Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/CY2fM4wcem8-sbZ7HJiGJfdguk4.roa
File: CY2fM4wcem8-sbZ7HJiGJfdguk4.roa (raw, json)
Hash identifier: g/JVd6nixfYAxbShYPvKNOCi0KXP/4zxmvsAtpQk6bI=
Subject key identifier: 09:8D:9F:33:8C:1C:7A:6F:3E:B1:B6:7B:1C:98:86:25:F7:60:BA:4E
Certificate issuer: /CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa
Certificate serial: 0191C5980F8D4EACA23DD603A8D747D5BC0B
Authority key identifier: 9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/CY2fM4wcem8-sbZ7HJiGJfdguk4.roa
Signing time: Fri 06 Sep 2024 04:29:22 +0000
ROA not before: Fri 06 Sep 2024 04:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.91.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Sep 2024 08:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c5:98:0f:8d:4e:ac:a2:3d:d6:03:a8:d7:47:d5:bc:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa
Validity
Not Before: Sep 6 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=098d9f338c1c7a6f3eb1b67b1c988625f760ba4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a2:ef:1d:f2:df:47:9d:98:0d:1d:05:4b:2b:
e4:9c:22:bf:de:7f:76:dc:2f:95:6d:e8:0b:01:37:
1f:76:18:8a:5d:9a:c1:01:fd:ce:2e:08:d3:b1:a3:
59:53:88:e7:d2:15:fd:96:d3:b7:15:d1:9b:86:3f:
58:ec:e0:fe:cf:ac:e5:60:24:2d:01:a0:60:9c:74:
01:b9:77:37:44:59:3d:89:9e:62:3a:33:61:16:a1:
fa:ee:d2:0a:9b:b0:2d:7c:85:16:09:99:46:f4:6c:
82:d0:b6:a9:76:46:f3:67:6e:2f:9f:b6:d8:b8:7c:
07:bf:d3:30:c5:7e:de:2b:4e:0b:f6:68:1d:1e:f4:
ff:6b:63:a9:35:3e:72:a0:ac:01:a0:28:45:c1:04:
ff:8b:4f:51:0f:fb:24:3d:f7:7a:55:49:90:d2:80:
59:53:d0:74:f5:b8:54:53:25:0a:cc:ee:ac:f4:f3:
9a:c0:a5:b3:80:4a:1e:a4:7a:bd:f7:5a:1b:e2:26:
dd:f1:5b:e8:66:c8:74:8a:c1:da:b6:d5:c6:7b:13:
c3:93:f2:c0:1b:41:19:66:12:f8:dd:45:77:05:0d:
77:78:0d:02:74:06:7c:bf:05:7b:cb:6a:82:01:75:
2c:7e:6c:ae:20:42:65:1a:4e:9d:2d:67:f4:67:b0:
93:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8D:9F:33:8C:1C:7A:6F:3E:B1:B6:7B:1C:98:86:25:F7:60:BA:4E
X509v3 Authority Key Identifier:
keyid:9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/CY2fM4wcem8-sbZ7HJiGJfdguk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.205.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:41:0f:bf:bf:99:3f:84:3d:66:49:e3:a7:13:5d:55:c2:81:
02:b9:9b:e9:0a:0c:a2:96:e0:cf:7d:fc:6d:04:c3:62:30:c7:
fb:e1:eb:d3:f2:20:de:4c:00:15:48:f0:4e:8b:04:d0:7f:0e:
5c:a3:c5:71:4c:55:4e:60:8a:c6:93:50:c1:83:2e:2a:e3:87:
ec:7c:a5:00:db:dc:ad:7a:4f:db:98:92:86:a8:17:23:10:e6:
7c:ac:49:62:a6:0a:05:96:b7:f5:b0:05:49:e2:bd:6b:50:58:
bd:c2:bd:dd:fd:06:3e:07:33:5d:81:b5:f6:bb:71:7c:bf:01:
04:fa:19:57:e8:c7:bb:40:c4:50:d5:a0:83:0c:f2:ea:85:88:
87:00:16:09:2d:22:85:9b:45:cb:d0:df:3e:42:fc:9b:7a:f8:
1a:00:33:e3:d3:64:d3:56:89:83:ba:76:c5:7e:a9:d0:a6:64:
6a:1e:a5:c8:d5:ce:97:58:03:81:40:84:55:e7:3a:28:6b:22:
60:7a:e5:99:2b:12:f2:c2:28:d5:47:d2:70:ec:b4:3a:f6:84:
b4:a9:60:8a:30:58:96:52:25:cc:3f:d0:58:64:ad:aa:5b:7c:
5b:53:44:db:9c:67:bd:a5:29:f0:d0:40:6b:d0:47:89:0c:cf:
59:8b:b9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 14 10:28:51 2024 by rpki-client on console-ams.rpki-client.org