Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/UHug1u7ge6_WBzKS7Vw4r6kTnmk.roa
File: UHug1u7ge6_WBzKS7Vw4r6kTnmk.roa (raw, json)
Hash identifier: nnbXibZFcnIYCv0+VznkVif3mJoFu7Jsm564B2EL0bk=
Subject key identifier: 50:7B:A0:D6:EE:E0:7B:AF:D6:07:32:92:ED:5C:38:AF:A9:13:9E:69
Certificate issuer: /CN=9cf45e00ae164e67aa1354857237d09adf27c952
Certificate serial: 01856FF063A806D16A2B30D00140FD4592A5
Authority key identifier: 9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/UHug1u7ge6_WBzKS7Vw4r6kTnmk.roa
Signing time: Mon 02 Jan 2023 00:45:03 +0000
ROA not before: Mon 02 Jan 2023 00:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48069
IP address blocks: 91.208.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:63:a8:06:d1:6a:2b:30:d0:01:40:fd:45:92:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf45e00ae164e67aa1354857237d09adf27c952
Validity
Not Before: Jan 2 00:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=507ba0d6eee07bafd6073292ed5c38afa9139e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:29:40:a9:ff:ed:e5:68:fe:38:ed:36:1e:88:
3d:4c:27:8e:b2:08:05:e3:f4:af:ed:59:f6:0d:56:
e4:0f:80:8e:7f:d0:d9:6f:db:cd:8c:91:19:56:09:
48:45:99:93:64:6f:19:21:d5:ae:97:e6:ea:29:00:
ec:54:48:1d:f5:92:3c:f1:34:4f:b5:88:fb:cf:d1:
96:a9:87:e5:ae:cb:13:b2:ae:80:19:0f:62:49:c6:
10:bc:88:db:a8:54:3f:50:2a:72:cc:23:19:fc:da:
b2:1e:82:4f:3e:91:00:14:86:29:68:25:11:3e:13:
8d:8a:d7:5f:df:ab:d0:6a:ec:f0:ba:82:a9:8b:17:
94:7e:dd:a4:5d:17:10:30:e8:85:ac:90:88:ea:76:
41:2b:b1:8c:15:3a:ee:66:f1:71:f1:46:40:f2:c0:
6a:22:86:89:8e:72:e6:ea:17:92:11:49:f4:67:0b:
4d:6c:8c:fc:76:88:0c:fc:7b:86:71:31:b5:fc:ad:
6d:8d:24:50:15:92:6f:9f:ef:67:b9:c0:e1:0f:54:
c0:60:e1:0b:e5:16:bb:c9:20:13:6d:03:3f:80:3d:
4a:5e:a3:c8:ab:8b:e0:33:37:53:12:a6:59:73:28:
49:c5:25:81:e4:17:ae:86:05:bc:4d:73:de:0d:d2:
55:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7B:A0:D6:EE:E0:7B:AF:D6:07:32:92:ED:5C:38:AF:A9:13:9E:69
X509v3 Authority Key Identifier:
keyid:9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/UHug1u7ge6_WBzKS7Vw4r6kTnmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.209.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a0:7b:a4:d5:bf:92:2f:2f:be:84:c4:37:5b:9c:c1:67:41:
9a:46:49:6f:2b:bd:b6:6e:af:cd:93:d3:2f:32:7b:f8:bd:3a:
bf:e7:aa:40:64:a4:46:46:6f:ac:00:6b:42:3b:50:56:66:87:
22:43:a0:05:44:ec:18:21:e6:a1:fd:33:82:9d:0d:bd:57:c9:
fe:ed:5a:76:7a:cc:0f:41:5f:9d:cb:f9:ba:64:0b:fa:3e:21:
6c:29:84:e1:83:4a:98:cb:43:2e:0e:2b:07:95:ed:9a:05:a8:
d7:27:d6:c9:fa:d0:98:f5:7c:b6:e6:7f:d3:88:ae:6d:74:7a:
f8:ad:5f:c5:22:54:86:63:3f:e1:f5:d3:1c:3d:be:45:5f:39:
38:59:32:22:12:fc:59:62:f1:2f:32:b7:22:d0:ec:09:90:ad:
5b:02:66:54:b0:99:d7:f2:5c:fe:e8:1f:ea:71:9c:64:a0:26:
7f:fe:ae:74:fd:2c:7f:d8:bc:12:57:5b:50:28:72:59:5f:59:
67:09:45:f2:f7:e8:d8:58:c1:7a:1a:8d:df:89:8d:dc:97:a6:
74:3b:77:a7:2a:6f:85:3f:03:43:69:21:f9:35:2c:bc:86:78:
5a:5f:47:26:61:be:05:61:61:a2:92:f8:31:22:7e:d3:04:37:
fb:6c:4f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:19 2024 by rpki-client on console-ams.rpki-client.org