Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/ByjnFbHLHBalTObbLXPMwsiNb_o.roa
File: ByjnFbHLHBalTObbLXPMwsiNb_o.roa (raw, json)
Hash identifier: qXOHO2QVdNVhYmpn4IeKqWMGOImp8rTP9OeqmWdb6+E=
Subject key identifier: 07:28:E7:15:B1:CB:1C:16:A5:4C:E6:DB:2D:73:CC:C2:C8:8D:6F:FA
Certificate issuer: /CN=602d570b542e7302885d367418df802f99494f26
Certificate serial: 018CC348ADE0E0418534463251277B55D5B8
Authority key identifier: 60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/ByjnFbHLHBalTObbLXPMwsiNb_o.roa
Signing time: Mon 01 Jan 2024 04:29:29 +0000
ROA not before: Mon 01 Jan 2024 04:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216131
IP address blocks: 91.223.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ad:e0:e0:41:85:34:46:32:51:27:7b:55:d5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602d570b542e7302885d367418df802f99494f26
Validity
Not Before: Jan 1 04:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0728e715b1cb1c16a54ce6db2d73ccc2c88d6ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:2d:17:5f:47:d6:79:7f:23:ef:ab:3d:05:
d8:99:41:04:37:06:76:38:ad:e7:ac:1d:0e:b0:dd:
5b:79:8c:fe:bb:e9:e0:d1:b2:7b:3d:58:86:07:e5:
a6:c3:26:73:15:4d:e7:62:3f:93:25:70:2d:de:fb:
cc:38:bc:df:b2:56:ba:35:a5:cd:f5:81:9a:17:ae:
f4:ae:fc:f5:29:5d:ae:4f:33:64:0d:2f:84:22:50:
49:23:a2:d3:97:a5:34:2f:34:13:19:d8:bd:27:79:
fc:b9:27:28:8c:4e:92:6b:23:bd:b7:6d:58:ac:c7:
5c:cb:f3:d8:34:58:f3:1d:48:c2:44:60:8e:60:90:
53:66:3d:18:75:3a:77:09:3d:a2:eb:ec:95:13:c0:
58:46:e1:c1:a4:35:52:9f:e4:06:92:00:b9:72:62:
6c:6c:20:6f:2c:61:45:97:28:76:51:69:47:c0:93:
32:80:a3:11:1b:3d:c2:5b:60:f3:e0:e8:19:0f:47:
b9:55:64:b8:5c:ef:48:c1:83:72:f6:dc:79:51:a0:
f4:28:5f:9c:ea:4e:0b:df:2b:15:37:65:b8:5a:2c:
0c:d9:a0:24:e3:38:f4:ae:70:bc:6a:f7:b5:8f:6b:
8a:03:a3:25:ea:24:f3:2d:27:c5:65:0e:6c:ae:94:
8d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:28:E7:15:B1:CB:1C:16:A5:4C:E6:DB:2D:73:CC:C2:C8:8D:6F:FA
X509v3 Authority Key Identifier:
keyid:60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/ByjnFbHLHBalTObbLXPMwsiNb_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.116.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:26:2f:a9:88:38:c3:d4:4f:e5:42:1f:07:3f:24:de:e1:e1:
2a:1a:1f:7f:e4:3d:e0:ca:2a:8f:7f:fe:a5:34:aa:7b:45:94:
d4:fb:5c:d0:5e:bb:e3:68:e7:c2:1a:08:10:b1:df:b0:67:16:
3d:33:00:59:e7:0a:26:43:60:13:2f:8b:bc:15:dc:f5:ce:d6:
55:e2:93:44:3a:bb:b2:e8:b8:e0:6e:fb:da:e9:c8:71:07:e0:
2c:58:09:a7:85:49:2d:2a:3b:07:be:61:ab:c4:94:cf:14:42:
0e:ad:32:d4:22:6b:9c:a6:4c:43:f1:4b:3f:75:84:e1:02:fd:
b1:33:19:ef:1a:18:59:cd:27:b9:43:17:d5:4a:b2:b1:6f:52:
6c:3e:d3:12:69:c0:ae:2a:f5:53:47:56:4f:07:36:18:4d:a2:
74:b3:a6:39:a4:f4:fd:62:08:2c:ad:85:07:6f:a9:18:8a:1b:
ac:d7:48:66:0e:44:96:8b:5c:81:b2:a7:7f:55:ea:18:63:ce:
b8:ce:88:fc:f3:21:71:37:2b:51:99:f5:b4:7b:b8:b4:df:a1:
c5:a7:10:97:23:e8:d6:49:4b:4e:84:a9:08:5c:ac:79:23:7c:
dc:e2:c2:ac:7a:8d:f6:67:e8:b9:f9:61:8e:ef:96:65:34:4f:
00:2c:6c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:10 2025 by rpki-client