Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/fsDXIKurthh0DlRjBLcHTn0vigs.roa
File: fsDXIKurthh0DlRjBLcHTn0vigs.roa (raw, json)
Hash identifier: xBtUNE0g3Oz624c2IO38/Q1t1aAMgqZSfUJ7SvFPD1w=
Subject key identifier: 7E:C0:D7:20:AB:AB:B6:18:74:0E:54:63:04:B7:07:4E:7D:2F:8A:0B
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01856BDCACA502DB025119F30E4AA744103D
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/fsDXIKurthh0DlRjBLcHTn0vigs.roa
Signing time: Sun 01 Jan 2023 05:45:02 +0000
ROA not before: Sun 01 Jan 2023 05:45:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199429
IP address blocks: 91.237.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Nov 2023 09:53:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:ac:a5:02:db:02:51:19:f3:0e:4a:a7:44:10:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 1 05:45:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ec0d720ababb618740e546304b7074e7d2f8a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8d:1a:39:85:e3:15:16:c8:9e:fe:5f:c6:d4:
2f:03:1b:53:b4:b5:b1:5a:4a:ac:97:9a:f5:3c:0c:
5b:83:d4:63:00:7f:14:4b:9e:11:cf:a3:6f:7b:00:
62:6b:00:23:a2:ad:8d:1c:f0:88:10:2a:bc:ac:32:
25:90:56:13:32:48:01:8c:71:76:c3:5a:a3:91:c5:
91:f5:28:c8:73:ef:0c:71:b8:6f:1c:44:98:27:88:
89:5e:8f:d8:b2:37:01:64:af:ef:44:51:59:70:bc:
5d:17:7b:4b:14:c0:e2:c7:c5:f1:46:d3:8e:c2:11:
7e:e6:a5:35:6a:9b:54:58:02:de:68:dd:87:9d:c5:
ff:8f:0c:9d:da:be:4a:f4:26:eb:3c:59:b0:8c:e1:
7e:7e:f1:d7:2b:af:bd:57:22:2f:a9:36:e0:d3:2e:
6a:a6:ee:f1:a1:84:70:6f:78:cc:97:08:1f:3c:25:
06:a2:b5:a5:16:c4:c0:4c:8e:d6:2e:ff:c2:41:ee:
13:ac:8f:b1:d8:1c:9d:bc:c3:05:03:1d:48:b3:84:
1b:19:0a:96:de:c3:2a:49:0b:e7:56:d5:d2:f4:7e:
78:43:8a:4d:14:ad:3f:aa:bf:1c:e5:c4:a7:63:fa:
b7:24:3e:20:61:63:9d:e1:4b:34:f3:96:77:b9:b7:
7e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C0:D7:20:AB:AB:B6:18:74:0E:54:63:04:B7:07:4E:7D:2F:8A:0B
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/fsDXIKurthh0DlRjBLcHTn0vigs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.93.0/24
Signature Algorithm: sha256WithRSAEncryption
05:f0:ac:a7:8a:65:b0:03:b8:37:f1:69:78:0a:7c:df:e7:a0:
76:30:a8:1d:87:ac:8e:9a:4a:d0:2e:77:95:74:81:cc:43:56:
e7:62:12:38:ff:86:99:6c:96:43:5e:22:11:a0:4a:d8:0b:d6:
21:9d:da:3e:d9:b8:78:9f:bc:cd:7e:5c:15:ab:07:23:b4:ed:
60:4d:66:3c:5b:a6:9b:4a:f3:f6:1b:2e:6e:30:46:5d:f6:4b:
5d:8f:92:21:82:e5:b2:d3:20:3e:05:37:67:47:69:59:8f:14:
ae:71:57:b2:0b:3f:98:7f:e7:fd:6e:9e:2a:42:4b:7c:77:63:
c8:f9:b4:04:65:30:3a:18:e2:4e:93:98:79:18:96:34:38:84:
67:da:42:37:91:13:d3:ac:73:84:71:bf:02:63:53:e7:3c:1c:
42:d9:56:f7:35:b5:97:31:b5:1f:76:8d:3f:d4:e4:40:7a:83:
f2:25:4c:a2:16:68:93:ae:52:82:83:fd:b9:79:14:ed:27:76:
1a:94:75:96:14:42:11:cb:f1:20:6c:2c:d1:f6:2d:c9:fb:ac:
7e:2a:d2:b3:92:5f:1d:d7:9f:18:a0:1b:3e:4b:bc:cd:91:1c:
b2:d1:de:eb:f1:bb:96:7e:a0:bb:95:52:1a:5d:b8:51:64:20:
f3:45:6f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org