Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/qKrz8v3uoUaBHR2V1wJJvg0vykY.roa
File: qKrz8v3uoUaBHR2V1wJJvg0vykY.roa (raw, json)
Hash identifier: +edEz+wLBNESNRETgdV6aelXhA1hAlQVgDJ2Y1NnWRY=
Subject key identifier: A8:AA:F3:F2:FD:EE:A1:46:81:1D:1D:95:D7:02:49:BE:0D:2F:CA:46
Certificate issuer: /CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Certificate serial: 0185723A04B29138C8A604F4A1F04A26B7A7
Authority key identifier: 7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/qKrz8v3uoUaBHR2V1wJJvg0vykY.roa
Signing time: Mon 02 Jan 2023 11:24:42 +0000
ROA not before: Mon 02 Jan 2023 11:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 91.236.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:04:b2:91:38:c8:a6:04:f4:a1:f0:4a:26:b7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Validity
Not Before: Jan 2 11:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8aaf3f2fdeea146811d1d95d70249be0d2fca46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:59:33:a4:4a:ee:b2:c2:ab:2d:e3:1b:1e:66:
ff:d4:9d:cd:a9:7b:ab:f0:72:9a:67:5c:16:bd:0f:
b8:07:ed:06:a8:13:4b:15:46:a2:c5:84:48:b3:8d:
33:42:87:79:23:b9:30:b0:7c:6a:f2:d5:e9:a2:8d:
91:64:0d:54:5c:58:a6:68:62:18:26:9e:88:66:2c:
0d:db:7d:18:98:03:0d:79:75:ac:78:51:8b:63:98:
23:7d:f4:98:f9:6f:55:2e:01:f8:bd:44:e4:fa:69:
ac:1e:54:64:cf:bb:67:6e:1c:65:86:be:3c:3d:56:
30:b5:ca:0b:4b:63:ab:3a:82:31:9d:35:5b:36:95:
d8:e0:95:bd:33:cf:58:86:b3:67:c4:1e:7b:41:04:
6d:55:d5:c7:ac:b0:17:08:f6:33:85:1c:3a:6b:8d:
8b:7f:12:da:ea:1d:b1:5b:88:66:af:bf:7c:ba:d2:
7f:9c:86:52:59:15:7d:40:04:b1:6c:72:aa:89:c5:
f2:11:83:f0:3a:0d:97:c4:05:13:6a:3d:a4:49:f4:
45:e1:2c:d2:bc:15:5b:f0:45:2e:24:59:1d:0a:66:
4f:9d:3f:64:f4:4c:3d:2f:82:91:38:f7:70:a3:cb:
f6:ce:18:ad:39:4e:8c:90:93:f9:e7:cb:eb:d7:43:
3b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AA:F3:F2:FD:EE:A1:46:81:1D:1D:95:D7:02:49:BE:0D:2F:CA:46
X509v3 Authority Key Identifier:
keyid:7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/qKrz8v3uoUaBHR2V1wJJvg0vykY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.18.0/24
Signature Algorithm: sha256WithRSAEncryption
87:4f:1d:bd:7f:9b:ca:8a:1a:2b:b0:a2:db:7a:77:cd:33:60:
4f:bf:50:f7:ab:9b:34:86:2c:35:0a:ae:76:39:cc:fe:f3:55:
90:8f:b7:eb:24:20:3b:9f:aa:80:19:53:84:38:33:00:40:49:
ed:2b:b5:6e:81:2f:e6:51:36:d9:e9:0a:65:30:65:3c:38:35:
5f:ed:be:e6:e0:52:5f:4f:f0:f8:f5:ee:82:1a:8a:73:01:c6:
5c:cc:f3:b9:8a:a4:06:2d:55:bc:cf:1f:44:10:29:6b:5f:fc:
52:cb:1e:c9:66:d3:17:2e:da:88:ed:38:b2:5a:43:36:f2:bb:
c1:f1:87:9c:d1:69:54:a0:80:6f:f1:1e:ff:fb:fd:d0:29:de:
21:ed:94:6c:d5:57:5d:1c:0c:2a:48:d9:37:76:a0:d5:6d:ed:
73:a1:3a:67:8e:40:89:96:bd:31:99:08:2e:5a:bc:7f:7a:0f:
84:cb:ee:9d:21:93:9d:cf:fb:9d:5e:03:dc:89:c1:62:11:cf:
61:0e:17:07:59:f4:7c:f9:49:9d:df:11:fc:bb:bc:46:e8:52:
8e:5a:bb:c0:57:84:f5:82:0c:e4:ba:37:cd:4e:99:81:95:2f:
d7:a6:c9:d5:09:43:c7:b3:1a:5c:34:c1:6f:89:3c:4f:31:e7:
da:35:1e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:19 2024 by rpki-client on console-fra.rpki-client.org