Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/7TksElYKGcI9Q_nSc55V-aqstuc.roa
File: 7TksElYKGcI9Q_nSc55V-aqstuc.roa (raw, json)
Hash identifier: 89Ab1S1LRQBbztYYRoaGkXFoyhC9KVniPuDew9HKUrE=
Subject key identifier: ED:39:2C:12:56:0A:19:C2:3D:43:F9:D2:73:9E:55:F9:AA:AC:B6:E7
Certificate issuer: /CN=bd175e878d33b47d806f2cf3e04628220935123d
Certificate serial: 01856F2FD571369A3AA7DDABB5AC587C1237
Authority key identifier: BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/7TksElYKGcI9Q_nSc55V-aqstuc.roa
Signing time: Sun 01 Jan 2023 21:14:43 +0000
ROA not before: Sun 01 Jan 2023 21:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44496
IP address blocks: 91.199.8.0/24 maxlen: 32
2001:67c:2f84::/48 maxlen: 128
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:d5:71:36:9a:3a:a7:dd:ab:b5:ac:58:7c:12:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd175e878d33b47d806f2cf3e04628220935123d
Validity
Not Before: Jan 1 21:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed392c12560a19c23d43f9d2739e55f9aaacb6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:37:ec:a4:ae:e4:93:e4:2c:00:0f:5c:b0:56:
e6:f1:3a:33:5e:c5:86:85:42:22:b1:ad:13:71:ea:
e7:26:36:e2:50:eb:fc:6d:17:43:ae:64:1d:1f:a0:
c6:2c:a0:76:6f:dc:fc:82:6b:9d:59:0b:b5:a6:b1:
41:65:1d:90:92:bc:82:84:bf:e3:e3:f8:ae:51:78:
d9:5b:b2:98:db:3a:3c:d2:99:c2:58:a3:33:c2:fc:
7f:18:9b:21:d6:aa:03:08:79:63:e4:6b:ea:a9:33:
45:33:be:8f:79:40:14:18:84:82:5f:e4:45:fc:92:
fe:2a:a5:5d:17:8a:f0:f5:b4:3a:11:65:4d:7f:5c:
ea:16:de:2a:3e:0a:1e:04:cc:8d:56:83:b6:6c:c6:
f5:4f:2e:c6:61:e7:b3:92:03:92:07:0d:16:4b:99:
c0:12:de:11:28:79:69:9b:ce:b2:3c:73:21:64:a6:
fa:da:78:bc:d8:17:8e:d9:7a:37:b0:30:42:5c:a3:
bf:89:5a:5b:23:30:99:4d:a1:82:1d:32:95:5f:11:
84:ad:c0:9c:09:fa:18:f3:6c:c4:e3:69:63:38:51:
ad:9a:53:61:94:4f:0c:d1:52:90:32:90:b3:68:95:
7f:5f:d8:13:85:bf:e2:bc:40:73:5b:64:00:a9:d2:
07:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:39:2C:12:56:0A:19:C2:3D:43:F9:D2:73:9E:55:F9:AA:AC:B6:E7
X509v3 Authority Key Identifier:
keyid:BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/7TksElYKGcI9Q_nSc55V-aqstuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.8.0/24
IPv6:
2001:67c:2f84::/48
Signature Algorithm: sha256WithRSAEncryption
96:93:8b:6f:80:eb:0c:36:40:a3:e3:e8:f8:98:c3:f5:72:4f:
bc:fe:37:a7:1e:72:4a:65:0e:8e:d3:9f:2e:90:04:b3:9d:98:
57:5b:68:51:95:48:fd:eb:10:5b:9f:42:d9:4e:0b:03:b4:22:
42:b4:69:55:18:12:51:ec:6f:83:a3:dd:59:e5:eb:28:b9:68:
69:0e:84:5b:fa:17:a8:e6:28:4e:f2:c6:7c:8e:3f:40:ef:04:
56:42:cd:d4:d0:18:f1:4f:9d:77:70:38:d0:71:54:09:60:2a:
a4:a4:9b:60:a7:ed:2f:1b:c5:14:13:ed:a3:7f:56:02:a8:3b:
91:7e:7b:20:66:d1:10:00:88:0a:51:3a:60:ca:a3:f0:ca:d5:
aa:9e:7e:7f:20:b4:44:2a:05:ec:c5:c8:85:94:9f:51:40:77:
3e:2d:4e:5f:be:87:07:cd:8a:a1:2d:51:19:62:a5:b7:d9:9f:
9e:0d:d5:0b:28:c5:b9:90:d9:d8:2d:7e:ca:30:3a:91:ee:2a:
66:40:83:30:2b:3b:73:6a:96:c1:ed:53:0d:e2:26:9b:02:51:
aa:4b:eb:54:7c:75:c9:25:d6:56:de:14:bd:49:1d:8f:f9:13:
6b:65:02:ca:81:90:a4:24:dd:2f:e5:86:26:82:e1:66:1a:f8:
c6:b0:b9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:34 2024 by rpki-client on console-fra.rpki-client.org