Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/DsP9bAXXe4Wsd3oEMY4HRouQ7Nk.roa
File: DsP9bAXXe4Wsd3oEMY4HRouQ7Nk.roa (raw, json)
Hash identifier: 6GgpSUtkMvMYUNjgNWEJgtSQswfvzXUe3/FRdwBIOd0=
Subject key identifier: 0E:C3:FD:6C:05:D7:7B:85:AC:77:7A:04:31:8E:07:46:8B:90:EC:D9
Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Certificate serial: 01856FD5110A226396040F71DB6F5F578F8C
Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/DsP9bAXXe4Wsd3oEMY4HRouQ7Nk.roa
Signing time: Mon 02 Jan 2023 00:15:12 +0000
ROA not before: Mon 02 Jan 2023 00:15:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198984
IP address blocks: 91.199.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:11:0a:22:63:96:04:0f:71:db:6f:5f:57:8f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Validity
Not Before: Jan 2 00:15:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ec3fd6c05d77b85ac777a04318e07468b90ecd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f7:7e:18:3a:a6:24:aa:1f:7a:a2:29:33:10:
e7:99:a4:d1:4e:45:d9:1b:c0:20:f4:94:13:8a:6a:
d3:a0:23:0b:29:a5:29:37:67:3e:f1:6a:06:c8:55:
38:73:33:c6:f1:3f:2b:70:1f:05:2d:85:98:0c:9c:
16:7a:53:b6:bb:e6:43:ec:a8:7f:17:4f:79:22:95:
6c:e5:4a:df:68:5b:d1:6f:22:1b:95:68:27:43:e2:
ac:53:35:fa:d3:9f:19:54:5e:92:05:de:5e:02:db:
a6:da:a8:9d:6c:69:d5:8e:32:04:24:2a:cd:d3:5e:
43:c7:e5:46:dd:24:88:39:bf:26:3b:4c:74:54:3c:
43:be:59:16:06:61:82:0b:0f:6c:32:23:d2:66:fa:
03:a5:2d:92:bc:cb:e6:dc:4e:fa:93:2e:6e:6d:0f:
c1:69:21:24:fd:9e:60:57:31:8e:f6:c4:48:59:5c:
28:78:46:68:d2:5c:04:92:2b:57:f9:0a:81:46:dd:
10:71:66:44:bb:59:e0:68:d7:31:ed:bb:cc:41:e5:
78:ee:76:13:27:91:e0:b1:07:72:9b:5a:78:28:35:
0c:4d:c5:af:c9:f0:8c:2a:14:d9:45:db:73:8d:89:
d1:79:cc:21:e9:4b:64:61:5c:47:23:94:84:1a:96:
a2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C3:FD:6C:05:D7:7B:85:AC:77:7A:04:31:8E:07:46:8B:90:EC:D9
X509v3 Authority Key Identifier:
keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/DsP9bAXXe4Wsd3oEMY4HRouQ7Nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.12.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f3:03:92:74:3b:b8:5c:fc:16:6c:25:32:3d:2b:53:55:68:
2f:b6:31:22:eb:73:ea:fc:3b:71:bb:9a:68:1f:a4:6e:fd:10:
a4:b5:1d:4d:bc:9d:0b:e5:e2:bf:44:ac:e3:62:73:d9:09:bb:
41:3c:9b:40:e1:43:4d:1d:c7:a8:e9:89:34:5c:54:1f:1e:9a:
be:d1:f6:b8:56:dd:e0:f5:58:69:ef:b4:42:03:38:25:ce:85:
1c:7d:31:98:b9:2b:45:51:77:86:ab:46:6f:64:af:11:69:d3:
6e:ef:97:dd:9b:94:e2:48:1f:ed:54:d0:1b:f5:88:6f:55:2e:
cf:9b:af:39:f9:d4:62:34:5d:f0:72:26:36:dd:61:51:e6:1f:
58:b1:2f:3b:c0:67:14:d8:b2:78:3b:eb:18:03:4b:cc:c8:00:
7a:13:b8:8c:47:09:0e:99:62:5a:0d:58:93:6c:68:ac:48:30:
b5:28:1f:10:68:cf:b5:ab:77:7c:7f:19:75:b9:c7:e1:ab:cb:
41:dd:cf:af:62:68:cb:45:c7:9a:1d:43:e9:01:5e:a9:19:d8:
2f:de:0e:a1:00:bb:e4:f8:06:83:f5:65:ee:f2:5c:dc:d2:39:
88:f9:c7:a8:1c:57:d4:90:77:60:5f:7c:c2:f1:1b:ac:66:d7:
aa:95:72:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:51 2024 by rpki-client on console-fra.rpki-client.org