Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/7ko_H33gFDqG9gkMdisrYMMGqa4.roa
File: 7ko_H33gFDqG9gkMdisrYMMGqa4.roa (raw, json)
Hash identifier: IaWcpswndzUkHAdGSiDr/E4leie07d40RJ2kWS6dxtk=
Subject key identifier: EE:4A:3F:1F:7D:E0:14:3A:86:F6:09:0C:76:2B:2B:60:C3:06:A9:AE
Certificate issuer: /CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Certificate serial: 01856D9D2832DBC86345DFFB0C1538690A25
Authority key identifier: B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/7ko_H33gFDqG9gkMdisrYMMGqa4.roa
Signing time: Sun 01 Jan 2023 13:54:53 +0000
ROA not before: Sun 01 Jan 2023 13:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8896
IP address blocks: 91.223.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:28:32:db:c8:63:45:df:fb:0c:15:38:69:0a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Validity
Not Before: Jan 1 13:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee4a3f1f7de0143a86f6090c762b2b60c306a9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:33:02:b1:2d:93:0a:3f:cb:39:b9:57:f2:f2:
a1:03:70:81:60:8e:d6:5a:e6:07:36:02:7a:be:a9:
54:34:8e:67:22:2a:98:35:49:5a:84:ed:54:c0:7f:
a2:c1:1c:f3:01:8f:eb:64:fc:58:c1:af:e9:f3:4d:
15:1f:59:1a:2d:ce:84:a9:92:bb:40:52:96:8c:82:
b1:fc:b7:af:53:58:a5:ac:77:27:b9:72:11:06:d7:
d1:9b:63:bf:db:af:57:69:63:de:ed:72:fe:6f:6d:
8e:57:c6:da:db:86:fa:d8:c7:ed:e7:89:00:1b:de:
8e:c8:7a:80:43:04:17:ce:d7:f0:30:f4:01:37:7e:
63:79:5e:4f:c9:80:ac:44:b5:f8:82:cd:ab:28:8d:
b3:4c:f1:1a:eb:06:9a:b9:e0:8c:36:87:0c:21:3f:
1d:3f:89:ae:45:7b:73:a5:29:98:8d:85:a0:e3:7c:
f5:7d:81:81:ad:a9:a3:90:ee:0c:65:eb:45:7d:f6:
ef:c3:97:2e:71:1c:13:6a:61:44:1e:ad:8d:bb:da:
fb:ef:99:b4:2a:8a:7a:91:09:b8:bd:82:31:e2:5b:
48:6e:0d:d3:b9:dd:fa:11:71:c5:75:6a:78:f0:a7:
41:72:d9:f9:46:95:0a:ad:02:95:e9:08:e2:73:b8:
86:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4A:3F:1F:7D:E0:14:3A:86:F6:09:0C:76:2B:2B:60:C3:06:A9:AE
X509v3 Authority Key Identifier:
keyid:B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/7ko_H33gFDqG9gkMdisrYMMGqa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.85.0/24
Signature Algorithm: sha256WithRSAEncryption
67:fd:d1:7a:1d:72:e3:00:40:5d:83:92:95:9d:cc:20:20:2c:
64:46:51:2b:8f:ec:fc:46:88:6b:ce:94:7a:33:0e:23:ac:3a:
30:93:1c:51:fb:64:6f:28:af:f2:a6:66:42:23:12:82:cc:fa:
3b:f8:35:e8:88:e0:01:96:10:66:3e:53:a0:1e:9a:8f:a0:b4:
3f:40:e2:0a:aa:76:17:b7:98:9b:a8:11:f4:58:1c:7b:81:dc:
7a:07:5e:87:f5:f6:c2:41:49:7a:e6:c4:0c:23:db:f3:81:ea:
ca:77:87:9b:64:b6:a0:a7:22:6e:83:c5:24:a3:77:e8:f7:0c:
e7:6f:89:5d:6e:57:cf:34:04:81:f9:68:57:a4:74:be:48:06:
b4:09:57:b6:cf:50:03:eb:62:82:ee:22:58:cd:55:17:de:fa:
37:ee:89:cb:9d:b3:12:12:d0:72:e8:14:aa:27:6a:93:af:04:
73:53:d7:1b:fb:70:0e:51:e0:cf:d6:12:14:18:3c:56:c8:d5:
ba:2e:d1:5b:fd:99:26:d9:37:e8:eb:35:f8:58:9c:13:fd:27:
27:db:53:e9:10:60:ed:17:d1:bd:d6:65:7e:6c:20:58:94:22:
6d:ff:f4:ab:80:2c:43:ce:37:6b:3d:c0:7c:53:55:d5:b7:34:
68:72:79:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:23 2024 by rpki-client on console-fra.rpki-client.org