Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/dlrmLYY4Jnmv7SafX57JRmZi9Ok.roa
File: dlrmLYY4Jnmv7SafX57JRmZi9Ok.roa (raw, json)
Hash identifier: DlU/75hl5Oyz3ScbfP/CZrE/VWEHePjJocCacQOvVmc=
Subject key identifier: 76:5A:E6:2D:86:38:26:79:AF:ED:26:9F:5F:9E:C9:46:66:62:F4:E9
Certificate issuer: /CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Certificate serial: 01856E8B4BAAC62AC21436EE7E1BAB324655
Authority key identifier: 82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/dlrmLYY4Jnmv7SafX57JRmZi9Ok.roa
Signing time: Sun 01 Jan 2023 18:15:00 +0000
ROA not before: Sun 01 Jan 2023 18:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199016
IP address blocks: 91.199.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jan 2023 23:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:4b:aa:c6:2a:c2:14:36:ee:7e:1b:ab:32:46:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Validity
Not Before: Jan 1 18:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=765ae62d86382679afed269f5f9ec9466662f4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:90:fc:8e:bb:2a:88:53:c8:ef:6d:68:ea:ec:
ae:16:3f:e9:76:ed:38:a2:63:08:2b:3f:5a:85:31:
13:fb:d0:f1:e5:b9:1b:4d:4d:78:0e:d2:3e:4f:1a:
16:06:6b:00:db:51:d5:c8:20:f4:1c:b4:0b:3e:26:
e2:73:1c:22:64:35:01:89:fe:41:e8:d9:d6:cd:03:
aa:56:e1:aa:86:d4:d0:5b:6d:a9:d0:3e:33:ee:62:
db:fd:bc:3e:18:8b:7c:cc:1b:b5:e9:32:c9:57:4b:
fd:b4:fe:65:52:f1:af:89:53:96:25:70:86:23:5b:
3f:bc:7a:01:37:7b:f5:f2:3a:cb:d7:f1:31:83:3e:
e0:fb:11:2b:4b:fb:17:ac:42:f1:f3:ed:85:06:ac:
33:c5:1d:e1:17:49:78:f1:31:49:b1:71:13:f7:e0:
39:9d:56:4d:7e:22:8a:f2:5f:bb:19:82:ce:e3:d6:
51:a9:f6:d1:cd:58:0c:50:8e:5e:7d:c6:68:da:57:
77:28:71:45:5d:00:0f:28:71:04:dc:63:d2:3f:3e:
c1:6d:f5:e8:2c:b2:74:17:ac:6a:3d:c7:08:30:96:
67:90:2a:a3:93:34:e0:4c:ff:4e:55:f0:24:89:c9:
c3:fd:5f:23:91:a3:8c:84:49:71:7b:c3:8c:2e:6f:
fe:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5A:E6:2D:86:38:26:79:AF:ED:26:9F:5F:9E:C9:46:66:62:F4:E9
X509v3 Authority Key Identifier:
keyid:82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/dlrmLYY4Jnmv7SafX57JRmZi9Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.116.0/24
Signature Algorithm: sha256WithRSAEncryption
49:3c:ca:e9:45:01:23:be:b9:76:ff:34:e3:1b:8a:ac:a1:54:
0c:6f:f2:a6:a7:63:a3:7e:5e:51:c4:48:54:52:70:10:b1:4b:
7b:62:7e:9f:bf:e8:fc:fb:4d:71:d8:1a:f6:18:43:84:01:a5:
ec:4d:8c:ca:ad:47:e0:47:1e:98:14:b9:df:08:20:80:7c:f3:
20:5c:71:b4:d1:49:a3:b3:8e:3d:b8:3f:e4:c9:65:a3:7c:fc:
dc:c9:8b:32:f4:2c:49:bb:12:9c:8d:9a:14:aa:1b:af:d5:13:
01:2c:3a:c7:18:db:4e:bc:aa:96:03:e6:16:f0:94:86:7c:6f:
7d:d7:54:0f:66:87:f6:6a:8e:ea:27:83:f2:06:7b:15:33:88:
1d:59:57:6c:37:f2:b7:84:06:d1:74:ea:4c:2e:4e:0c:ff:63:
9b:03:76:1a:b9:22:db:39:cb:94:b1:a8:e9:39:35:24:c9:be:
6b:8f:4f:99:54:09:c3:f7:1c:dc:af:17:fb:84:c4:f0:26:97:
4f:09:12:88:7c:7d:5a:e5:da:3a:97:19:aa:8f:54:ac:0d:af:
6e:ee:9a:47:41:ce:fb:ad:e1:b6:e4:5d:14:1f:17:fe:ba:de:
24:ac:66:88:01:cf:6e:a3:62:37:06:28:26:e1:a2:c4:f6:2d:
eb:8d:d1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:36 2024 by rpki-client on console-fra.rpki-client.org