Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/D-jZ7nyP8Qxz9XGp1PIy26pCfM4.roa
File: D-jZ7nyP8Qxz9XGp1PIy26pCfM4.roa (raw, json)
Hash identifier: lBh8rsSDNz4GXvPuB2nitO7kgi1UWU4ltTxCIDSuo9Y=
Subject key identifier: 0F:E8:D9:EE:7C:8F:F1:0C:73:F5:71:A9:D4:F2:32:DB:AA:42:7C:CE
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 018A08FD7B44628A308C78D7BDB1842D0349
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/D-jZ7nyP8Qxz9XGp1PIy26pCfM4.roa
Signing time: Fri 18 Aug 2023 14:12:24 +0000
ROA not before: Fri 18 Aug 2023 14:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13008
IP address blocks: 91.235.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:08:fd:7b:44:62:8a:30:8c:78:d7:bd:b1:84:2d:03:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: Aug 18 14:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fe8d9ee7c8ff10c73f571a9d4f232dbaa427cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a9:5c:26:c0:f6:7e:ce:8d:07:03:7d:e6:3d:
6e:14:a8:1f:0d:af:76:d4:33:e2:73:8f:ff:ea:47:
13:ea:d1:ad:22:ff:a3:f7:67:5f:4d:5b:f1:95:65:
59:71:90:a3:d5:c0:39:58:76:3c:b5:50:56:ec:90:
6c:d5:d7:8a:fa:e2:cc:2d:f9:9d:7c:67:27:af:26:
fe:3f:6d:51:9f:c5:25:25:6a:57:b7:fa:bf:cf:59:
ab:d1:79:88:83:e5:2a:16:d5:26:a6:64:c0:d7:6f:
f6:f7:46:07:4b:87:5a:91:24:53:4c:ca:cf:db:1f:
7c:6d:12:a8:95:0e:b0:86:f4:46:9e:58:c3:5b:72:
af:fe:20:01:61:02:ef:2e:8e:23:3f:09:7d:9a:20:
e8:d9:af:fb:b0:6f:c8:56:17:2a:47:1e:3b:37:ee:
44:48:ea:03:f3:38:c2:ca:4b:45:4c:97:39:06:df:
8a:82:8a:2b:5f:31:62:75:1a:98:2b:f9:dc:65:dd:
cc:1a:76:02:ea:0a:45:7b:68:0e:79:2e:f1:12:b6:
d9:26:43:87:ed:73:2c:28:68:5b:19:09:84:bc:59:
eb:54:b7:fe:f3:a2:81:6d:a8:b6:b4:9c:90:f4:7b:
e0:53:cf:09:fe:1b:23:88:aa:74:c2:23:fe:e4:c8:
a4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E8:D9:EE:7C:8F:F1:0C:73:F5:71:A9:D4:F2:32:DB:AA:42:7C:CE
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/D-jZ7nyP8Qxz9XGp1PIy26pCfM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.119.0/24
Signature Algorithm: sha256WithRSAEncryption
04:ea:e5:bd:67:42:17:91:c9:0d:c6:2f:81:4f:27:1e:95:bf:
1d:35:bc:e3:d0:8e:f0:5c:9b:fe:56:0a:a8:fa:f6:d7:9d:55:
f3:e1:73:0f:14:d9:b4:84:1d:46:2a:47:7e:ab:63:da:98:17:
0d:25:71:d8:60:92:de:43:fd:a1:0a:cf:4b:28:9f:a2:30:9c:
4f:fe:1c:97:41:6c:eb:d3:b5:c7:ea:2d:ef:8a:99:62:29:7b:
60:5f:05:41:7a:80:42:41:cf:69:8b:6a:48:ca:09:ee:13:98:
d0:9e:00:91:87:40:1b:d6:d1:23:28:50:ec:d3:67:df:14:9c:
4b:ab:16:1a:dc:26:68:c4:e0:b4:dc:bd:60:a2:1d:f1:16:b9:
cd:d3:a8:a4:57:79:f8:ca:b2:de:0e:ae:53:ad:05:97:12:b4:
a8:93:23:97:39:78:bc:20:1b:9b:38:34:48:85:66:59:bb:5c:
37:da:b8:94:63:28:6e:47:d8:b4:4a:3d:b0:8d:cd:16:f4:e9:
31:f5:b8:33:52:20:cc:40:92:e1:5d:66:0b:92:2d:f5:72:a1:
c8:ad:d8:7a:2e:d3:3f:3b:64:eb:8d:76:3f:fb:e2:8d:91:bb:
8f:e8:ec:21:62:83:83:08:05:c5:48:3c:b2:a0:de:4e:4e:a0:
cf:37:e0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:03 2024 by rpki-client on console-ams.rpki-client.org