Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/OQi4TALHSeC0YqDXZtjvTl6AaZ8.roa
File: OQi4TALHSeC0YqDXZtjvTl6AaZ8.roa (raw, json)
Hash identifier: b34s27lmcwOT0J0+Kq56R9GrY4KYqwsRGrQFB+08MgE=
Subject key identifier: 39:08:B8:4C:02:C7:49:E0:B4:62:A0:D7:66:D8:EF:4E:5E:80:69:9F
Certificate issuer: /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial: 0192FCB8C9B089BAF6F93FD43832785872D0
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/OQi4TALHSeC0YqDXZtjvTl6AaZ8.roa
Signing time: Tue 05 Nov 2024 14:27:01 +0000
ROA not before: Tue 05 Nov 2024 14:27:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207957
IP address blocks: 91.196.32.0/24 maxlen: 24
91.196.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 18:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fc:b8:c9:b0:89:ba:f6:f9:3f:d4:38:32:78:58:72:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
Validity
Not Before: Nov 5 14:27:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3908b84c02c749e0b462a0d766d8ef4e5e80699f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6d:0c:5c:6e:de:f4:5c:5b:5d:d6:70:bf:90:
36:6b:ad:04:bc:cd:e6:16:10:62:4a:81:32:49:a0:
23:c9:4f:cf:da:26:bd:0c:40:cd:4b:f1:3b:f8:54:
49:5b:3a:22:2e:78:f1:25:d4:93:f1:b2:6f:ab:a0:
ef:d0:bf:33:92:8c:2c:6e:bf:6a:eb:f7:a7:2f:52:
e0:63:c4:2e:8c:a8:7a:4e:45:0d:fc:c8:ea:82:63:
81:38:d5:20:2b:58:19:60:ed:61:36:6c:22:b3:62:
db:9d:bf:b0:ed:4d:ac:1f:63:8c:3b:de:63:29:1b:
ca:8d:5f:25:5d:d9:50:74:d2:d7:70:ce:ee:a9:95:
45:d4:06:5c:9d:97:ab:e3:b4:bd:ce:3d:b1:56:07:
d3:a1:8c:b2:92:8c:f8:b6:b1:d9:dd:04:78:2d:6f:
a8:7e:52:dc:11:0d:36:7a:fc:27:0b:b4:33:31:fe:
7d:2b:50:01:cc:46:82:ec:e0:eb:0f:f3:7b:13:2f:
e6:8d:6b:49:1c:9f:b1:98:dc:dd:1b:19:ee:96:88:
99:66:f2:ec:ff:f3:8a:ff:01:ea:7a:e1:4f:0e:11:
3c:8c:4d:44:84:a3:3d:4d:31:46:7b:14:73:c1:ed:
3f:10:e2:cd:1a:26:26:5a:b5:3a:b3:f4:9f:df:9c:
23:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:08:B8:4C:02:C7:49:E0:B4:62:A0:D7:66:D8:EF:4E:5E:80:69:9F
X509v3 Authority Key Identifier:
keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/OQi4TALHSeC0YqDXZtjvTl6AaZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.32.0/23
Signature Algorithm: sha256WithRSAEncryption
24:0a:37:99:14:e6:ee:59:84:08:26:f9:2f:cc:1f:08:bc:3c:
56:32:e3:6c:af:27:5c:95:f2:61:46:d8:f4:45:df:be:00:04:
83:2f:ea:40:68:d3:8e:c3:af:87:28:4e:44:b7:da:3b:69:96:
56:f1:08:0d:33:bd:90:97:96:da:d3:39:ce:5c:17:15:1b:74:
c3:a4:cc:a8:87:42:b1:f4:e8:3f:90:08:60:c8:34:7a:52:6a:
9c:15:21:99:b3:af:e7:70:e3:3f:e6:0c:b8:20:fd:e2:44:5f:
2b:7b:ab:f8:12:47:90:40:41:ea:69:c3:0e:3f:75:cc:6b:c2:
82:8b:59:e0:aa:11:20:45:14:70:17:7f:0d:eb:8a:bd:36:62:
28:ad:bf:6e:84:43:4d:43:e2:3d:84:2c:ac:ae:69:09:d2:05:
03:33:f4:06:14:0a:60:5b:27:03:98:ca:8e:72:91:b0:59:b0:
10:e6:55:73:bc:c0:81:1d:29:9c:71:7d:1f:a2:6f:94:4f:8a:
27:f2:79:46:23:e0:ac:76:c4:b0:b8:6a:37:63:8a:a4:9c:70:
f0:42:51:6d:80:6a:72:a4:19:ba:36:0f:bc:d9:00:7f:52:5a:
94:45:71:20:2d:5e:ff:63:8c:e7:74:87:a7:a4:dc:4e:49:0d:
a9:01:77:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 21:31:32 2024 by rpki-client on console-ams.rpki-client.org