yUCqb0uag.roa
File: iXgUPIHB7Q2d2rRGr_yUCqb0uag.roa (raw, json)
Hash identifier: wobZZumOJBuB4IYUPn4Eln4xgSnbzEn1egrN06BGkV8=
Subject key identifier: 89:78:14:3C:81:C1:ED:0D:9D:DA:B4:46:AF:FC:94:0A:A6:F4:B9:A8
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 0190D941AF74FBE3064D2016B05908B0E210
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/iXgUPIHB7Q2d2rRGr_yUCqb0uag.roa
Signing time: Mon 22 Jul 2024 07:04:38 +0000
ROA not before: Mon 22 Jul 2024 07:04:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39600
IP address blocks: 91.221.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 06:47:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d9:41:af:74:fb:e3:06:4d:20:16:b0:59:08:b0:e2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jul 22 07:04:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8978143c81c1ed0d9ddab446affc940aa6f4b9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:a0:b2:ae:14:80:82:11:51:0a:52:9a:88:
0b:da:69:40:7b:f5:a0:34:72:15:b6:df:9b:73:6a:
46:e0:2e:ef:81:ba:bf:5b:34:08:f0:3c:d2:b4:35:
19:e9:15:ba:74:33:e6:68:ad:a3:92:db:ae:68:67:
f3:86:18:2d:73:cc:2d:2d:1d:55:6f:dd:78:ee:13:
3c:4e:e7:a3:66:21:c8:18:a5:a3:81:bd:db:a9:3d:
df:84:c8:78:f6:07:ed:26:d8:37:cf:1a:3b:43:26:
52:bf:93:bc:79:b1:07:3e:9d:fa:89:f1:74:c9:a7:
8c:27:b7:e7:23:01:79:77:72:c5:6f:25:47:2d:79:
10:79:68:41:f2:ea:f5:e2:2b:42:f8:b5:cf:ed:c8:
1f:c0:84:eb:fe:9c:ab:4f:69:80:62:ad:f8:92:0f:
20:3c:a9:0d:e5:30:ed:be:09:10:15:7b:e7:18:5f:
a7:f6:2f:d6:a9:8d:67:9c:46:6c:68:7d:dd:de:c2:
71:63:1d:72:02:9d:5a:3e:90:3e:d9:a5:bd:69:d3:
6c:12:35:59:92:16:ed:cd:42:50:d2:4f:f9:11:9e:
9b:2e:94:02:a7:3a:44:1b:0a:3f:28:ce:92:ff:8b:
4e:c4:b9:75:f0:fc:cf:6e:14:1d:65:a9:5f:13:fa:
55:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:78:14:3C:81:C1:ED:0D:9D:DA:B4:46:AF:FC:94:0A:A6:F4:B9:A8
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/iXgUPIHB7Q2d2rRGr_yUCqb0uag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.232.0/24
Signature Algorithm: sha256WithRSAEncryption
11:64:2c:b3:4b:10:91:7b:6a:79:0a:38:d8:56:9c:0d:e2:04:
19:31:9e:51:90:c7:9a:6c:89:14:66:f1:68:d3:55:51:61:16:
e0:0f:83:37:9f:20:be:86:8f:9d:5a:8a:ba:84:56:d5:09:f3:
75:64:b6:ef:fc:d8:58:35:eb:00:e0:5c:4a:17:3e:6c:9a:44:
7b:1e:3e:f5:91:11:83:56:c7:8d:1a:47:50:a3:59:36:6c:98:
0a:e8:d6:ab:5d:25:c4:95:c9:c1:c4:70:cc:a0:3a:cb:1a:ee:
5d:71:39:f3:3e:59:83:9d:72:36:12:c8:64:e2:05:36:1e:fd:
75:89:8f:39:d1:c8:1e:c7:71:ea:be:94:63:d1:9e:60:0f:9d:
9e:5f:38:a6:14:2c:a1:48:43:bb:fd:1e:9f:2f:df:35:97:58:
fd:b3:2a:37:a0:1b:d5:b9:f0:38:e1:bd:10:11:19:b2:04:05:
c8:d3:9b:f3:a2:6d:bf:14:e1:df:96:e4:b2:06:94:b6:4c:24:
67:de:95:66:a5:18:9e:97:d8:44:0b:2b:36:de:49:1d:d7:01:
bb:25:8b:9f:17:ec:84:cb:9c:41:97:e5:09:1b:87:ca:de:82:
97:a9:ad:42:3d:9d:b2:3b:eb:5d:c8:66:0d:22:99:8a:7e:3f:
9e:c2:75:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 09:44:46 2024 by rpki-client on console-fra.rpki-client.org