Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/25xpas3dIf49dtKBVkrODCpuva4.roa
File: 25xpas3dIf49dtKBVkrODCpuva4.roa (raw, json)
Hash identifier: QYqi7eFHgziIgXsDNKSIRcJncrWcPWsk3g8LICe+3GA=
Subject key identifier: DB:9C:69:6A:CD:DD:21:FE:3D:76:D2:81:56:4A:CE:0C:2A:6E:BD:AE
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 018B5D2A502C148580A234055A1B5B0C8F83
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/25xpas3dIf49dtKBVkrODCpuva4.roa
Signing time: Mon 23 Oct 2023 15:32:15 +0000
ROA not before: Mon 23 Oct 2023 15:32:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 91.204.76.0/24 maxlen: 24
91.204.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5d:2a:50:2c:14:85:80:a2:34:05:5a:1b:5b:0c:8f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: Oct 23 15:32:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db9c696acddd21fe3d76d281564ace0c2a6ebdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5f:de:9c:aa:13:ef:ab:f1:16:d8:03:cf:6c:
a8:96:12:f9:f1:4e:3c:8f:3f:60:b3:30:8d:ca:70:
03:ae:43:9c:5a:90:3f:0f:bd:12:c2:f7:f5:84:91:
ca:8d:52:39:e7:b6:80:2c:23:4c:ba:1c:65:19:1e:
42:cb:17:30:5c:8d:0d:09:20:fa:cb:d8:c9:7d:ce:
99:8d:47:b5:81:39:ba:79:b7:6a:b8:f0:c0:b6:4d:
44:67:80:4e:c5:aa:f5:59:09:bd:5d:f7:87:a1:31:
3e:64:ad:cf:08:f9:8f:95:34:e6:54:e9:12:95:5a:
61:ce:73:f9:d0:ec:f7:dc:6e:78:8b:28:7e:bd:f1:
9a:25:94:ff:8a:f1:a3:ce:4c:af:7e:2b:7c:45:6a:
56:61:98:49:e3:e8:5d:a0:be:5b:0d:eb:ad:eb:94:
53:ba:de:38:b9:20:c6:dc:04:8e:2c:c7:6a:da:3d:
dc:02:d5:61:1f:36:43:f3:49:80:b5:5f:37:29:21:
f0:5d:96:c9:f9:d8:e3:8d:77:ca:c5:71:45:a9:08:
45:a9:d6:1b:f7:d1:a0:7e:94:97:d5:18:34:56:5d:
01:b9:31:74:a1:36:e2:3c:f8:69:f8:cf:4a:a8:d6:
0d:0a:e4:07:2b:64:e4:b3:56:ad:5a:b9:7b:73:04:
5f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9C:69:6A:CD:DD:21:FE:3D:76:D2:81:56:4A:CE:0C:2A:6E:BD:AE
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/25xpas3dIf49dtKBVkrODCpuva4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.76.0/24
91.204.78.0/24
Signature Algorithm: sha256WithRSAEncryption
59:99:ee:67:9d:6d:7e:5b:1b:f3:dd:35:f4:22:fc:a5:7c:7b:
e3:d4:65:39:07:e4:0b:3c:0d:1e:ae:4e:78:a9:15:23:e0:22:
b0:4f:11:88:89:7f:ee:07:3c:4c:70:f3:ae:7a:03:df:a5:3f:
13:3c:a4:4a:b5:d8:b1:50:0b:3c:03:d1:5e:26:41:3f:82:0f:
91:44:6c:a1:e8:a6:0c:28:3a:ad:29:03:00:ba:5b:c1:61:7a:
00:11:26:98:64:b3:94:f0:eb:68:92:c6:6b:ac:65:99:fe:84:
fb:90:4a:0e:a5:57:77:2b:78:03:d1:e4:03:44:ba:ea:90:a9:
4f:f8:30:86:f1:56:7e:1e:48:95:4b:92:47:9f:5c:aa:39:b7:
1b:23:54:d9:eb:7a:76:b5:96:f0:15:fd:17:53:60:ff:0f:aa:
95:68:74:36:f4:8a:45:3a:54:fc:24:55:c9:d9:28:6f:61:27:
09:1f:19:a8:cf:50:5f:30:ac:96:c4:1f:ea:48:08:e5:ba:0a:
a6:6b:04:df:6a:7a:18:cd:61:61:ad:df:34:14:d3:1d:2d:22:
c5:9b:88:eb:b5:5d:12:a9:68:93:78:ef:37:79:9b:00:aa:e4:
bd:f6:82:ff:f8:3d:fd:29:40:10:52:10:33:b4:73:79:10:1f:
b6:54:6f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-fra.rpki-client.org