Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/0d43e3-3e44-4a82-89b4-8ba438e76b53/1/dPoXNElZum2zjGzJRfSLAY6jsR0.roa
File: dPoXNElZum2zjGzJRfSLAY6jsR0.roa (raw, json)
Hash identifier: QJKAoHulZYl88QNtPMibZXiLc1iN2GbYdge1oPsiANA=
Subject key identifier: 74:FA:17:34:49:59:BA:6D:B3:8C:6C:C9:45:F4:8B:01:8E:A3:B1:1D
Certificate issuer: /CN=d397dc0caa997d504b5a3f0eaf7b18ea730ce8a3
Certificate serial: 01856D81A598EACEA67B3961D46F0AEA8DC8
Authority key identifier: D3:97:DC:0C:AA:99:7D:50:4B:5A:3F:0E:AF:7B:18:EA:73:0C:E8:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05fcDKqZfVBLWj8Or3sY6nMM6KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/0d43e3-3e44-4a82-89b4-8ba438e76b53/1/dPoXNElZum2zjGzJRfSLAY6jsR0.roa
Signing time: Sun 01 Jan 2023 13:24:51 +0000
ROA not before: Sun 01 Jan 2023 13:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41953
IP address blocks: 91.206.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:a5:98:ea:ce:a6:7b:39:61:d4:6f:0a:ea:8d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d397dc0caa997d504b5a3f0eaf7b18ea730ce8a3
Validity
Not Before: Jan 1 13:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74fa17344959ba6db38c6cc945f48b018ea3b11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a7:08:1d:3f:ba:27:d9:5f:ae:8c:dd:c2:a0:
a9:1f:7a:88:ce:cd:05:60:bc:85:a2:96:0c:b5:a4:
b6:64:34:55:e1:69:b7:9d:47:95:70:ce:ef:f2:f3:
7a:2e:10:d1:de:43:25:c1:d1:2d:57:8b:7e:b0:ad:
e6:ab:9e:d4:10:b3:ff:63:75:b2:0d:84:88:94:aa:
3b:05:f7:12:98:43:ad:72:ef:e0:1f:22:60:32:3f:
c8:c2:47:98:cb:8b:1e:c5:9e:e3:5e:e2:e5:58:77:
86:9e:70:54:d8:4d:94:df:ad:96:04:06:55:53:42:
d6:b6:68:86:85:67:fd:4a:9c:d0:fc:70:4c:14:f3:
7f:2a:6c:df:0d:e2:85:1f:43:6d:3d:29:91:92:89:
00:67:b3:9f:a5:76:3d:84:57:c6:8b:bb:25:bb:6f:
ca:56:ff:f4:81:55:56:5a:32:9c:bf:f0:75:aa:2c:
34:7d:0a:86:2b:32:8f:44:35:db:01:db:80:9d:54:
ab:65:df:d4:2d:5d:9f:66:0e:06:34:5d:c4:36:61:
f0:b9:0b:5a:26:ef:22:37:1b:d7:fb:2f:d4:b6:cf:
82:c8:ca:d4:0b:e7:4c:7f:00:35:ec:1f:17:c9:e7:
f1:ed:14:5a:93:30:7d:51:33:7a:56:34:fa:b7:9a:
9e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FA:17:34:49:59:BA:6D:B3:8C:6C:C9:45:F4:8B:01:8E:A3:B1:1D
X509v3 Authority Key Identifier:
keyid:D3:97:DC:0C:AA:99:7D:50:4B:5A:3F:0E:AF:7B:18:EA:73:0C:E8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05fcDKqZfVBLWj8Or3sY6nMM6KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0d43e3-3e44-4a82-89b4-8ba438e76b53/1/dPoXNElZum2zjGzJRfSLAY6jsR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0d43e3-3e44-4a82-89b4-8ba438e76b53/1/05fcDKqZfVBLWj8Or3sY6nMM6KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.123.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f0:6a:b2:40:d7:c4:69:bd:24:0f:a7:df:e2:45:9b:cc:91:
fd:93:6a:ec:73:e0:64:bf:87:c0:44:b1:a2:3d:16:e1:8e:2e:
10:12:72:b6:ec:f1:a9:d8:64:cc:a9:11:2d:2e:48:fa:18:31:
92:2b:c3:89:c8:cf:51:db:8c:a5:53:35:63:18:ea:c6:1b:a3:
94:05:db:2b:e3:2c:1c:7c:c3:be:fc:fa:5e:eb:91:e9:db:fa:
20:8f:9b:b7:f1:3b:60:8c:7f:3c:78:dc:f8:40:84:e2:c9:11:
be:a5:e7:6f:ef:8c:be:d2:ea:61:b9:83:fd:4e:6a:32:7b:b1:
59:80:c4:4b:6a:46:e5:c4:89:2b:66:1f:1d:b5:a2:fe:f4:6a:
3e:c8:a4:4b:3f:4e:0b:70:94:41:4d:58:41:bc:de:48:e5:52:
7f:71:8f:24:b2:cf:ea:fb:66:dd:2e:c2:b6:2f:4f:d7:7e:d5:
de:77:66:ce:a3:36:1f:0a:b7:a7:03:8e:61:17:2e:40:17:8a:
66:95:0f:cb:90:55:48:ef:e4:6a:c6:e8:0b:69:15:3d:7e:9a:
31:e4:08:51:26:60:9a:7f:ff:4b:e6:cf:39:41:2a:dd:8d:49:
e0:e0:f1:97:78:67:bd:28:7b:16:da:c4:e9:64:ec:c1:61:f5:
c9:a3:fe:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:14 2024 by rpki-client on console-fra.rpki-client.org