Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/bwbhXRx-M3oeYVIMepD8Nvl8ItI.roa
File: bwbhXRx-M3oeYVIMepD8Nvl8ItI.roa (raw, json)
Hash identifier: hdXzOoiqXtLbiwZnosFWpXlyvoL7E2r1+Ko7wPmckNE=
Subject key identifier: 6F:06:E1:5D:1C:7E:33:7A:1E:61:52:0C:7A:90:FC:36:F9:7C:22:D2
Certificate issuer: /CN=761acfd649c8eead8551942781fa16f68dbd10f3
Certificate serial: 01856CEF146203BC550246220EC0E5001AF9
Authority key identifier: 76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/bwbhXRx-M3oeYVIMepD8Nvl8ItI.roa
Signing time: Sun 01 Jan 2023 10:44:45 +0000
ROA not before: Sun 01 Jan 2023 10:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41836
IP address blocks: 91.224.72.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:14:62:03:bc:55:02:46:22:0e:c0:e5:00:1a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761acfd649c8eead8551942781fa16f68dbd10f3
Validity
Not Before: Jan 1 10:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f06e15d1c7e337a1e61520c7a90fc36f97c22d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:23:96:9c:e2:b3:3e:99:3a:17:e4:63:d7:
47:4b:b5:c6:c3:e2:d2:16:bc:e9:ab:d7:86:e5:8a:
77:c3:c6:41:01:20:92:a1:20:0a:ef:86:b4:85:02:
97:d8:eb:8f:f3:81:84:86:9b:ea:39:67:25:bd:e6:
a8:ed:04:63:a7:4e:1d:62:93:ad:56:3a:b0:dc:96:
26:ff:87:c4:f1:37:4c:2a:ad:83:03:1f:03:c5:fa:
53:ee:49:e0:77:92:19:08:f2:dc:7b:da:17:21:b9:
35:0d:f9:c7:ab:c8:95:da:1f:ec:df:24:57:78:92:
3e:94:1b:9d:49:bc:8e:64:a5:cd:1b:70:71:8b:7f:
42:ca:c2:17:72:7a:17:50:cc:60:92:36:09:32:71:
63:4d:8b:ca:09:42:a8:3a:21:63:61:73:4b:82:f5:
49:51:3e:ac:0b:0b:82:63:c6:9d:b8:e3:48:fc:82:
41:85:b9:af:7a:b3:dd:15:ea:85:67:4e:65:d2:9e:
6d:12:e9:89:ac:0e:f4:ad:d6:df:af:4d:da:f3:16:
d9:74:6c:e6:24:90:bb:6d:db:49:5a:ed:c9:d4:5a:
c7:67:70:cb:5f:5c:94:a0:84:0e:7a:56:6d:1c:5d:
1d:70:74:73:2b:97:37:3d:12:c4:d4:f2:ba:4e:8d:
aa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:06:E1:5D:1C:7E:33:7A:1E:61:52:0C:7A:90:FC:36:F9:7C:22:D2
X509v3 Authority Key Identifier:
keyid:76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/bwbhXRx-M3oeYVIMepD8Nvl8ItI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.72.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:17:3d:18:69:69:a6:d8:e4:bf:70:35:30:eb:63:be:93:64:
78:0d:5b:4f:34:01:9c:36:d6:1e:7a:05:ea:72:ec:d4:8a:0d:
29:f8:cc:2e:41:4c:95:62:7f:79:2f:a6:07:3e:61:7c:6a:57:
d6:2f:0c:83:a7:a0:35:af:d8:a0:09:b2:29:a9:7b:7f:b7:d9:
b6:97:92:ef:96:99:c9:e3:0c:02:f9:44:3b:49:97:72:09:bf:
27:f9:b3:09:a6:e1:5c:0b:29:74:5d:4d:d3:e6:95:b2:01:9d:
20:e5:49:eb:f5:5b:ab:e3:76:f2:4e:32:94:fd:e1:b0:8b:64:
26:27:a7:21:b6:eb:b2:e3:07:40:c4:f6:d8:45:54:25:df:3d:
69:a5:3e:3c:c5:a3:68:ab:c2:16:e2:e0:34:a4:f3:be:97:a2:
a0:de:86:59:bd:53:6d:24:9a:17:b1:3b:b2:4d:f7:bf:ad:55:
7a:ec:8b:b5:0c:3d:69:21:2b:94:e6:f5:43:e2:9c:8f:6f:7d:
41:99:17:15:9b:3a:f2:35:8b:87:84:af:e6:42:12:db:d0:ab:
0d:96:0a:5a:86:33:62:42:7f:54:53:9d:5f:9a:9f:1b:21:d7:
60:ac:5b:02:0b:c5:25:e8:3f:f0:96:6f:a4:c3:6b:77:7d:82:
51:70:7a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:15 2024 by rpki-client on console-fra.rpki-client.org