Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/gjEf9_liVrRnSlw5s7bOobCibOQ.roa
File: gjEf9_liVrRnSlw5s7bOobCibOQ.roa (raw, json)
Hash identifier: lKPRQvmUBwjGf9oLX3LszxjcfyOKQuoLoTa9eAp5yEw=
Subject key identifier: 82:31:1F:F7:F9:62:56:B4:67:4A:5C:39:B3:B6:CE:A1:B0:A2:6C:E4
Certificate issuer: /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial: 018964C054B80B479BAE5D7B0BA5115598EC
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/gjEf9_liVrRnSlw5s7bOobCibOQ.roa
Signing time: Mon 17 Jul 2023 16:47:53 +0000
ROA not before: Mon 17 Jul 2023 16:47:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 91.210.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:54:b8:0b:47:9b:ae:5d:7b:0b:a5:11:55:98:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Validity
Not Before: Jul 17 16:47:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82311ff7f96256b4674a5c39b3b6cea1b0a26ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e4:54:b0:7c:1c:15:6b:22:18:17:1f:10:60:
1c:e4:04:fb:4f:28:1f:54:d1:38:a2:09:0d:4c:81:
e6:9d:fc:f2:22:4e:5a:b1:af:1d:5c:51:b1:df:5b:
32:19:de:bb:2c:11:b7:ef:a4:26:fb:dd:19:ca:9a:
04:d4:8f:11:c9:34:e1:f6:d3:60:a9:c4:fc:06:d0:
17:8f:e2:3d:5c:e1:ca:cd:3f:35:b9:b1:6f:88:7e:
e9:76:c0:60:a3:6f:93:bd:1b:a4:56:92:c3:67:a5:
a6:e4:d7:aa:a4:d5:58:c9:ec:33:a5:ec:7c:48:35:
84:5e:ab:7c:8c:7e:cd:90:e4:f5:14:05:8a:74:c3:
ad:a9:e9:ca:c5:b3:df:df:d2:b9:14:13:c1:a0:3c:
ca:d7:c2:cb:b4:08:b6:1c:c9:2c:31:55:48:79:7b:
d8:ec:d1:c1:80:3e:a6:a4:d9:a7:5e:f8:73:7b:a4:
4d:f3:a3:23:a3:06:c9:3d:cf:d5:9d:24:c9:56:1f:
a3:f0:a5:37:d7:87:95:5e:d4:01:b5:af:f5:79:36:
8f:ac:10:2c:b1:40:71:33:9f:01:9b:d9:bf:cd:a3:
2f:f3:31:de:c0:a6:98:03:a9:e4:e7:6d:37:fa:03:
53:76:5f:52:45:fc:f8:58:fc:39:d9:2f:1c:7c:1d:
9f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:31:1F:F7:F9:62:56:B4:67:4A:5C:39:B3:B6:CE:A1:B0:A2:6C:E4
X509v3 Authority Key Identifier:
keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/gjEf9_liVrRnSlw5s7bOobCibOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.71.0/24
Signature Algorithm: sha256WithRSAEncryption
02:f7:8c:63:4f:52:d9:ee:de:43:b7:87:3e:42:8e:f0:93:8e:
20:84:a3:2e:01:b9:91:9e:82:bd:65:8b:3d:98:66:2e:ae:84:
00:c4:59:a0:56:c7:53:32:b9:8b:dc:59:06:c2:6d:03:9b:6f:
fd:2e:be:fe:ca:5e:5e:f8:b6:ad:2b:9e:30:e2:b1:0d:9e:f8:
ef:64:0c:c0:3a:e2:c2:1f:64:c4:54:d9:09:f7:87:02:03:08:
2d:c0:32:81:51:0c:08:49:2e:36:c4:1e:6d:94:04:c8:4f:4d:
a3:af:35:61:09:b4:26:eb:70:b2:92:38:ba:4e:01:42:b4:b4:
8b:ad:1a:47:f9:11:f9:bb:0a:5a:ed:1c:ee:a3:2a:b3:77:d4:
f8:52:e8:54:12:cd:df:a6:bb:16:34:6e:d0:9b:da:2d:5d:b7:
40:92:59:4d:d5:02:40:85:ea:25:06:91:e0:52:7c:3e:cd:a7:
34:1d:31:6b:0b:d4:34:19:cd:53:2c:fc:2d:5d:c8:6f:af:38:
88:de:12:0b:5e:28:1b:75:5d:8f:5e:d9:eb:d7:5a:fc:b9:0b:
db:d1:95:a8:10:36:56:49:6d:e0:c7:a5:da:c2:27:a3:65:74:
f8:71:b9:c8:b9:c2:77:82:70:e6:de:2d:4d:2d:3e:09:94:bc:
00:58:48:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:18 2024 by rpki-client on console-ams.rpki-client.org