Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/DDODy9O-gLdNuQPRPTUdz-MYrKM.roa
File: DDODy9O-gLdNuQPRPTUdz-MYrKM.roa (raw, json)
Hash identifier: U/52avz6JJp8fyHIg7vAYhZXF5ijoXi0le3iekTgYwE=
Subject key identifier: 0C:33:83:CB:D3:BE:80:B7:4D:B9:03:D1:3D:35:1D:CF:E3:18:AC:A3
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 018EBD42ACBE839F12E4A8B8DEC275DA937C
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/DDODy9O-gLdNuQPRPTUdz-MYrKM.roa
Signing time: Mon 08 Apr 2024 10:30:47 +0000
ROA not before: Mon 08 Apr 2024 10:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199760
IP address blocks: 91.239.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:42:ac:be:83:9f:12:e4:a8:b8:de:c2:75:da:93:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Apr 8 10:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c3383cbd3be80b74db903d13d351dcfe318aca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:84:3b:6a:22:17:e0:09:95:b4:11:5d:f0:a0:
7a:ac:90:d6:aa:90:38:78:32:9c:c5:0e:fd:d7:e5:
d1:1b:b4:03:c3:08:47:e0:3e:e5:e0:a6:66:ab:88:
96:b9:21:3a:90:3f:e8:1b:38:6d:bd:1e:b2:86:51:
76:bc:a2:a8:8d:41:ee:6e:b4:48:51:65:b8:47:31:
f1:2c:65:9a:66:03:cd:44:7a:d8:b2:43:16:77:ff:
3f:ee:6d:61:6b:8f:fe:3b:fc:8f:0a:b2:cb:f6:8f:
ec:5d:ce:ba:af:d0:a5:17:8f:83:18:3f:19:4c:0a:
6e:a5:ee:3c:e7:46:64:1b:d9:ce:70:46:db:c0:ad:
8a:f8:a9:9e:b5:0f:32:c8:da:30:81:ff:5f:94:90:
e9:1d:a8:31:b5:90:3b:58:f3:ae:11:50:e5:12:c3:
a6:58:0c:bd:98:86:51:53:c2:90:5f:3e:df:74:b0:
6c:a0:93:e1:17:f9:ba:ad:d5:ae:54:e5:3b:d4:ea:
9d:57:29:c3:22:45:94:bb:fb:be:be:7b:4e:2c:7f:
82:f0:75:a1:5d:d2:e8:ab:a3:d8:c1:42:26:fd:f5:
ae:53:99:cc:be:83:05:47:61:6f:fa:78:33:19:05:
95:81:17:b1:67:aa:56:1f:c7:1c:bd:b4:40:38:1a:
43:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:33:83:CB:D3:BE:80:B7:4D:B9:03:D1:3D:35:1D:CF:E3:18:AC:A3
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/DDODy9O-gLdNuQPRPTUdz-MYrKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.217.0/24
Signature Algorithm: sha256WithRSAEncryption
27:a0:c1:15:e7:a5:52:e0:08:92:3f:6b:f2:48:e7:81:37:c2:
d8:be:d0:9e:ca:50:a0:15:50:14:93:d9:cf:b1:33:e2:fb:99:
28:4d:4c:2e:41:e3:9a:f9:40:3b:7b:3b:44:49:06:57:3e:c8:
42:76:64:4f:f4:d4:80:86:b6:8f:02:15:f6:5e:8e:a7:e0:f5:
33:22:9c:d1:90:b4:d1:d5:a4:99:bd:33:86:3e:2f:7e:3f:ae:
56:df:0f:09:47:de:08:42:bb:ca:e0:b2:ba:b8:38:49:41:44:
c5:ad:a5:fc:5c:00:ff:ae:d2:80:11:b9:bc:68:5e:cb:6e:87:
e6:30:e0:1b:35:ea:8e:72:5f:92:f7:a2:fc:42:ae:93:1d:fc:
e1:8a:df:9f:0c:db:6d:91:17:be:65:5f:24:e5:48:1d:47:8e:
bb:e7:20:57:85:3d:cf:fc:5b:72:e2:4f:b6:2e:62:3a:b7:64:
a7:b5:8b:4e:92:b9:f2:3c:39:6e:f4:6b:8c:5e:7d:66:a2:ad:
0d:51:1e:80:5e:d7:8a:d5:b8:23:d3:c5:5c:0a:4d:a4:c3:13:
e4:e7:1d:44:20:75:63:ef:f7:ed:b1:41:30:7a:e7:8e:5a:12:
8a:65:a9:d7:9e:26:91:8a:0c:cb:40:82:07:89:f4:12:7a:8d:
3f:6e:54:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:03 2025 by rpki-client