Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/IcXUhhFhMDnU48BIkzivyPo1ueA.roa
File: IcXUhhFhMDnU48BIkzivyPo1ueA.roa (raw, json)
Hash identifier: ucnVpwP1qu0s9JPDl+TgTmasMntu0yTslHizlAgqUVI=
Subject key identifier: 21:C5:D4:86:11:61:30:39:D4:E3:C0:48:93:38:AF:C8:FA:35:B9:E0
Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial: 0186CC689FAD5EEE986C2CE7B7ACAA6BF914
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/IcXUhhFhMDnU48BIkzivyPo1ueA.roa
Signing time: Fri 10 Mar 2023 16:44:14 +0000
ROA not before: Fri 10 Mar 2023 16:44:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 91.231.186.0/24 maxlen: 24
2a10:1fc0:7::/48 maxlen: 48
2a10:1fc0:a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 12 Apr 2023 08:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cc:68:9f:ad:5e:ee:98:6c:2c:e7:b7:ac:aa:6b:f9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Validity
Not Before: Mar 10 16:44:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21c5d48611613039d4e3c0489338afc8fa35b9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e9:39:5e:eb:a7:ad:7a:0c:16:d1:58:86:3d:
30:1f:4b:df:b2:c2:28:89:6f:4f:a8:21:d5:dc:30:
1e:e2:5e:05:fc:4b:7a:79:87:33:a4:bf:53:d5:76:
d9:48:69:0b:38:2f:bd:df:74:e0:24:e9:50:f7:59:
41:08:17:af:3b:3a:85:6f:9a:2c:05:33:66:c8:bb:
71:d1:33:06:95:33:7b:2a:5b:19:47:ca:cf:13:59:
4d:6f:93:75:af:b0:bd:39:ff:39:31:79:3b:9e:20:
83:bf:1e:ee:1f:f0:a5:2c:dd:12:0f:60:a4:ab:00:
9d:0a:d8:95:67:7a:08:a3:56:1d:d8:d9:e0:af:98:
0b:6e:10:5d:d3:1a:7e:c4:2d:1d:df:d2:04:bd:6c:
ac:8e:77:20:e7:ba:84:29:a2:83:d2:fb:22:3a:38:
2a:c5:ae:d7:e5:c6:f8:f4:da:e3:ab:fc:fc:f8:dc:
ce:d4:b4:cf:ce:52:7f:8f:5a:90:86:be:f6:f7:af:
e1:f7:07:de:10:66:cb:ca:df:d2:6f:1e:fc:6b:30:
a5:c9:bb:1d:9b:7f:ef:7e:2e:92:b0:12:f8:13:72:
d6:a7:40:51:da:30:cc:6b:9b:0f:36:2f:6c:3c:16:
60:07:a8:c0:27:df:c6:26:92:56:cc:ea:ae:80:42:
49:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C5:D4:86:11:61:30:39:D4:E3:C0:48:93:38:AF:C8:FA:35:B9:E0
X509v3 Authority Key Identifier:
keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/IcXUhhFhMDnU48BIkzivyPo1ueA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.186.0/24
IPv6:
2a10:1fc0:7::/48
2a10:1fc0:a::/48
Signature Algorithm: sha256WithRSAEncryption
0c:3b:14:fa:37:93:99:0a:44:e9:e9:36:2b:58:41:9b:49:b5:
18:92:9b:fb:53:d5:c2:52:a6:ee:1a:a0:2c:b3:8e:17:1e:33:
85:6b:f4:24:43:77:46:76:46:d6:ef:89:5a:ae:21:05:2e:d1:
d8:f5:de:29:2e:e6:e7:36:88:2c:53:3a:98:bf:89:c9:b9:44:
a3:9c:bc:06:91:bf:45:12:e6:b3:6e:a3:83:d7:54:14:2f:0c:
a6:73:30:4d:4d:3e:7f:0f:6a:30:73:cc:8e:a5:07:0c:2e:7f:
e1:80:a0:ed:d9:fd:4d:15:2a:d0:ae:ac:f5:76:3d:a5:af:67:
12:81:85:bc:0d:1c:ec:92:75:62:bf:53:fa:82:15:c1:54:af:
9a:9a:34:fd:93:4c:dc:36:d2:54:d9:89:a1:9f:2a:62:4b:c3:
f4:3b:1e:d0:8f:d7:c3:64:d1:ea:92:d6:d8:ad:b3:4a:91:6f:
df:a1:91:f0:82:6f:76:cf:c0:f7:68:83:83:24:81:bd:57:c8:
d4:a2:30:d7:dc:51:3c:26:dd:ce:ad:f0:78:23:35:d8:a4:df:
56:38:1e:0e:3a:6f:a2:f0:7f:c5:56:9b:49:6f:02:1b:39:81:
65:41:4e:ad:29:34:c1:25:75:6c:81:95:6f:dc:c2:a5:65:c1:
5c:a9:3c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:23 2024 by rpki-client on console-fra.rpki-client.org