Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/8bRy_bnpZ0NCIPt-2b3yhpjOPWQ.roa
File: 8bRy_bnpZ0NCIPt-2b3yhpjOPWQ.roa (raw, json)
Hash identifier: MLvUXfGo/teh/JlikBT9K+b4jDF7/dlFg8iGJ0TIZQs=
Subject key identifier: F1:B4:72:FD:B9:E9:67:43:42:20:FB:7E:D9:BD:F2:86:98:CE:3D:64
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CCA2A756FF83E6554EDF7C393FBD87F15
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/8bRy_bnpZ0NCIPt-2b3yhpjOPWQ.roa
Signing time: Tue 02 Jan 2024 12:33:49 +0000
ROA not before: Tue 02 Jan 2024 12:33:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200296
IP address blocks: 91.247.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jan 2024 12:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:75:6f:f8:3e:65:54:ed:f7:c3:93:fb:d8:7f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:33:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1b472fdb9e967434220fb7ed9bdf28698ce3d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:65:63:52:b2:c5:65:90:e5:d2:1b:c1:11:97:
df:68:e2:38:04:0a:96:ae:c6:18:df:0d:ae:7b:80:
dc:c7:6c:ed:9c:e6:94:d1:ac:35:35:5a:74:25:bf:
b2:7c:79:f3:c8:0c:dc:0f:6d:51:f4:3c:7d:32:36:
b7:f1:95:cc:27:5d:41:a1:6f:87:70:79:09:59:0b:
02:93:b3:df:82:89:54:8f:55:3d:88:0a:91:25:93:
d9:9e:df:49:41:dd:2b:3f:28:6e:5a:1e:9a:d1:43:
ae:37:d2:d8:b3:db:01:3f:7a:c9:27:77:93:39:b3:
07:95:1c:34:37:ea:1a:c0:b6:de:bf:dd:bc:5c:34:
63:3a:03:8b:54:cd:0f:ea:2f:30:ff:b8:6e:84:d7:
7a:68:cf:3a:9c:3a:0b:bd:c4:43:ac:19:27:8a:d2:
ed:43:17:72:57:54:59:7f:c4:1a:5f:c4:09:34:23:
68:2f:51:42:6b:83:3c:11:dc:7a:ab:41:44:8c:06:
f0:57:b8:73:0e:4a:63:19:58:ea:36:c4:cf:84:e7:
3d:2a:94:56:1a:81:93:25:b5:09:68:39:75:c5:8c:
d0:ef:24:90:84:1d:76:79:08:42:9e:f6:0c:ee:6f:
e7:e6:d5:24:7e:05:db:0c:9d:07:cc:c1:3f:1e:67:
9f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B4:72:FD:B9:E9:67:43:42:20:FB:7E:D9:BD:F2:86:98:CE:3D:64
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/8bRy_bnpZ0NCIPt-2b3yhpjOPWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.177.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:52:2a:8b:23:7a:91:29:0f:3a:94:aa:15:3a:a1:57:12:26:
8c:11:e2:f9:e9:9d:ae:a9:d2:58:61:01:28:d3:5b:8c:a6:d9:
d1:8e:17:d2:25:c6:18:27:4c:54:08:3f:88:6b:bc:89:9f:90:
e0:1c:d4:5e:d9:85:a9:11:b5:be:46:43:d0:7e:59:24:0b:d3:
e9:ec:1f:af:2b:cf:16:af:26:f2:87:f2:c1:70:e4:87:b2:f0:
07:74:5a:49:d7:80:ef:3d:4c:f8:1b:18:47:39:e6:2a:68:1d:
d5:4f:dc:71:dc:95:db:1b:ab:f4:c9:3b:42:f0:fe:84:76:8e:
eb:76:c2:79:ee:02:e9:f9:eb:ae:41:8e:86:2d:35:63:a4:e5:
80:28:05:2d:92:7b:3e:63:01:a7:3a:04:a5:5f:b8:a5:ad:6a:
dd:f2:f0:59:ba:21:d5:a0:b7:a6:52:d3:4e:58:a8:0c:93:85:
44:c8:40:66:5a:44:e5:45:6b:d3:e5:39:a8:6d:96:c5:a7:10:
80:8a:25:72:dc:b7:2d:44:23:f6:86:98:28:89:91:57:1a:2f:
9a:18:9f:e1:f7:92:80:74:8d:5c:c9:18:c1:0c:dd:a2:8f:4f:
fe:9e:6d:2d:45:9f:07:ab:f7:4d:a7:82:be:0f:11:75:3d:c5:
fd:d4:ad:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 7 13:01:03 2024 by rpki-client on console-fra.rpki-client.org