Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/d7VX0TgdqSN6WmrC5ZDgwVuKeQw.roa
File: d7VX0TgdqSN6WmrC5ZDgwVuKeQw.roa (raw, json)
Hash identifier: EDU/J8RX/vTirtlR1/i7Ybm2BKqUYQNnIp7q/lzqqaw=
Subject key identifier: 77:B5:57:D1:38:1D:A9:23:7A:5A:6A:C2:E5:90:E0:C1:5B:8A:79:0C
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018E9EEC3ABE6A61CC13C8E0A09AFA49D1C2
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/d7VX0TgdqSN6WmrC5ZDgwVuKeQw.roa
Signing time: Tue 02 Apr 2024 13:07:45 +0000
ROA not before: Tue 02 Apr 2024 13:07:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41957
IP address blocks: 91.242.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Apr 2024 19:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:ec:3a:be:6a:61:cc:13:c8:e0:a0:9a:fa:49:d1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 2 13:07:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77b557d1381da9237a5a6ac2e590e0c15b8a790c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:d8:f9:10:84:b2:f8:c6:8a:e0:a5:aa:43:
6b:16:ca:c4:2b:c5:ab:3c:74:ce:9c:51:76:1c:b5:
91:cc:43:c7:04:66:21:28:46:28:d8:a4:e8:4e:57:
05:89:b6:4f:3e:db:90:26:d1:78:ca:73:6e:a9:3c:
cd:82:81:d1:ed:2a:a6:11:1c:6d:0e:0d:6c:46:91:
6f:9d:b2:ec:24:a6:39:7f:c2:48:a4:be:2c:d8:d5:
f4:ae:0c:59:c3:9f:16:f4:cf:87:20:71:a4:01:af:
ce:ea:80:6b:fc:d3:32:2c:3c:95:15:4a:b7:bd:82:
7c:b4:f6:2a:ff:2f:ec:e0:59:78:f2:15:f6:d4:8e:
03:6a:9b:ef:58:63:c5:dd:46:0a:22:05:05:ab:e9:
08:13:74:b8:1e:c9:6c:94:e4:f2:63:df:61:80:ea:
3f:b2:b9:61:92:f3:58:16:de:ae:f1:b6:d8:e1:ea:
f7:01:54:1d:e0:85:42:38:cb:a0:83:6e:f7:e0:81:
e5:a7:89:46:1c:01:a6:4e:b2:11:01:eb:c6:50:76:
9c:71:01:24:da:92:12:fd:a7:da:66:cc:72:92:de:
4a:20:1c:d7:a8:a6:8c:05:e2:04:87:69:7a:ae:4c:
58:0f:c1:93:f3:fc:a3:82:0d:84:c7:44:76:f5:7e:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B5:57:D1:38:1D:A9:23:7A:5A:6A:C2:E5:90:E0:C1:5B:8A:79:0C
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/d7VX0TgdqSN6WmrC5ZDgwVuKeQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.254.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:be:f6:67:87:7c:8a:ac:5c:2d:9e:0e:8f:9d:d3:98:47:26:
b7:c4:5b:b1:c0:18:f5:25:0a:36:03:53:8d:c4:44:72:44:8d:
6f:ce:66:c1:21:35:b7:bd:f5:2b:2a:34:68:63:ab:27:4e:e7:
2d:a8:c5:e5:ae:47:1e:c4:35:8f:55:04:99:65:87:51:03:6a:
85:11:4d:37:3a:bb:4e:3f:be:41:bd:d5:db:cd:05:3b:b1:73:
6a:4b:8c:60:5c:8f:06:63:65:d4:b6:67:ac:55:f3:21:cf:41:
a1:9d:f4:57:3e:2e:23:c7:fd:c4:12:a2:fb:49:f2:f9:ea:a5:
fb:da:75:cd:43:e7:8e:5c:35:d6:8c:c0:1d:88:c5:d7:d8:66:
c9:2e:d0:93:59:da:5f:eb:8a:00:47:ec:fa:3b:43:af:a2:27:
88:05:a2:eb:6b:e1:b8:78:ee:b9:35:2c:f2:de:c4:53:ce:a9:
d5:62:e7:54:4c:03:56:32:85:48:59:c8:c2:ec:03:66:be:ba:
28:0e:e6:82:c4:8f:88:13:0a:14:16:e4:ec:25:bc:31:0e:8e:
aa:fd:42:89:ba:76:69:7f:c4:29:d3:3f:70:78:e9:4d:f3:73:
db:6c:4f:79:ea:d2:6e:24:e0:67:b6:02:bd:c7:a1:83:6b:d4:
d1:6f:2c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 00:02:27 2024 by rpki-client on console-fra.rpki-client.org