Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/aishqxcffWcomztRWU8kzXIdAY8.roa
File: aishqxcffWcomztRWU8kzXIdAY8.roa (raw, json)
Hash identifier: tgPUES58K+mEuND1sx7siNrISzT2dUDZ7J3wG//HvHE=
Subject key identifier: 6A:2B:21:AB:17:1F:7D:67:28:9B:3B:51:59:4F:24:CD:72:1D:01:8F
Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Certificate serial: 01856C9CCC6048D2B369C0BD627E76BA4725
Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/aishqxcffWcomztRWU8kzXIdAY8.roa
Signing time: Sun 01 Jan 2023 09:14:53 +0000
ROA not before: Sun 01 Jan 2023 09:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199144
IP address blocks: 91.245.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:cc:60:48:d2:b3:69:c0:bd:62:7e:76:ba:47:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Validity
Not Before: Jan 1 09:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a2b21ab171f7d67289b3b51594f24cd721d018f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7d:49:e0:14:22:66:af:86:5d:ac:f0:92:2d:
18:37:8c:c0:b6:ce:d8:38:0f:47:61:84:50:18:c7:
49:20:d3:4f:fd:97:b1:1b:8f:e6:47:8d:18:d7:90:
5b:d7:17:f3:a3:93:e3:1c:90:c9:68:d0:0e:29:f3:
6b:70:09:22:24:4f:59:fe:99:08:6a:d4:45:d2:c9:
ef:67:4b:42:eb:e0:d7:6e:40:91:ef:0a:49:80:ec:
a6:96:2d:d1:8f:97:bf:b6:aa:49:df:d2:40:4b:5f:
96:b2:9c:28:09:2d:29:ac:7f:c9:2f:bf:3a:04:e9:
cf:9a:cf:0b:ca:a8:0c:d4:7c:eb:2f:88:50:55:2a:
21:32:d3:53:af:fd:9a:46:09:f5:8b:a1:8b:c6:11:
1c:72:89:04:54:e8:54:30:21:d9:8f:08:d7:d1:f1:
3c:1c:df:68:63:f5:28:23:61:c8:0d:f7:01:a9:e4:
b7:17:16:52:b0:ed:41:6b:a9:82:7b:9f:13:a3:ce:
e9:a9:fa:d7:57:34:f2:44:03:a3:a3:43:bf:47:45:
cc:1c:80:94:55:d5:d4:4c:30:fb:71:f0:93:99:8d:
b7:8e:c0:e2:07:81:7d:c6:3d:f0:24:78:76:a3:a7:
16:57:14:f6:1c:c0:e9:9b:01:96:99:ea:5c:a9:4e:
da:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2B:21:AB:17:1F:7D:67:28:9B:3B:51:59:4F:24:CD:72:1D:01:8F
X509v3 Authority Key Identifier:
keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/aishqxcffWcomztRWU8kzXIdAY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.215.0/24
Signature Algorithm: sha256WithRSAEncryption
73:47:de:ae:fa:a8:e4:4d:34:dd:00:95:e1:23:e5:17:bf:7a:
fb:97:ba:71:06:e4:bb:80:4d:11:03:4c:e5:c3:fa:0e:02:4e:
be:36:46:38:1d:80:23:42:cf:e2:82:d9:90:fc:63:0f:e8:4a:
cf:3a:cc:c7:24:d4:b0:3d:84:76:6f:3a:79:f5:be:f7:24:e8:
65:10:eb:fa:a4:00:e6:ea:d8:4f:89:43:bd:4d:e1:ce:42:31:
e8:d2:ce:57:41:11:1c:d4:02:b3:d0:60:41:a5:e2:58:6c:03:
9f:59:2c:12:94:11:49:73:ad:93:75:79:64:b6:0e:ee:b2:64:
b3:5b:7a:28:41:3b:0a:ba:e3:76:58:3a:f4:ed:5c:54:6a:18:
62:aa:54:05:41:ad:12:a8:e0:7f:9c:4a:3a:84:47:f4:18:2e:
df:f4:83:4c:cd:36:58:74:c6:d9:4a:c4:d9:3d:50:d0:b5:ac:
f7:c7:92:53:d8:e4:ac:56:5c:b4:64:cf:11:1b:c5:d0:dd:bd:
24:18:52:b4:06:49:ed:4b:d4:21:3f:51:8b:a4:e9:cd:67:57:
60:11:6e:8e:58:99:da:6a:bd:e7:9a:18:45:7b:65:c9:e1:07:
b6:63:97:ba:ce:60:d6:4c:03:43:7b:1b:8a:23:94:00:4c:9d:
b4:e1:04:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:08 2024 by rpki-client on console-fra.rpki-client.org