Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/DN60oBv0ZXfmNbzv4KI3-ipJ1qg.roa
File: DN60oBv0ZXfmNbzv4KI3-ipJ1qg.roa (raw, json)
Hash identifier: QBCO99e/F/MSvWtjSWrK/ogF3paj0KXvMmyJ8Uu5tIU=
Subject key identifier: 0C:DE:B4:A0:1B:F4:65:77:E6:35:BC:EF:E0:A2:37:FA:2A:49:D6:A8
Certificate issuer: /CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Certificate serial: 01856FF057A195F9CE7D00290B12BEE3DD14
Authority key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/DN60oBv0ZXfmNbzv4KI3-ipJ1qg.roa
Signing time: Mon 02 Jan 2023 00:45:00 +0000
ROA not before: Mon 02 Jan 2023 00:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43511
IP address blocks: 91.194.249.0/24 maxlen: 24
91.194.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:57:a1:95:f9:ce:7d:00:29:0b:12:be:e3:dd:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Validity
Not Before: Jan 2 00:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cdeb4a01bf46577e635bcefe0a237fa2a49d6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ff:5b:48:80:fd:81:a2:07:10:ea:47:f7:a5:
d4:01:61:0a:61:1f:0c:51:41:53:2a:73:32:83:86:
8e:ca:49:4e:9c:ac:be:4c:80:63:d4:42:9f:c3:e6:
47:01:57:b5:22:f2:a7:19:a3:11:eb:bb:9e:fe:27:
cc:cc:d2:ec:22:4d:aa:04:89:cc:4f:19:5d:82:eb:
b4:84:70:7c:a0:31:75:3c:83:e6:c2:a0:26:7c:31:
66:be:81:39:23:7e:1b:7a:2c:54:f4:96:52:d5:c0:
92:21:8c:3e:6b:a0:66:5c:df:e6:43:a1:0c:57:4f:
5f:ce:0c:e3:13:e6:69:9b:f7:c7:11:21:a6:4c:65:
f1:d2:90:d6:7e:cb:14:12:fd:b7:4e:09:3d:10:bf:
b1:a5:0b:1b:28:f3:ba:d5:dc:d3:8a:2a:dc:35:d3:
4b:14:03:ba:25:c3:08:26:c4:ac:23:54:51:13:9d:
c7:af:27:b4:19:e9:a8:8e:e5:53:5f:4d:46:56:f5:
51:af:d8:66:44:a8:21:c5:18:16:80:a6:53:7f:24:
bb:81:90:98:48:76:9d:ad:5a:c8:fd:f3:bd:5f:d5:
85:23:f9:6f:10:0f:c5:7d:5f:dd:7f:33:9b:5e:ab:
f1:40:9c:d6:fc:da:6a:20:59:cd:36:cf:32:92:ed:
8a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DE:B4:A0:1B:F4:65:77:E6:35:BC:EF:E0:A2:37:FA:2A:49:D6:A8
X509v3 Authority Key Identifier:
keyid:8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/DN60oBv0ZXfmNbzv4KI3-ipJ1qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.248.0/23
Signature Algorithm: sha256WithRSAEncryption
52:0c:ae:cf:2d:b3:ec:f0:52:76:50:70:76:91:d5:19:63:a2:
b6:80:7b:78:98:72:b2:5a:4f:3b:51:63:61:f0:a0:61:23:4d:
e4:3f:b0:e5:1a:c1:b2:21:e5:de:a8:60:4c:2d:a1:ff:30:87:
96:82:1a:d8:c0:a8:84:50:93:8d:6d:42:24:7a:a6:4f:81:5b:
c1:45:61:5f:d0:84:e1:3d:64:8e:cd:b0:3c:9c:b6:ce:d5:45:
f4:a8:8b:f1:dd:29:3f:32:df:0a:3e:54:e9:75:4f:08:00:d2:
c4:4c:75:2c:78:8e:73:96:e7:cf:0b:ea:fc:36:c4:5b:48:89:
60:e5:83:40:24:b4:fe:f0:e2:d0:44:e3:40:89:c4:24:5b:ea:
06:02:e5:98:12:48:8f:b7:87:b3:64:43:34:c1:7c:b1:79:5d:
f5:5c:d2:4a:df:df:97:2b:87:68:03:4a:8f:d0:62:c5:76:2d:
be:42:1e:97:72:c4:2d:f5:eb:1a:0b:2e:fa:c2:c3:ca:15:8b:
40:b7:1e:ef:f0:3f:56:61:8d:59:4f:79:24:4c:04:d4:af:e9:
99:59:f8:c4:66:c0:36:22:33:51:fa:ff:9a:65:84:77:d2:5c:
7e:15:78:e6:8c:b8:82:4e:c7:12:57:d6:b7:1b:56:93:4b:6c:
2c:a5:36:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:51 2024 by rpki-client on console-fra.rpki-client.org