Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/9OOA80tQUugqAZTYA2CiM2ZuNYk.roa
File: 9OOA80tQUugqAZTYA2CiM2ZuNYk.roa (raw, json)
Hash identifier: yNXLUhSt1Em56RCxxZV+X4Uv31DxaIYf2EyITCLwDiw=
Subject key identifier: F4:E3:80:F3:4B:50:52:E8:2A:01:94:D8:03:60:A2:33:66:6E:35:89
Certificate issuer: /CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Certificate serial: 018570FBE5C06A214C9101C863DE3DD90044
Authority key identifier: BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/9OOA80tQUugqAZTYA2CiM2ZuNYk.roa
Signing time: Mon 02 Jan 2023 05:37:14 +0000
ROA not before: Mon 02 Jan 2023 05:37:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198466
IP address blocks: 91.235.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:e5:c0:6a:21:4c:91:01:c8:63:de:3d:d9:00:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Validity
Not Before: Jan 2 05:37:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4e380f34b5052e82a0194d80360a233666e3589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:10:2d:b5:c4:0c:3b:00:10:1a:78:4e:25:
2b:56:24:df:fd:ff:18:21:df:cd:2c:97:a5:18:4f:
2c:92:86:ff:ba:75:d0:2a:d0:4d:4f:3b:f4:e5:fb:
ff:37:77:e6:27:65:13:b3:0e:17:b4:18:aa:00:e8:
2f:12:2d:23:cb:a3:56:73:2f:36:b6:ff:39:95:ec:
09:ef:de:7a:3b:c6:26:b9:8f:03:3c:35:77:73:d6:
da:f0:a3:48:97:a1:c9:94:ef:e5:42:1f:66:88:22:
f5:e2:76:4a:8a:30:33:a3:f4:a6:b8:db:f2:ca:5e:
65:fc:d7:5f:ac:93:54:97:b4:9e:77:b8:3a:56:59:
4f:bf:39:3b:78:c2:89:ea:0b:8c:49:5b:44:8f:9d:
90:a5:12:b8:f2:27:4a:02:a1:50:72:18:46:1a:68:
7f:1c:b1:a6:16:86:dd:f8:99:82:80:e9:87:20:bd:
7b:79:bb:24:49:65:33:c4:0b:12:0b:94:db:36:96:
1d:f9:bf:7f:51:ae:0a:cc:30:6a:10:b5:d3:c7:20:
7b:ae:3e:e1:b9:1c:f7:f7:d0:c6:cb:54:bf:99:38:
ac:ee:73:de:2a:e6:28:6c:e2:3e:63:93:25:26:61:
ac:7b:4d:fe:60:53:86:93:e0:44:f6:9f:58:ad:6b:
a0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E3:80:F3:4B:50:52:E8:2A:01:94:D8:03:60:A2:33:66:6E:35:89
X509v3 Authority Key Identifier:
keyid:BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/9OOA80tQUugqAZTYA2CiM2ZuNYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.44.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:bc:b8:3f:0e:5e:7b:31:91:2e:0b:d8:04:37:ed:78:73:19:
59:e6:11:74:e2:57:51:4f:91:d8:b9:95:03:22:b4:ee:c3:e2:
ef:17:b7:34:dd:3f:cd:de:1c:b9:9a:d7:17:d9:4b:8c:e2:f1:
16:b0:19:5a:7d:5c:ab:b0:80:c6:18:d6:31:3a:8e:b0:74:0c:
55:01:14:53:82:fe:d3:23:df:59:63:d1:a5:bc:21:a0:c2:19:
81:5a:3e:8a:ac:05:8e:f3:59:d9:e7:39:33:da:e9:c1:64:e9:
ae:7d:39:05:8f:f1:d0:23:70:5c:f0:43:a4:4c:a8:37:04:03:
a1:8e:2a:79:05:8f:d3:73:50:30:b7:07:3d:50:e2:df:de:db:
04:7e:17:ab:80:a4:b9:af:9f:67:23:f4:8b:bd:e8:4d:2e:3a:
7f:63:20:42:c9:be:d6:eb:18:13:71:19:a5:a0:10:1c:1d:9c:
f0:b0:20:0b:97:dd:2e:42:f4:65:84:85:fc:ac:8b:61:7c:30:
89:b9:a3:af:ae:9d:a2:cb:f3:e2:d4:ae:5c:6b:52:2f:c5:e1:
90:0c:49:a4:92:37:76:7a:d0:0d:73:83:7f:29:98:b9:4b:7b:
c6:1e:12:f3:35:f0:ef:c8:8e:69:c8:d7:52:7c:4b:dd:7c:0a:
57:03:53:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:34 2024 by rpki-client on console-fra.rpki-client.org