Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/91TXrIQ4zSuBi-uUEYacWQsTRTM.roa
File: 91TXrIQ4zSuBi-uUEYacWQsTRTM.roa (raw, json)
Hash identifier: oWFMLPdWVN6Y2NP517bf0JIUdENcrVkXR2X3/0ewjg8=
Subject key identifier: F7:54:D7:AC:84:38:CD:2B:81:8B:EB:94:11:86:9C:59:0B:13:45:33
Certificate issuer: /CN=1f31120fe225775eb53152d4920e9c573ff2b65e
Certificate serial: 018BA8E75B8131FD7E58E7CEE53D80B969FC
Authority key identifier: 1F:31:12:0F:E2:25:77:5E:B5:31:52:D4:92:0E:9C:57:3F:F2:B6:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzESD-Ild161MVLUkg6cVz_ytl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/91TXrIQ4zSuBi-uUEYacWQsTRTM.roa
Signing time: Tue 07 Nov 2023 08:30:16 +0000
ROA not before: Tue 07 Nov 2023 08:30:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198817
IP address blocks: 91.236.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a8:e7:5b:81:31:fd:7e:58:e7:ce:e5:3d:80:b9:69:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f31120fe225775eb53152d4920e9c573ff2b65e
Validity
Not Before: Nov 7 08:30:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f754d7ac8438cd2b818beb9411869c590b134533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:b2:1d:5e:af:c3:ae:b9:a3:29:f0:4a:ce:
8e:7f:54:0b:a4:f1:48:b3:b9:67:cb:c3:90:20:2d:
13:9c:6d:de:e7:c2:ff:c2:c1:c0:45:2f:5a:7f:3d:
f2:b1:77:3a:37:28:a3:d1:54:c3:2b:07:21:2f:82:
69:a1:13:2c:38:0b:06:d4:8e:76:1e:bb:4d:ac:4c:
66:e2:39:cd:7c:46:e6:fd:8a:f6:65:e4:f5:f5:3e:
e6:cb:36:45:72:05:e6:45:a0:9d:08:00:c9:3e:3c:
2e:cf:96:91:4b:b6:70:29:ac:4c:4a:c4:cb:44:06:
18:28:79:10:1a:3a:44:75:a2:4c:91:00:31:19:48:
e1:1b:6e:3c:ee:d7:93:01:ef:c6:9c:41:19:d0:c6:
5e:0c:9d:0d:b3:e6:d6:79:2a:7d:1a:40:62:e2:f4:
ca:9a:ed:2b:ca:5d:6d:94:2f:e6:1b:f1:7a:fd:72:
a2:1d:f9:46:23:c4:91:13:8b:f6:01:17:fd:a0:9e:
fc:73:23:c3:49:ff:f1:20:4d:a2:2e:ad:5e:00:77:
0d:3e:71:19:04:1f:eb:90:70:f8:f3:94:0e:71:ad:
16:ce:94:29:97:92:2b:84:13:2f:6f:0e:ac:dc:d9:
86:02:e1:a0:04:13:12:69:ce:5b:2d:74:0c:2d:8c:
86:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:54:D7:AC:84:38:CD:2B:81:8B:EB:94:11:86:9C:59:0B:13:45:33
X509v3 Authority Key Identifier:
keyid:1F:31:12:0F:E2:25:77:5E:B5:31:52:D4:92:0E:9C:57:3F:F2:B6:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzESD-Ild161MVLUkg6cVz_ytl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/91TXrIQ4zSuBi-uUEYacWQsTRTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c8585a-cdf7-4aa3-bc21-212acc4351ff/1/HzESD-Ild161MVLUkg6cVz_ytl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.234.0/24
Signature Algorithm: sha256WithRSAEncryption
85:92:df:4a:1b:cb:1c:d4:d6:eb:96:16:f7:9e:ec:6b:58:ca:
f8:b0:07:ab:41:aa:25:d0:5c:1e:51:04:01:52:b7:95:62:5a:
8d:e3:7b:b2:1f:3f:bf:22:c5:5f:de:63:c5:89:45:c9:8a:00:
f8:3f:64:4a:e7:73:b7:27:15:06:e7:b7:a4:94:cf:39:62:83:
4d:e7:13:4c:8e:e5:0e:b5:22:da:c2:fb:70:87:ab:f9:11:ae:
a3:51:39:06:dd:2e:e5:b5:cc:5f:3e:bf:65:61:00:34:d5:02:
13:9f:1e:f2:48:8a:29:b9:d5:1b:4c:c3:8b:a8:de:27:9e:d4:
0d:ba:9b:94:88:21:90:55:91:4d:e5:29:f5:2c:ac:9e:0d:14:
d5:83:6c:f6:ac:d1:d6:62:61:6b:b5:0e:6e:8d:f1:2d:6c:f1:
5b:f2:e2:7b:26:ba:26:fa:73:69:d0:c4:a5:63:0d:44:09:85:
b0:a0:f8:98:d7:99:ba:8c:6b:c1:92:4e:3e:df:c0:e7:3d:76:
ed:04:6d:7d:9b:75:41:95:f3:ec:a2:01:da:4c:f5:92:3f:d4:
10:c8:30:71:4f:3d:9b:6a:a3:2c:6f:fa:42:00:84:62:1d:fd:
30:84:c4:d0:30:f0:d1:f5:26:3d:94:99:d8:2a:5a:0e:79:da:
7b:b2:9c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:29 2024 by rpki-client on console-ams.rpki-client.org