Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/Q19CJnfAxgu7Z2hqML21HtpQ1FY.roa
File: Q19CJnfAxgu7Z2hqML21HtpQ1FY.roa (raw, json)
Hash identifier: DP+5sIwPNUUFJGJV9+zb+VVCAYcm+Nf4PGLbrLnXeEA=
Subject key identifier: 43:5F:42:26:77:C0:C6:0B:BB:67:68:6A:30:BD:B5:1E:DA:50:D4:56
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 018AADDBAF11DB8BAE030902B7A6299B3753
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/Q19CJnfAxgu7Z2hqML21HtpQ1FY.roa
Signing time: Tue 19 Sep 2023 14:32:50 +0000
ROA not before: Tue 19 Sep 2023 14:32:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49379
IP address blocks: 91.212.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:db:af:11:db:8b:ae:03:09:02:b7:a6:29:9b:37:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: Sep 19 14:32:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=435f422677c0c60bbb67686a30bdb51eda50d456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:c0:3e:4d:d1:44:2b:42:e0:2b:df:75:bb:
ac:2f:80:76:4a:f3:49:89:c6:c2:15:8d:d9:63:cd:
e6:05:a9:08:51:8a:50:12:89:a3:14:86:2d:5a:88:
35:3d:e2:48:83:49:8f:12:05:b6:99:f7:f8:e5:7a:
c7:22:5b:8a:3d:f1:fb:e4:07:ec:f4:85:80:d0:6f:
1f:14:7e:68:a3:35:fc:88:4d:73:e1:03:88:29:e6:
76:cd:7a:f1:f7:a7:90:81:0a:02:07:bb:c9:d1:19:
1f:32:10:f3:bd:35:95:12:7b:bc:4c:ab:fd:b9:22:
78:2c:34:65:e5:76:f3:41:d3:d3:16:b2:9d:60:22:
af:30:3f:e0:b3:e3:48:48:16:41:b8:f9:d4:be:cc:
50:4d:54:b2:0e:d8:f3:98:36:fb:76:82:11:ee:51:
42:de:6a:e7:b0:3b:9c:bb:81:88:54:9e:44:f7:04:
f9:e7:6d:d1:e6:9e:62:67:aa:c1:65:be:db:26:7c:
6a:9f:80:76:b1:35:55:58:5b:e3:02:23:c1:88:85:
d0:65:8e:66:7c:b8:32:91:b6:9d:63:b8:a2:f9:04:
38:58:59:42:15:31:a2:e4:5a:33:27:9b:05:5e:3e:
7e:de:f9:98:15:56:3e:6b:6d:d4:39:5b:46:c7:ea:
7b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5F:42:26:77:C0:C6:0B:BB:67:68:6A:30:BD:B5:1E:DA:50:D4:56
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/Q19CJnfAxgu7Z2hqML21HtpQ1FY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.227.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:28:44:a6:da:80:05:79:1d:cc:3f:99:68:75:b0:f1:0e:7e:
c0:84:77:55:d0:26:0d:1b:39:4d:20:c5:63:e0:1a:1e:3e:4f:
a6:be:8c:9d:07:99:b3:11:36:8b:c0:e0:4a:a7:0e:61:f4:60:
e3:4c:90:d0:87:23:aa:92:b3:31:69:cd:94:ed:97:6c:4b:6e:
70:9b:fd:10:ce:29:d3:11:43:f1:01:82:8a:5a:d5:8b:7e:ea:
50:fc:20:95:06:cf:5e:0b:41:d3:4d:5c:ce:d2:54:66:b9:95:
ea:f4:a1:94:4f:17:a1:71:99:ce:1c:af:13:f6:db:73:2c:9e:
84:1c:c3:5f:9e:7c:26:13:90:1e:86:81:c9:60:84:75:ba:32:
19:c1:1e:b0:5b:e9:ec:cd:2f:e7:52:0c:86:42:b0:5d:aa:f1:
bf:50:b5:eb:a7:86:dc:5e:e9:9b:5c:53:66:13:31:7f:ec:6b:
da:ea:ae:f7:0f:f7:6d:df:11:ec:de:b6:16:c9:9a:f5:99:70:
b7:da:c4:68:f7:98:5a:89:51:f2:a6:df:a7:67:48:04:dd:d0:
05:de:f8:a4:b0:48:91:6f:1e:ee:fb:eb:4b:a7:81:5f:2e:99:
b2:8c:e1:5c:00:b3:1b:32:6b:c4:a5:6c:d4:48:4a:75:50:d8:
94:69:53:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:38 2024 by rpki-client on console-ams.rpki-client.org