Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/Cc_C_Jpb1VxkP-3AFHvaMsfrIMw.roa
File: Cc_C_Jpb1VxkP-3AFHvaMsfrIMw.roa (raw, json)
Hash identifier: QXzn35EVb4sXOdz2gJZuLkz3SS3C8fyaMKJ+tqTsYME=
Subject key identifier: 09:CF:C2:FC:9A:5B:D5:5C:64:3F:ED:C0:14:7B:DA:32:C7:EB:20:CC
Certificate issuer: /CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Certificate serial: 0188AF4E844BCC909DCAF6A156C1BF3B5EAF
Authority key identifier: 9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/Cc_C_Jpb1VxkP-3AFHvaMsfrIMw.roa
Signing time: Mon 12 Jun 2023 11:12:18 +0000
ROA not before: Mon 12 Jun 2023 11:12:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5089
IP address blocks: 91.223.46.0/24 maxlen: 24
91.224.26.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:4e:84:4b:cc:90:9d:ca:f6:a1:56:c1:bf:3b:5e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Validity
Not Before: Jun 12 11:12:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09cfc2fc9a5bd55c643fedc0147bda32c7eb20cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:9d:a3:54:6a:e0:3b:31:51:8f:b3:ce:ed:
90:a3:72:b2:4a:97:d8:74:60:90:9f:d4:be:01:29:
c3:2b:c4:5c:8b:7c:36:61:1b:a9:61:f1:4a:ce:36:
db:0b:ca:c8:57:b6:4a:d6:6b:ee:c2:37:1e:67:f5:
b8:bf:38:3a:7b:f9:81:05:5b:42:4c:b6:67:8a:bd:
c9:58:88:0b:95:51:56:ff:5e:db:a2:90:c3:99:12:
c0:73:d4:59:49:18:cb:58:c3:39:94:c7:ab:0c:7d:
ff:6d:01:f7:98:9f:b2:d2:74:03:04:1c:60:cf:4a:
3c:a5:cf:4f:de:4a:a9:35:82:9d:12:61:f0:aa:f2:
4a:30:01:ff:82:bd:e8:a6:64:2e:a9:b3:89:50:a9:
1d:78:c5:0e:67:37:d7:81:23:03:dc:69:09:28:58:
b8:dc:82:e1:27:10:82:63:15:f7:67:4f:0c:ca:ee:
89:39:c6:b6:c1:78:ca:83:af:77:44:b7:71:95:ea:
25:38:8d:62:a3:af:e2:7a:4e:63:9b:33:75:b3:4a:
be:f9:c3:03:5b:97:72:b3:38:db:28:f8:2c:ab:4f:
42:6e:6a:69:6e:e5:69:08:69:81:53:82:75:db:36:
7e:1e:55:f2:28:6c:64:41:33:b4:f4:4f:82:e1:0c:
bd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CF:C2:FC:9A:5B:D5:5C:64:3F:ED:C0:14:7B:DA:32:C7:EB:20:CC
X509v3 Authority Key Identifier:
keyid:9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/Cc_C_Jpb1VxkP-3AFHvaMsfrIMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.46.0/24
91.224.26.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:21:68:a0:89:25:43:e5:5d:75:30:32:c9:56:98:6f:a5:a4:
e9:e6:c5:6e:58:52:61:86:c4:6c:6c:b4:f2:c4:ad:3b:78:37:
de:7e:a4:45:34:88:3f:34:99:a5:0b:89:2a:bf:80:2f:49:fc:
83:c2:2e:b3:90:27:6f:6d:ff:72:9f:6a:c7:45:95:25:36:10:
b7:46:42:47:d0:c6:c4:4d:8e:4a:67:1a:90:28:bc:e9:da:66:
91:85:d8:77:ca:33:a3:cb:a6:af:4e:aa:6d:14:e8:81:d5:9c:
2a:1d:2e:89:08:da:d6:a5:cb:7f:2d:7d:b7:06:70:cd:0f:4d:
a1:48:d2:a0:af:5e:33:1a:b6:ee:c8:4e:85:d2:b4:31:6c:a0:
2e:5e:35:41:b9:ef:b7:d9:e5:31:56:c9:3a:fb:b8:04:db:e2:
75:78:ea:ae:96:37:46:1f:b5:07:08:69:a2:c1:f6:06:24:75:
21:7a:82:96:76:e3:14:e9:ca:57:0a:ef:e5:cf:79:0f:b2:7c:
34:85:2a:1b:bb:61:f8:42:0c:47:81:6a:39:74:b0:5c:2e:26:
c4:8a:54:30:81:6a:8d:7e:41:60:1a:5a:ec:1c:75:6b:c0:fe:
17:29:6e:ec:34:45:33:7b:48:6d:1d:20:90:26:c6:02:85:11:
b0:b1:aa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:45 2024 by rpki-client on console-ams.rpki-client.org