Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ls9tLHklm3Q-z0ytGqiT2PvetUg.roa
File: ls9tLHklm3Q-z0ytGqiT2PvetUg.roa (raw, json)
Hash identifier: G1D17/bN7YIKjDcPOvfhCRNP7h2arxbljan9NCfLflY=
Subject key identifier: 96:CF:6D:2C:79:25:9B:74:3E:CF:4C:AD:1A:A8:93:D8:FB:DE:B5:48
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 0185719E769C6FE6397492B61375E1B36536
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ls9tLHklm3Q-z0ytGqiT2PvetUg.roa
Signing time: Mon 02 Jan 2023 08:34:48 +0000
ROA not before: Mon 02 Jan 2023 08:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42232
IP address blocks: 213.163.9.0/24 maxlen: 24
91.83.112.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:76:9c:6f:e6:39:74:92:b6:13:75:e1:b3:65:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 2 08:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96cf6d2c79259b743ecf4cad1aa893d8fbdeb548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:62:a9:a4:4e:28:ed:8d:91:1b:11:62:63:7a:
f0:76:3a:e2:78:05:83:4e:0d:3a:ea:62:70:a7:ac:
99:07:e0:6b:52:4f:7a:b4:43:3d:e5:58:05:96:98:
a6:c5:28:e2:56:db:14:d3:13:4d:7d:9f:85:93:28:
41:d1:5b:09:c8:95:1b:70:a2:19:87:b5:d6:07:d9:
9e:53:fd:a3:83:9d:39:f8:5d:c4:0b:56:ad:90:92:
b9:49:c6:34:d8:1a:d6:f1:1d:c4:e9:f7:61:7a:f7:
2e:d3:ec:14:bd:37:23:55:de:a4:92:de:f8:23:9b:
c4:14:36:ca:63:c6:29:e2:ef:03:87:6b:f1:af:34:
a7:6c:ef:d3:6d:b6:da:d6:2b:1b:a2:4a:10:df:70:
52:8b:00:4d:48:ab:3f:5a:0d:28:d4:91:c0:49:fa:
71:58:12:95:d9:e1:4c:9f:67:24:e4:5c:0c:86:2f:
f1:2a:e5:7f:32:a8:6c:f8:52:a9:3b:3b:85:1a:e9:
ed:65:4e:61:43:87:2f:cf:29:06:0d:ca:fc:a8:b3:
b0:88:0e:86:2b:15:e5:08:b8:29:2a:72:33:c5:1c:
5c:9f:ab:c2:7e:be:3e:f9:8e:7d:96:56:ad:9f:e7:
ee:2a:d1:23:7c:6a:56:cd:bb:f1:cb:10:b3:5d:e3:
ab:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CF:6D:2C:79:25:9B:74:3E:CF:4C:AD:1A:A8:93:D8:FB:DE:B5:48
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ls9tLHklm3Q-z0ytGqiT2PvetUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.83.112.0/21
213.163.9.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:90:d1:12:60:bb:6a:a8:ad:59:fc:3b:fe:b6:20:68:92:06:
38:6e:52:97:74:2a:42:a8:fe:3e:4f:e5:56:0f:4e:c1:66:2a:
81:8a:f3:ae:be:d4:b1:65:78:fc:51:d9:bf:4e:a9:9d:5f:0b:
1a:3a:f3:45:ad:7e:1b:51:e2:d0:7e:e5:f2:2f:c3:c0:9d:ea:
e0:29:9f:f5:fc:3d:68:30:1f:db:b1:a3:9f:27:96:fd:37:70:
45:d1:96:55:20:26:43:76:56:39:81:f0:97:fb:93:60:ec:33:
21:80:37:d3:3c:c9:3c:d8:35:01:50:47:62:08:be:06:af:78:
1d:d4:e7:0e:d5:7e:6a:d6:3c:9c:06:db:30:ad:45:51:19:94:
59:f9:7b:4e:03:c1:c8:cf:55:f3:a9:2c:8c:f1:7e:8b:00:24:
16:c5:c2:2f:66:a9:fa:c2:82:5f:90:f4:ba:4a:67:71:ba:0f:
a2:80:72:69:5e:68:7e:09:9e:f3:8d:81:a8:5c:59:f0:fa:50:
da:3c:a2:07:01:40:00:f4:e0:2f:5d:42:0b:5c:c7:14:73:5b:
f6:65:e4:d8:41:30:f5:ed:08:ce:b8:f0:79:a2:a0:f3:07:53:
98:9f:9c:9a:84:17:d7:80:9b:73:39:5a:e6:2a:88:be:46:c3:
be:80:e5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:02 2024 by rpki-client on console-fra.rpki-client.org