Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/99KD0QxxQaA61e4IHLkYhFnfO3w.roa
File: 99KD0QxxQaA61e4IHLkYhFnfO3w.roa (raw, json)
Hash identifier: b75T0RDF5WSKCu3rNCytfmwZKiHkGPFhcoXR8bGYoFQ=
Subject key identifier: F7:D2:83:D1:0C:71:41:A0:3A:D5:EE:08:1C:B9:18:84:59:DF:3B:7C
Certificate issuer: /CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa
Certificate serial: 018CC870B0EED48F0DF693C03DFFF71467F9
Authority key identifier: 9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/99KD0QxxQaA61e4IHLkYhFnfO3w.roa
Signing time: Tue 02 Jan 2024 04:31:17 +0000
ROA not before: Tue 02 Jan 2024 04:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 185.91.204.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 09:26:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:b0:ee:d4:8f:0d:f6:93:c0:3d:ff:f7:14:67:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa
Validity
Not Before: Jan 2 04:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7d283d10c7141a03ad5ee081cb9188459df3b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:03:0e:b4:0c:e2:02:9b:d5:30:2d:45:0e:
4f:34:91:07:3a:28:ca:9e:a2:73:1c:d2:63:f8:37:
22:a3:77:c9:f6:c9:44:b4:c9:20:da:02:39:00:07:
f1:37:35:45:5b:85:a6:b3:0e:c8:03:21:ee:59:81:
71:60:d9:ba:66:8d:32:33:0d:b1:fd:9d:56:c4:31:
72:a8:e4:57:8d:0d:24:d6:b6:09:87:c9:8a:c7:18:
f3:64:5e:25:fe:de:b8:8f:e2:da:f2:a4:a3:0e:ba:
18:b8:82:19:0d:4a:02:e6:5c:c9:a3:58:e1:00:62:
1b:56:6d:97:5c:e4:e1:ba:89:56:61:fc:2e:51:ea:
cb:94:f6:80:2f:57:81:ad:24:c5:ee:b0:61:40:75:
0e:dc:04:67:04:53:fb:8a:0b:cf:c7:7a:f4:17:86:
aa:53:b2:38:26:d8:18:48:f0:93:4f:0d:d7:56:4a:
28:dc:a8:61:f6:a5:17:e5:9b:5e:fa:2d:2c:e7:c3:
01:90:e0:c6:6e:e2:fa:3f:7a:dd:f4:a4:65:73:21:
07:42:31:11:64:d7:b1:db:ea:63:8a:e9:bd:9c:82:
80:5e:3b:55:57:4a:ee:6c:3b:16:e6:ee:18:2c:ce:
24:e5:f4:66:92:89:fc:20:bb:9a:43:01:45:30:18:
f6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D2:83:D1:0C:71:41:A0:3A:D5:EE:08:1C:B9:18:84:59:DF:3B:7C
X509v3 Authority Key Identifier:
keyid:9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/99KD0QxxQaA61e4IHLkYhFnfO3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.204.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:6d:3d:83:a7:71:ec:44:77:39:58:10:8a:1b:8e:a5:b2:9e:
37:a1:81:3f:9f:e2:6c:7f:3d:da:51:25:5a:75:72:3e:c4:e1:
64:b7:db:1c:e3:34:98:56:b5:04:aa:c0:6b:76:38:e1:7b:af:
eb:03:dd:96:b5:f0:c7:c5:c5:d6:b2:78:b2:b1:66:9d:71:3b:
1e:c9:f0:1a:d3:fa:95:28:a0:e1:bf:f9:0e:95:ba:b1:69:3f:
a8:5a:fb:aa:34:7d:29:0c:55:fc:86:2f:18:fb:a9:4d:14:b2:
ae:57:63:75:9b:9a:63:75:07:31:4c:b9:20:39:1d:1b:b6:7f:
a7:5a:3b:69:10:ee:e0:61:1d:dd:8f:47:39:70:18:55:49:d9:
16:c8:7e:b2:04:1f:e2:d0:3a:52:d3:b3:02:3a:5a:2a:f4:53:
b3:50:ae:3d:ac:4a:f6:14:c4:28:b5:bc:a8:67:75:36:46:6f:
f0:6c:a3:25:72:51:12:73:c7:fd:50:53:17:e8:da:7f:c2:10:
96:09:b1:ff:d8:a8:6e:0b:10:04:36:e6:db:eb:86:0f:6c:63:
d7:c8:b9:2b:17:40:72:3f:08:bb:ac:31:23:15:4f:e3:a6:a1:
83:1a:49:d7:de:9d:65:c3:95:68:b6:b7:a6:f4:b6:f1:1e:09:
9f:c4:c4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:29 2024 by rpki-client on console-fra.rpki-client.org