Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/53b013-5912-42b0-b026-a55b0dcc2946/1/pFRSgfWcixxcY3LjQxzdfXQJ7_w.roa
File: pFRSgfWcixxcY3LjQxzdfXQJ7_w.roa (raw, json)
Hash identifier: ZqatHONh04poVhn34ag2IC8EGSStcTgumBAnf1YE8so=
Subject key identifier: A4:54:52:81:F5:9C:8B:1C:5C:63:72:E3:43:1C:DD:7D:74:09:EF:FC
Certificate issuer: /CN=26e3fc79b638b123191dafa4e886d3a5acad487f
Certificate serial: 0188FB99204FD531054D27AFB0FE63EF5E6E
Authority key identifier: 26:E3:FC:79:B6:38:B1:23:19:1D:AF:A4:E8:86:D3:A5:AC:AD:48:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JuP8ebY4sSMZHa-k6IbTpaytSH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/53b013-5912-42b0-b026-a55b0dcc2946/1/pFRSgfWcixxcY3LjQxzdfXQJ7_w.roa
Signing time: Tue 27 Jun 2023 06:44:56 +0000
ROA not before: Tue 27 Jun 2023 06:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207713
IP address blocks: 91.216.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fb:99:20:4f:d5:31:05:4d:27:af:b0:fe:63:ef:5e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26e3fc79b638b123191dafa4e886d3a5acad487f
Validity
Not Before: Jun 27 06:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4545281f59c8b1c5c6372e3431cdd7d7409effc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:11:f5:2a:74:c3:e1:95:68:fe:0a:b0:83:
e2:c3:88:88:40:2b:76:85:c1:4b:14:1d:27:2b:82:
16:74:bc:2b:e3:5e:61:2c:4f:08:97:da:0e:80:e1:
7c:2e:1e:d2:ce:b3:b3:c2:01:92:6d:d9:37:fb:ca:
bc:2f:2c:7e:30:b4:07:a9:b7:45:02:19:0b:64:5d:
c0:93:07:60:4e:4c:cf:e7:10:4a:62:d9:a6:a9:4a:
cd:34:11:45:6f:43:31:99:a1:41:d4:cc:44:66:5d:
21:0e:26:df:77:2c:7c:67:5e:3b:6a:0d:83:42:8d:
33:33:39:49:0e:6a:28:f7:ad:52:b8:eb:be:92:0f:
c9:1f:af:dd:1d:c3:dd:1c:6c:32:e6:19:4e:1c:9f:
86:73:3e:28:10:ac:55:0b:a7:47:58:1d:cf:16:42:
32:84:7d:0d:29:6a:93:14:03:56:c2:8c:bf:71:80:
71:24:37:95:49:61:bd:b7:08:60:36:21:83:c0:c4:
04:13:a4:48:e2:f5:60:bc:7c:b1:39:25:f1:71:d0:
52:89:b4:f8:e4:92:7e:d8:29:65:04:c9:55:7e:33:
2f:f9:00:8d:9d:de:89:5c:19:55:64:98:cb:0c:1c:
cb:05:32:7b:da:e3:62:37:db:c0:28:60:dd:d5:3e:
a5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:54:52:81:F5:9C:8B:1C:5C:63:72:E3:43:1C:DD:7D:74:09:EF:FC
X509v3 Authority Key Identifier:
keyid:26:E3:FC:79:B6:38:B1:23:19:1D:AF:A4:E8:86:D3:A5:AC:AD:48:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JuP8ebY4sSMZHa-k6IbTpaytSH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/53b013-5912-42b0-b026-a55b0dcc2946/1/pFRSgfWcixxcY3LjQxzdfXQJ7_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/53b013-5912-42b0-b026-a55b0dcc2946/1/JuP8ebY4sSMZHa-k6IbTpaytSH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.186.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b5:0c:78:7f:70:23:f1:e9:74:bd:fb:d9:9b:e4:d4:e8:f2:
11:c5:f7:89:87:3a:a9:1c:8e:db:c0:c6:e1:80:31:62:60:62:
c3:78:4f:48:d8:34:1e:f3:fd:c7:58:78:04:97:b6:3b:9b:1a:
72:cb:eb:59:5c:e2:83:32:70:f4:7d:f0:ca:cf:5b:c3:22:bb:
53:81:44:0f:3e:b7:48:d0:0a:81:3c:27:b6:f7:1f:50:fe:3d:
ba:ec:a6:ad:a4:55:24:ee:07:bb:0a:88:5b:08:5c:58:24:20:
5b:ce:f2:fe:a6:78:c1:0b:da:40:8f:6a:90:f1:ba:25:b7:d5:
46:7c:4e:18:3c:54:0e:df:11:1c:a9:66:eb:d4:57:a4:29:d2:
24:7a:54:af:9a:f3:17:74:82:50:32:29:ee:81:0f:9d:b8:09:
01:51:5e:15:7c:48:b8:84:70:44:67:f8:8e:c4:4f:7e:33:78:
92:e8:b5:5d:6f:39:0d:c6:54:bf:eb:cd:27:86:69:c1:4a:a2:
00:49:e8:c3:30:c9:17:df:ce:a2:bd:81:9a:dd:d6:a3:b6:20:
b1:f1:47:93:62:35:8a:85:f3:ff:78:46:bd:70:12:0b:46:f4:
c4:f5:40:c4:3d:b1:b4:22:7b:e2:02:65:cb:e3:cf:ec:9c:75:
fe:de:70:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:44 2024 by rpki-client on console-ams.rpki-client.org