Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/QeDjQCl8jbDbzEBnTu_Uf6ZDgOM.roa
File: QeDjQCl8jbDbzEBnTu_Uf6ZDgOM.roa (raw, json)
Hash identifier: HgHaG0EO88lZWV6RzXqO3/1bx9HA3b5YDB8SrJoHTcM=
Subject key identifier: 41:E0:E3:40:29:7C:8D:B0:DB:CC:40:67:4E:EF:D4:7F:A6:43:80:E3
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 018974EA1D73CF68B329042DD6A69DC5597B
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/QeDjQCl8jbDbzEBnTu_Uf6ZDgOM.roa
Signing time: Thu 20 Jul 2023 20:07:27 +0000
ROA not before: Thu 20 Jul 2023 20:07:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 91.204.76.0/24 maxlen: 24
91.204.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jul 2023 10:10:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:74:ea:1d:73:cf:68:b3:29:04:2d:d6:a6:9d:c5:59:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: Jul 20 20:07:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41e0e340297c8db0dbcc40674eefd47fa64380e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:6d:6a:75:b8:69:47:b8:19:a1:26:4a:53:
0a:f1:e3:fd:68:5d:31:88:8b:e5:b1:07:96:42:8d:
fa:84:ca:df:7d:9e:93:37:c9:24:83:23:da:ff:a3:
3f:bb:11:30:18:21:bd:58:a5:c6:1e:69:7d:a0:dc:
c8:ec:38:ba:5a:30:c2:88:ee:41:94:9f:a0:a6:ef:
ee:38:60:47:97:a7:a7:ab:67:67:63:71:b1:12:74:
b0:92:d8:5d:53:88:84:08:f9:a6:28:1a:6f:45:22:
91:92:12:62:2c:c3:58:f5:32:c5:01:9f:64:f7:9d:
5c:da:9a:c4:09:d2:2b:ec:03:fb:e2:91:55:da:7a:
20:6c:e2:d0:a5:3a:bc:d2:35:c3:2d:38:8c:71:86:
c1:77:fe:0b:2f:27:2a:50:fa:9d:7a:52:ee:41:09:
33:f1:e0:ea:65:43:57:cc:bb:fa:81:78:8d:f8:ff:
cf:d2:21:c0:c7:02:9e:36:60:ff:f6:3c:cd:60:61:
62:cf:14:d3:13:6f:94:e9:5b:5a:4f:72:79:67:15:
88:69:59:2b:17:5e:d8:e7:91:da:fd:70:aa:9e:2e:
7f:2c:01:3f:3b:6f:f6:78:7e:f5:08:1b:a8:ba:e2:
4d:10:4a:9f:73:0d:c2:59:13:0c:72:f9:4f:90:6a:
60:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E0:E3:40:29:7C:8D:B0:DB:CC:40:67:4E:EF:D4:7F:A6:43:80:E3
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/QeDjQCl8jbDbzEBnTu_Uf6ZDgOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.76.0/24
91.204.79.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:42:d1:f6:98:b0:9f:6a:2a:62:39:75:59:ac:ac:37:a1:f9:
03:f2:a8:32:97:dc:5b:b8:6c:01:b0:98:ce:2b:c3:9c:03:b3:
8a:18:76:ef:53:f6:a6:40:70:44:85:36:cc:10:83:4a:f6:10:
a0:9c:73:63:09:d9:01:dd:31:45:6f:be:52:fc:f8:5d:8c:6e:
df:11:59:f3:d5:a2:6b:43:b3:98:c7:d5:27:12:21:65:0c:06:
cd:6b:88:62:38:c5:54:9d:52:fe:59:f3:94:cf:9c:78:d7:16:
ba:43:2f:77:09:30:a5:dc:aa:62:2e:cc:60:e2:fc:2a:c1:14:
b0:44:eb:8c:d7:a5:bf:d4:7a:08:35:e3:b9:c0:d4:14:2a:ab:
72:e8:c5:89:40:cf:8b:01:c0:39:05:ef:59:62:b9:5d:4c:a2:
7c:6b:a6:01:2c:10:11:c0:7e:5a:dd:10:db:f1:dc:ec:fe:68:
62:35:8a:e7:ec:fa:2e:5e:7a:27:aa:21:7d:97:22:28:cc:18:
d5:d0:ff:7a:d2:b1:99:f8:88:c9:13:9d:91:58:6d:9b:d1:e9:
13:2a:ac:0d:33:1b:93:af:c8:b1:59:4e:19:22:5c:2c:15:d7:
fe:ca:cd:96:73:66:4a:d8:b0:55:34:07:cf:29:6a:3e:96:54:
9a:8d:1b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:38 2024 by rpki-client on console-ams.rpki-client.org