Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/dsBoSneOwzpaW3DebpCkvaAThlU.roa
File: dsBoSneOwzpaW3DebpCkvaAThlU.roa (raw, json)
Hash identifier: XPU+Eo0l51hbMIBCVU33JdjHQDazSPeAOqRLuxd3d98=
Subject key identifier: 76:C0:68:4A:77:8E:C3:3A:5A:5B:70:DE:6E:90:A4:BD:A0:13:86:55
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 0185719E770192AF130985C473603A2E2BEE
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/dsBoSneOwzpaW3DebpCkvaAThlU.roa
Signing time: Mon 02 Jan 2023 08:34:48 +0000
ROA not before: Mon 02 Jan 2023 08:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47159
IP address blocks: 91.83.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 18 Jul 2023 19:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:77:01:92:af:13:09:85:c4:73:60:3a:2e:2b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 2 08:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76c0684a778ec33a5a5b70de6e90a4bda0138655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:8e:2b:b1:3a:0b:d6:73:f8:80:e6:7c:69:99:
bd:ac:4a:85:b9:b5:fa:fd:0d:2b:51:79:64:23:e6:
b9:7d:73:dc:57:76:b2:a2:b5:25:82:3d:e8:29:cc:
68:0f:28:ec:f9:6e:c4:33:c9:66:08:cf:c1:a5:91:
85:da:20:4c:31:87:7f:c5:d0:f9:5a:f6:07:82:a8:
c9:54:16:64:5e:ab:fb:9d:b9:f2:2d:b9:1a:81:03:
eb:55:4a:58:a7:c3:bf:64:68:10:73:13:bb:fd:52:
f8:1d:f3:52:6c:9f:f9:c7:a9:96:94:43:d6:4f:75:
80:27:7d:9b:fe:45:1e:3b:df:62:56:83:ba:f9:87:
cc:0d:33:35:7e:40:6a:87:57:25:6d:9b:fe:d9:26:
35:8a:3c:d1:a5:92:e6:91:63:91:98:7b:d4:b1:1e:
f8:b4:73:09:88:fe:f3:d9:15:36:13:00:17:bf:d7:
a7:2d:52:ab:31:53:f4:a5:77:da:3c:09:b9:f0:80:
b2:60:be:85:b8:23:48:24:a7:b8:5e:f4:92:11:8c:
78:76:4c:2b:e1:b1:92:c5:ec:44:12:48:5a:9f:ad:
83:40:ce:54:84:ae:42:15:18:bc:1c:fd:76:62:4b:
f3:22:a1:96:00:46:7d:86:31:bd:4a:7f:ea:93:a1:
f7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C0:68:4A:77:8E:C3:3A:5A:5B:70:DE:6E:90:A4:BD:A0:13:86:55
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/dsBoSneOwzpaW3DebpCkvaAThlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.83.220.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:66:f7:0b:77:cb:67:f6:c5:7c:f7:6f:90:d7:2b:b1:c7:4e:
14:c5:87:46:ff:78:e5:a1:80:bf:ad:ca:62:0d:07:f0:e3:17:
22:b6:23:4a:a1:b7:2c:bb:af:cf:54:ee:7f:ba:15:bd:6e:e9:
e3:c7:41:e9:f7:93:aa:8b:5c:90:21:71:8e:1b:b0:d3:73:fc:
ca:04:e5:b6:d1:16:e6:68:15:63:85:f5:9b:ee:59:e4:8d:85:
2f:bd:cc:0a:db:1a:89:e3:7f:c4:37:0b:5f:9d:b3:93:78:40:
b3:91:0b:b4:22:77:e5:94:75:ec:74:df:68:ef:2d:d1:68:6b:
93:38:cc:88:5b:b3:fe:d4:70:59:0a:a5:d9:fa:0f:72:4f:63:
b5:51:cf:f0:91:ee:16:7b:91:01:03:df:4c:66:a3:cd:75:a0:
60:92:7f:30:ab:6b:9d:cd:4a:45:4e:c1:0a:9e:5a:74:fb:e8:
e2:2a:56:cf:f0:ee:03:0c:81:be:38:6e:f0:09:aa:1b:5c:d7:
36:65:72:2b:27:69:62:fc:b4:02:dd:e6:1e:17:a4:8e:9b:3a:
fe:1d:6b:43:2a:59:d9:f6:d5:f2:d0:66:5f:e8:45:86:95:a6:
bb:3b:65:4d:84:2e:b5:16:76:ee:0f:86:fa:ca:b6:f2:a1:1c:
e5:e9:86:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:02 2024 by rpki-client on console-fra.rpki-client.org