Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/jQ0Wu4Dt7lZYnKIFF9hitm7Bx7E.roa
File: jQ0Wu4Dt7lZYnKIFF9hitm7Bx7E.roa (raw, json)
Hash identifier: YwWr+pQYyuYtsCdKtJdzzmVOelauQWKvj4b6uvoo3+k=
Subject key identifier: 8D:0D:16:BB:80:ED:EE:56:58:9C:A2:05:17:D8:62:B6:6E:C1:C7:B1
Certificate issuer: /CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Certificate serial: 0185737AB08598FF49D1797DC179072F8C11
Authority key identifier: 9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/jQ0Wu4Dt7lZYnKIFF9hitm7Bx7E.roa
Signing time: Mon 02 Jan 2023 17:14:58 +0000
ROA not before: Mon 02 Jan 2023 17:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56432
IP address blocks: 91.223.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:b0:85:98:ff:49:d1:79:7d:c1:79:07:2f:8c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Validity
Not Before: Jan 2 17:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d0d16bb80edee56589ca20517d862b66ec1c7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:48:f5:57:e0:67:f7:a2:3f:6d:c1:e5:44:fc:
76:35:c1:e4:b4:0f:7c:b1:10:5f:c4:02:93:de:73:
0c:cd:41:11:b1:c5:e6:88:20:14:13:da:2f:13:06:
39:c2:c4:31:21:ff:45:02:71:0b:4c:c5:e9:60:4d:
62:79:3d:30:4b:fb:ad:f3:92:ac:9b:1c:6e:e6:45:
e7:a9:e9:7b:fe:b7:4c:d7:27:35:33:c2:26:50:d7:
92:3c:14:2b:17:37:cf:08:f3:a2:8c:b3:a2:95:eb:
8f:da:03:3e:4d:8f:c6:9b:7d:f7:a0:c5:a1:f1:70:
00:cc:62:07:3d:17:2c:49:c4:15:27:09:b4:a8:fc:
3f:8a:f8:ab:30:c1:0b:cc:69:93:7d:b4:03:c8:c0:
49:8d:6e:06:9f:36:b4:cc:e2:89:65:dd:cf:47:9d:
57:4f:b4:24:8c:a9:e1:4b:3b:a7:06:ca:51:b0:8c:
a2:c5:7c:6d:84:81:46:b7:03:7e:d7:be:b4:a8:bf:
05:7f:99:18:8a:31:1e:b0:8b:b8:c2:9d:39:6b:a8:
e4:23:ca:b9:e5:f6:f3:27:bf:60:be:eb:3e:5e:54:
9b:a1:b5:c4:8d:2b:b0:25:b9:fe:52:12:68:29:5d:
38:87:1c:7a:eb:3c:0f:b8:ee:16:69:ce:25:d4:11:
5a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0D:16:BB:80:ED:EE:56:58:9C:A2:05:17:D8:62:B6:6E:C1:C7:B1
X509v3 Authority Key Identifier:
keyid:9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/jQ0Wu4Dt7lZYnKIFF9hitm7Bx7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.148.0/24
Signature Algorithm: sha256WithRSAEncryption
83:d2:8b:8b:c8:5c:e4:d6:97:93:35:5d:78:f3:05:47:3e:ce:
4d:06:5d:a4:a8:52:b8:55:00:17:0e:5f:2b:1f:7b:cd:6a:6a:
e2:44:dc:68:27:86:24:40:9a:c5:e4:6f:d5:f4:02:49:93:e2:
8d:ae:09:b8:4b:00:69:34:77:af:9c:d6:6a:3e:3f:cd:74:fa:
f9:ff:f1:12:5c:9f:58:dd:cb:65:7e:c1:df:cb:23:1e:54:15:
71:6c:70:39:14:67:a1:a3:97:27:82:42:40:3e:a3:e4:77:f0:
59:1f:45:58:38:ae:e3:7e:76:ff:e5:64:27:b0:64:86:dd:46:
5f:fc:8d:a2:fe:87:b0:57:4e:2c:68:62:10:56:49:49:53:fa:
d2:d8:7e:14:6f:ee:d4:1e:a7:d4:27:69:27:c6:1c:f1:7d:fa:
01:a9:07:98:c9:13:29:83:8e:ce:f8:f5:61:bb:a8:f0:a1:20:
1b:6b:f8:ac:2a:39:45:4e:03:20:a7:c5:02:c7:5c:ae:f2:37:
60:c8:e2:70:96:1c:b0:cc:fb:65:e8:01:13:11:f7:d9:04:22:
35:8d:57:e3:6f:9c:9b:2e:1f:0b:c4:06:0a:90:e6:b9:bb:18:
5d:39:bc:c0:7d:3c:94:6b:ab:9a:a2:69:30:fc:68:95:6f:91:
38:34:63:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:43 2024 by rpki-client on console-fra.rpki-client.org