Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/T_v-A0tXFnqAu9y2NPnntSKl6O4.roa
File: T_v-A0tXFnqAu9y2NPnntSKl6O4.roa (raw, json)
Hash identifier: 0wrvgWTiD0yx6I2Vm7PP+gmLRrWYbcYb3KMGLko9Lq0=
Subject key identifier: 4F:FB:FE:03:4B:57:16:7A:80:BB:DC:B6:34:F9:E7:B5:22:A5:E8:EE
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0188A0CB369859A21B99C49039BC70761948
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/T_v-A0tXFnqAu9y2NPnntSKl6O4.roa
Signing time: Fri 09 Jun 2023 15:34:12 +0000
ROA not before: Fri 09 Jun 2023 15:34:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201011
IP address blocks: 91.238.42.0/23 maxlen: 23
91.238.41.0/24 maxlen: 24
91.238.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Jun 2023 14:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a0:cb:36:98:59:a2:1b:99:c4:90:39:bc:70:76:19:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jun 9 15:34:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ffbfe034b57167a80bbdcb634f9e7b522a5e8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:1d:48:04:2a:13:11:53:78:06:e6:9a:c5:
80:90:cf:9b:9f:12:b3:43:f1:61:7e:a3:8d:0f:6a:
c4:ed:fb:90:f0:4e:83:ba:f7:93:39:eb:93:82:e1:
3f:d1:b9:c2:8d:c9:9d:56:d2:dd:bb:77:bb:4b:22:
c3:d7:1b:d1:74:21:74:07:8d:53:9c:74:ad:f2:04:
20:f9:9d:96:11:2c:57:2f:c0:92:5b:5f:2b:ce:aa:
dc:d8:6b:65:54:ba:61:c6:8a:5e:4c:f7:cc:8e:68:
00:90:4a:13:5d:70:cb:51:02:47:5e:79:ba:3a:bf:
94:2a:00:c1:aa:a5:9d:49:8b:20:b0:89:12:45:95:
78:11:43:92:88:96:dc:07:3c:38:1b:35:49:a8:be:
26:18:28:fb:f7:86:42:e4:21:ff:6e:69:af:16:e1:
73:57:89:a2:d3:58:20:f8:be:63:7b:c0:4a:fd:d4:
4b:0e:db:2e:af:09:71:54:16:10:2c:e8:a3:5b:02:
42:f9:1c:24:d1:5b:d5:80:09:21:1e:30:64:96:d4:
bb:d2:2a:6c:0c:da:02:4f:40:7a:d8:2a:b2:6d:e2:
16:2d:b5:bb:24:34:3f:4a:7e:31:ea:d8:28:66:92:
12:58:1b:fb:70:9b:75:6b:cc:1a:e9:f0:e0:aa:6b:
69:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FB:FE:03:4B:57:16:7A:80:BB:DC:B6:34:F9:E7:B5:22:A5:E8:EE
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/T_v-A0tXFnqAu9y2NPnntSKl6O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.41.0-91.238.43.255
Signature Algorithm: sha256WithRSAEncryption
80:cd:c3:ef:e2:ab:7d:c1:08:d9:7c:d1:e6:fb:cc:cc:db:a2:
b6:9b:31:06:59:5b:75:95:44:55:f9:04:f7:76:76:33:23:18:
87:3a:bc:b2:b0:70:56:8e:6c:01:84:35:a4:8d:12:45:8d:76:
15:1e:f6:7d:9d:71:80:4b:d8:ec:29:67:44:54:69:8d:ce:b5:
df:9b:f3:c2:c3:a9:21:95:01:0d:5e:2e:89:8e:29:08:1e:b0:
83:bf:2c:f4:4e:6f:11:1c:f2:0f:3c:7d:b6:ac:00:1a:7e:7c:
f8:7e:64:a0:64:e3:9c:ea:85:71:5b:61:ec:a9:24:dd:a2:3d:
e9:e1:35:c7:e4:76:c5:36:4a:af:da:f0:31:b5:2f:53:39:b6:
b9:c3:f7:b1:3d:f3:e5:10:7d:e6:e2:2b:49:c7:7d:03:00:71:
7e:70:65:9d:2d:20:60:dd:be:0b:f4:25:3c:b7:76:cd:ab:43:
11:5b:ae:44:4b:42:52:39:6c:bf:52:a3:95:82:d5:1d:c4:a0:
13:75:cb:ca:3d:f4:01:8b:76:71:49:ef:6e:15:71:51:5b:66:
80:33:dd:49:1c:76:8d:54:29:c2:b1:b1:4f:4b:71:87:5d:c2:
da:11:53:69:2c:be:2f:20:e5:35:c1:c6:a7:7f:8c:30:d9:26:
9c:31:98:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org