Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/B89hnsDGvsHbQRQfEr4-HFAM3Dk.roa
File: B89hnsDGvsHbQRQfEr4-HFAM3Dk.roa (raw, json)
Hash identifier: uF5RpFyf7BVje9fvAB/LehXmE454Pm4gf0ltWTWxsJ8=
Subject key identifier: 07:CF:61:9E:C0:C6:BE:C1:DB:41:14:1F:12:BE:3E:1C:50:0C:DC:39
Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial: 01856CAF148D93C3A7A55EE6A9DB913DE9E8
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/B89hnsDGvsHbQRQfEr4-HFAM3Dk.roa
Signing time: Sun 01 Jan 2023 09:34:51 +0000
ROA not before: Sun 01 Jan 2023 09:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24971
IP address blocks: 91.226.216.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:14:8d:93:c3:a7:a5:5e:e6:a9:db:91:3d:e9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
Validity
Not Before: Jan 1 09:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07cf619ec0c6bec1db41141f12be3e1c500cdc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:92:9f:aa:12:b0:54:9c:17:95:95:9d:f9:14:
a2:15:22:0c:95:9f:be:3e:12:68:7c:53:23:b8:07:
2d:50:5b:6c:26:07:19:29:70:c4:eb:27:ae:f0:3e:
c1:0b:fe:b7:ce:d8:da:09:b5:d7:73:9a:88:89:a7:
0b:1b:82:bd:38:c3:d2:da:02:6c:2a:d4:81:fc:76:
05:10:bd:1f:b4:e8:99:c1:9b:e3:be:37:35:81:0a:
35:22:db:22:b4:d3:cf:d5:fa:cc:d9:b7:51:4e:ec:
65:5f:3e:2a:05:5e:9f:f2:f7:76:7c:6a:f3:c4:97:
a5:73:b2:32:46:f3:34:9c:ae:4e:97:9f:f9:1b:34:
97:85:aa:e2:ff:47:dc:c6:eb:ce:17:5c:a2:80:e9:
4d:a4:bf:25:02:33:c1:cf:91:9f:d7:e1:bc:06:be:
99:24:d9:d5:fd:9c:a2:b6:f6:44:4b:02:db:83:fc:
58:aa:e9:0e:55:98:60:07:22:37:0c:cb:4a:d1:18:
8a:ff:ef:58:10:7b:51:f3:6a:fa:e8:6b:f0:59:c1:
af:da:7d:cf:cb:7c:29:2e:f0:f5:79:c7:e2:52:4a:
c3:13:a4:4e:9d:f3:da:7d:f4:05:91:8b:db:c6:6e:
a7:c1:0c:97:43:27:07:66:0d:34:53:5d:c0:48:d1:
bc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CF:61:9E:C0:C6:BE:C1:DB:41:14:1F:12:BE:3E:1C:50:0C:DC:39
X509v3 Authority Key Identifier:
keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/B89hnsDGvsHbQRQfEr4-HFAM3Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.216.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:9b:84:ac:63:dc:53:e6:e7:39:3c:cc:e9:85:c2:ed:58:0c:
b9:79:bf:db:83:de:6d:e3:8d:76:45:db:b2:2e:c5:98:d0:ca:
6b:f9:89:9d:55:24:00:00:68:8a:3a:df:b4:e8:61:ce:5f:08:
c2:a4:c3:12:99:e7:03:57:5f:46:1c:31:d3:cb:10:4b:3d:40:
7e:88:21:28:45:59:67:bd:53:e3:f2:0c:a0:8f:b1:95:0f:84:
c2:48:2c:71:6b:2c:84:e9:1d:8e:86:bf:d9:be:f9:92:ba:6c:
70:c2:85:3d:a2:e2:3f:c3:34:db:36:d7:e3:5c:4b:f6:93:11:
f6:fc:b4:b4:a8:0f:2f:a9:1c:6e:3a:b1:96:da:81:f3:fc:d8:
5a:34:27:2f:4b:da:42:59:23:cf:a0:2f:94:46:18:74:8a:45:
33:9d:d6:20:f9:ab:df:fd:27:3a:f2:3e:a2:28:d9:16:18:40:
8e:00:0f:44:b2:1a:39:fc:00:4d:3a:dc:68:74:fe:01:1e:e5:
1c:c6:29:65:e2:b6:d8:d7:1a:ef:29:ca:7d:7e:81:df:2e:d7:
07:e0:b5:67:d6:4b:fc:7a:b3:de:bc:7b:9c:da:4c:8f:84:dc:
db:e2:9a:83:3e:3f:77:da:ee:ab:bb:fe:9f:e5:a5:5b:02:93:
46:78:56:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:35 2024 by rpki-client on console-ams.rpki-client.org