Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/7FoDudGTOvPcGpjz3uCZNr7kWAw.roa
File: 7FoDudGTOvPcGpjz3uCZNr7kWAw.roa (raw, json)
Hash identifier: 02OPiGiAPsiExs8A0FlhPPQGwyZWRBedKZoovwEVgXc=
Subject key identifier: EC:5A:03:B9:D1:93:3A:F3:DC:1A:98:F3:DE:E0:99:36:BE:E4:58:0C
Certificate issuer: /CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a
Certificate serial: 01912D44BBFBC748B4F2D9C58DC37B21FF43
Authority key identifier: 3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/7FoDudGTOvPcGpjz3uCZNr7kWAw.roa
Signing time: Wed 07 Aug 2024 14:36:04 +0000
ROA not before: Wed 07 Aug 2024 14:36:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 91.211.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 13:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2d:44:bb:fb:c7:48:b4:f2:d9:c5:8d:c3:7b:21:ff:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a
Validity
Not Before: Aug 7 14:36:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec5a03b9d1933af3dc1a98f3dee09936bee4580c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a3:d6:aa:e4:1a:66:99:19:20:c5:a1:16:42:
03:45:40:0c:51:20:fb:38:69:26:66:7b:fc:c6:55:
81:15:2b:36:07:1e:fc:b1:43:e8:b4:7d:8b:76:09:
b8:18:9b:96:f6:da:ec:e2:d4:c2:3b:2e:b8:38:32:
a2:e1:17:80:52:23:ed:a8:f4:44:40:26:39:51:80:
b4:ce:3e:8a:aa:fc:9b:77:06:85:fd:9b:cb:d8:24:
25:7f:56:9d:e8:a7:cc:89:e6:e0:f9:d4:af:1f:c4:
20:67:cd:e1:88:3c:df:34:ed:a9:62:73:ad:3f:aa:
67:f8:12:64:2d:78:62:e0:10:df:7a:81:ee:ff:88:
7a:de:9a:fb:45:4d:32:13:b1:9b:f9:50:14:78:50:
27:55:7d:1c:db:86:54:cf:4b:b4:8c:a2:85:72:ca:
b9:00:28:4c:a2:e6:0c:3b:e1:cb:6a:96:b4:b6:17:
e0:f9:3e:55:2d:56:64:79:64:73:9e:09:9d:e2:d0:
2f:47:a9:d0:ce:cd:4d:a1:f3:20:be:d8:8c:cf:bf:
91:ba:08:17:57:a0:14:98:95:f0:e2:d0:4b:f3:23:
43:81:81:2b:36:e5:b3:ed:80:df:98:69:31:a6:65:
0e:32:3d:9b:a3:37:68:84:a4:3a:a8:ae:89:eb:b4:
4c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5A:03:B9:D1:93:3A:F3:DC:1A:98:F3:DE:E0:99:36:BE:E4:58:0C
X509v3 Authority Key Identifier:
keyid:3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/7FoDudGTOvPcGpjz3uCZNr7kWAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.196.0/22
Signature Algorithm: sha256WithRSAEncryption
90:c4:6f:36:62:33:75:d8:02:64:22:69:97:d9:1a:2d:28:8e:
2d:8a:c7:e3:e8:ed:f9:3f:73:f9:aa:1c:7d:67:11:7c:7a:c1:
cf:ac:72:a9:65:d9:60:68:19:63:79:dd:c3:2f:cd:0a:4c:30:
a0:51:45:eb:89:9d:0e:5d:3a:f9:5d:8f:68:6a:5a:ab:fc:25:
7f:8a:41:10:7b:71:ae:09:b4:a9:6b:94:22:b9:46:13:19:d5:
b1:f8:cc:bf:58:cb:57:6b:fc:85:58:6f:af:62:eb:a1:a7:ef:
36:18:d6:26:f5:0b:25:13:1a:e2:e8:9e:02:e7:3f:76:a6:b0:
33:f2:9a:c4:5d:6d:d8:82:8b:b1:5f:bc:a4:c4:24:14:fc:55:
64:03:d9:8a:67:2e:07:c1:6e:ad:9e:4b:ff:98:ac:15:c8:fa:
cd:46:1e:f8:67:00:7d:09:33:15:8d:28:64:eb:44:8f:67:db:
5b:5b:f1:19:be:cb:be:85:f5:be:88:75:a5:1d:e8:72:32:2b:
1c:cc:8f:b8:be:ac:45:2e:18:c6:20:00:87:9a:ba:5d:af:32:
5b:78:94:d9:10:28:cb:d2:04:cd:0c:67:cb:00:5e:c0:ad:bf:
f1:ba:e6:98:b8:c6:6c:fd:38:09:a5:a6:c8:63:94:f6:42:6d:
6b:c5:1b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 16:34:31 2024 by rpki-client on console-ams.rpki-client.org