Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/IQndrluoEd2XpYM3HZQ0mHTt3O4.roa
File: IQndrluoEd2XpYM3HZQ0mHTt3O4.roa (raw, json)
Hash identifier: CuAa+aFjVdwyD6v9LMNTL/fPmRZ1iwVMDugHcTGHtTk=
Subject key identifier: 21:09:DD:AE:5B:A8:11:DD:97:A5:83:37:1D:94:34:98:74:ED:DC:EE
Certificate issuer: /CN=53296ee33153ef6e6938d57a2a132c1e526dc430
Certificate serial: 018571D7C72E4910488FD3FB724DD2753934
Authority key identifier: 53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/IQndrluoEd2XpYM3HZQ0mHTt3O4.roa
Signing time: Mon 02 Jan 2023 09:37:24 +0000
ROA not before: Mon 02 Jan 2023 09:37:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197202
IP address blocks: 91.223.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:c7:2e:49:10:48:8f:d3:fb:72:4d:d2:75:39:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53296ee33153ef6e6938d57a2a132c1e526dc430
Validity
Not Before: Jan 2 09:37:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2109ddae5ba811dd97a583371d94349874eddcee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:3b:29:75:ac:03:cc:02:6e:25:a4:b7:fb:
af:f5:08:90:9f:f9:63:ef:75:fb:6c:42:e9:b3:27:
39:e9:00:72:8a:6b:cb:c8:c9:c8:a7:52:8d:77:df:
08:c5:95:a4:b8:f5:90:11:33:30:26:3e:d9:76:b6:
2e:74:c1:e8:1f:38:69:d4:6d:5d:c6:ec:d3:e9:cb:
c4:d0:28:6d:a2:19:90:ca:7b:ad:3e:78:04:22:93:
2d:88:e2:93:c1:a5:a5:b6:2b:ee:f0:e0:f3:d0:42:
7f:04:5a:8c:a7:1c:7c:ca:9d:39:c4:2e:94:f2:97:
7b:91:97:82:0a:61:02:6c:d4:74:f8:9f:bd:c3:6b:
a2:57:f4:06:5e:fe:f5:06:7a:78:ba:d1:a3:65:fd:
c1:fa:dd:f2:0a:67:91:4f:43:06:bd:d3:ee:00:2b:
f9:73:98:ff:71:d7:ac:98:f3:25:b5:d8:74:71:5f:
c6:17:a5:a5:9a:94:c4:ca:c1:36:af:c7:7b:4f:48:
9d:8c:8a:bd:60:64:27:26:33:ee:d1:ba:8a:9e:6e:
13:d1:b8:d6:ea:c5:66:97:53:7c:ae:7e:8c:c7:ec:
0e:3b:26:fc:92:b7:f4:af:79:54:df:ad:97:4b:28:
17:08:09:0d:5e:1e:9d:6f:01:70:4d:c5:29:52:4e:
0a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:09:DD:AE:5B:A8:11:DD:97:A5:83:37:1D:94:34:98:74:ED:DC:EE
X509v3 Authority Key Identifier:
keyid:53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/IQndrluoEd2XpYM3HZQ0mHTt3O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.79.0/24
Signature Algorithm: sha256WithRSAEncryption
95:1d:99:2f:0e:ad:17:be:30:1b:5a:8f:46:7f:e8:a6:83:2f:
36:cb:b7:a7:8d:96:b5:70:08:a2:09:05:1a:a6:ac:9e:ef:f7:
eb:24:3f:e1:a5:92:4b:28:e8:be:ae:d7:39:a2:21:4b:41:c3:
d4:d6:cf:f5:0e:39:0d:0f:48:60:39:4d:02:2f:62:36:3e:2d:
37:a8:41:19:8a:f9:47:79:ef:55:ce:91:79:6d:42:d2:0e:e4:
09:d3:1b:ab:b1:35:e8:bc:a3:0e:8f:af:cb:69:40:4e:dd:eb:
3e:a1:f4:95:46:2b:5a:aa:1e:88:38:61:be:2e:e9:fc:8b:19:
af:ce:68:5e:ae:52:0e:8c:5e:d9:61:49:b7:59:f8:22:55:dd:
cb:8e:c0:4c:19:d4:a1:99:5e:8e:40:f5:2e:6b:20:80:bb:ea:
8c:5a:08:20:c5:ca:80:66:a8:58:c4:6f:f1:db:fc:2d:ed:16:
14:1f:ff:82:cf:68:65:0e:7e:e0:8c:66:08:fa:e7:b0:12:c2:
04:09:52:cb:95:15:61:a6:d2:a4:51:f1:dd:c9:8e:75:bc:70:
17:52:ba:65:73:ac:ca:87:5e:e4:9c:0c:cb:6f:33:71:2d:14:
f6:ad:80:ef:cc:98:35:2a:e6:1e:ca:42:ca:b7:5a:f1:4a:29:
a8:39:d2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:53 2024 by rpki-client on console-fra.rpki-client.org