Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/AeSrVOCsGIj5sxfR408Ja9nQ5-c.roa
File: AeSrVOCsGIj5sxfR408Ja9nQ5-c.roa (raw, json)
Hash identifier: R1RNaMcDNXtovk/8DA60LlkkAvS/rOYuPJKUgYDtZDw=
Subject key identifier: 01:E4:AB:54:E0:AC:18:88:F9:B3:17:D1:E3:4F:09:6B:D9:D0:E7:E7
Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial: 018CC493573B4E59F358FDA2C55B29B77AE7
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/AeSrVOCsGIj5sxfR408Ja9nQ5-c.roa
Signing time: Mon 01 Jan 2024 10:30:39 +0000
ROA not before: Mon 01 Jan 2024 10:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 91.192.106.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 14 Mar 2024 04:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:57:3b:4e:59:f3:58:fd:a2:c5:5b:29:b7:7a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Validity
Not Before: Jan 1 10:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01e4ab54e0ac1888f9b317d1e34f096bd9d0e7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4b:8e:3c:10:2f:38:8f:18:df:44:22:10:9f:
67:b1:a5:01:21:10:38:a1:ea:b0:9a:0e:41:e3:9b:
12:7c:17:a2:31:73:9d:4a:a2:d1:57:48:f7:f7:de:
c4:ea:3b:9d:a0:ac:52:07:cb:d0:0c:a3:f7:47:82:
b5:9f:36:a7:6c:d9:05:b8:cc:41:83:4a:cb:93:21:
17:7e:3d:ff:34:1f:19:46:86:4a:06:05:d8:34:54:
9a:13:30:0d:7e:43:c7:56:8c:9c:cb:86:ad:07:da:
53:9b:9b:ab:a8:b3:00:ae:6c:ae:68:4e:4b:01:a6:
9c:68:55:28:34:1d:36:28:a7:f5:84:51:07:f9:56:
9b:6d:98:f9:c2:fe:f8:b4:4c:31:53:1f:72:12:3b:
de:52:d8:2b:6a:f4:9c:29:eb:d5:5a:9b:13:95:54:
a9:67:46:15:98:15:cc:c4:0a:98:70:0a:48:81:ce:
29:1e:f3:ca:2d:c2:6d:75:80:7c:23:15:13:f1:aa:
a9:08:05:e5:a9:a8:63:0d:db:9c:bd:5b:9b:4e:c6:
13:46:fd:8e:b0:58:cd:d9:4d:67:e6:c8:50:5f:39:
4f:f3:4a:0d:ff:18:cb:83:b5:ac:7f:0f:2b:9b:35:
0d:09:8d:ff:13:58:96:76:96:2b:72:4e:e0:76:b4:
94:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E4:AB:54:E0:AC:18:88:F9:B3:17:D1:E3:4F:09:6B:D9:D0:E7:E7
X509v3 Authority Key Identifier:
keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/AeSrVOCsGIj5sxfR408Ja9nQ5-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.106.0/23
Signature Algorithm: sha256WithRSAEncryption
27:92:9a:17:8a:df:1d:44:95:2b:90:be:39:39:71:07:bf:d8:
64:05:1a:c6:43:f0:53:79:da:72:79:84:7d:83:bd:c5:ec:7d:
9d:73:a9:77:2c:d4:46:60:43:06:65:49:78:2b:69:25:e1:ce:
38:62:bd:c6:c3:73:9d:3a:56:6c:19:2d:a0:87:96:1a:48:80:
44:92:25:b6:97:d0:51:38:3d:a8:ec:c0:6a:0b:c6:35:65:f7:
20:b5:61:a5:f2:f1:47:b2:0a:38:67:62:ba:fb:20:0d:bb:6e:
ac:6f:77:42:ec:0a:2f:9f:13:b1:ab:5a:ad:b2:b7:74:f3:73:
38:04:6f:cb:d4:9e:43:eb:c5:64:19:89:3b:40:2d:b3:b4:22:
42:65:cb:83:f4:bb:36:50:05:38:74:2e:c0:3a:82:f5:b7:55:
2b:a1:3d:34:4a:57:0e:7a:79:3d:39:aa:07:bf:37:96:a9:a1:
97:32:d5:03:d4:1d:b0:9f:74:fc:20:1e:82:e0:c9:05:7c:79:
6c:60:a0:f7:cf:eb:b0:10:d2:7f:5e:c2:5d:68:34:e1:bc:12:
1d:ff:31:d1:b6:ff:51:9c:e9:0d:1e:2d:c5:5f:a9:82:65:89:
56:27:55:c2:6a:4e:10:5c:18:da:8f:dc:3b:8f:62:ea:7c:4d:
16:c0:8e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:49 2024 by rpki-client on console-fra.rpki-client.org