Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/Ciyt6jEO0iPw2-ux7vNIEUcbmN0.roa
File: Ciyt6jEO0iPw2-ux7vNIEUcbmN0.roa (raw, json)
Hash identifier: +4pWQdMVHn+r0LZIWY3YITx4fPAymiIf9wTQwraRWdo=
Subject key identifier: 0A:2C:AD:EA:31:0E:D2:23:F0:DB:EB:B1:EE:F3:48:11:47:1B:98:DD
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 0189EFEDFD48F599BDCECC822D2B25C7FA2E
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/Ciyt6jEO0iPw2-ux7vNIEUcbmN0.roa
Signing time: Sun 13 Aug 2023 17:24:58 +0000
ROA not before: Sun 13 Aug 2023 17:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56902
IP address blocks: 91.92.115.0/24 maxlen: 24
85.202.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ef:ed:fd:48:f5:99:bd:ce:cc:82:2d:2b:25:c7:fa:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Aug 13 17:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a2cadea310ed223f0dbebb1eef34811471b98dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:6f:f3:09:2a:7f:20:16:0c:aa:84:d3:7a:
39:b8:47:ae:03:54:2b:6d:16:1d:58:f5:b2:71:b0:
57:29:38:f3:46:60:b7:f4:3b:cc:93:38:10:4a:09:
be:c2:3f:a5:94:4c:95:a0:0e:9b:a1:d4:e1:c1:48:
45:70:8c:3b:b9:f4:62:47:a6:50:c7:56:ab:37:84:
1b:68:f7:c1:fc:8a:14:c1:62:12:9d:0c:df:11:39:
71:b7:2f:fe:63:1d:97:e2:38:96:9d:82:1b:b2:98:
5d:a1:fb:59:b0:e0:0b:da:aa:3e:43:b0:5a:02:d4:
d7:35:6a:4d:69:d4:c9:b1:d1:8d:14:f4:68:22:a6:
08:ad:a6:5b:09:6e:bd:f7:e7:5a:68:75:f4:12:a2:
1e:11:50:c4:9d:c4:81:4e:2d:f5:79:2e:c5:55:9b:
9f:ba:79:df:c7:0e:a2:11:b6:df:49:7f:56:7e:e4:
e0:f0:2b:c5:f0:48:59:7a:d1:a1:b3:fc:c1:03:99:
43:a0:1d:5b:c8:3f:cc:fe:de:2d:60:9e:6a:d0:38:
ca:06:ed:2a:91:bc:dd:87:2a:b7:65:05:6d:36:db:
4c:b7:9a:92:0b:1e:9d:6d:54:6a:c6:d6:ff:61:24:
d4:1a:88:77:03:ac:3b:1d:bc:f9:45:d2:36:e0:b7:
b9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2C:AD:EA:31:0E:D2:23:F0:DB:EB:B1:EE:F3:48:11:47:1B:98:DD
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/Ciyt6jEO0iPw2-ux7vNIEUcbmN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.95.0/24
91.92.115.0/24
Signature Algorithm: sha256WithRSAEncryption
96:9f:e4:76:e3:73:92:44:5d:69:9d:c9:6a:82:d7:f9:fe:79:
0d:06:73:15:a8:a9:7d:1f:93:d8:7a:f3:85:ad:32:66:85:94:
8c:cb:f2:a9:cd:3e:2f:1f:a5:47:98:e4:a5:af:aa:4d:a0:e4:
71:5c:29:97:39:68:e8:bf:39:bf:b7:77:f8:f8:68:08:b3:29:
02:5c:33:34:4e:1b:ca:d7:e9:f5:fb:88:19:00:6f:1e:b5:b5:
20:41:6b:a4:6d:da:df:26:08:9f:f1:5d:f1:d5:23:e5:4a:91:
33:4e:f2:a1:fa:a6:da:95:58:7f:f0:44:32:e3:de:64:af:7e:
ad:37:bf:6d:87:49:de:e7:72:56:af:70:75:24:8f:b1:1b:94:
b3:fb:b8:62:22:aa:3e:bc:c6:6c:eb:42:c3:07:18:5e:c2:f0:
c6:85:b6:f0:0a:26:92:1b:c9:3d:65:1b:b4:be:ba:4d:8b:ac:
b6:cb:13:5b:b6:09:fd:31:56:63:ea:88:55:54:54:72:36:ff:
b0:35:72:b8:0e:75:2c:e2:01:9c:66:7e:90:df:a6:56:c9:a3:
ed:36:7a:a4:49:63:2e:b6:44:10:58:14:c2:68:d0:57:20:f9:
e6:b4:93:bb:a5:6a:b2:74:b2:60:c7:4f:04:d5:d0:a0:b9:d7:
6d:05:bc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:23 2024 by rpki-client on console-fra.rpki-client.org