Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/OTod_3s3k8KDeGvVU_hXIxNG_Lk.roa
File: OTod_3s3k8KDeGvVU_hXIxNG_Lk.roa (raw, json)
Hash identifier: TxJ9W9ciCvKSwGzxT9VgzSBHZ0IFJy+UwIe6JbJEym4=
Subject key identifier: 39:3A:1D:FF:7B:37:93:C2:83:78:6B:D5:53:F8:57:23:13:46:FC:B9
Certificate issuer: /CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Certificate serial: 01856F4B48C5BFF85A267ED9993F3BC84D8F
Authority key identifier: 53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/OTod_3s3k8KDeGvVU_hXIxNG_Lk.roa
Signing time: Sun 01 Jan 2023 21:44:42 +0000
ROA not before: Sun 01 Jan 2023 21:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57584
IP address blocks: 91.233.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:48:c5:bf:f8:5a:26:7e:d9:99:3f:3b:c8:4d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Validity
Not Before: Jan 1 21:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=393a1dff7b3793c283786bd553f857231346fcb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:93:02:58:d5:24:ea:16:90:0d:6c:40:67:
ab:99:71:6a:40:d8:f3:84:07:dd:97:c6:cf:62:c9:
e3:cf:d3:3b:90:40:7f:7d:a5:4f:e1:40:a5:8e:a0:
f4:51:b6:b7:d5:2d:82:ab:73:46:b7:0f:2a:b1:e4:
05:f9:a6:9a:cb:10:75:e0:6b:9a:27:59:9c:eb:e3:
ee:60:32:ef:4f:bb:28:dc:e1:d1:a1:62:f7:74:79:
af:39:f1:df:5b:5f:70:52:1c:09:5e:ba:6e:43:99:
d6:80:ff:ee:ac:57:d8:28:6a:b0:8e:3f:f8:1d:17:
6f:15:9d:7d:12:b1:ed:e4:73:56:0e:f5:4a:57:4a:
19:9b:bf:a4:a0:45:8d:40:86:6e:78:38:f6:52:48:
a6:cd:f6:8d:f4:5b:b8:1c:b4:06:ed:24:6d:6b:b4:
89:6d:ca:09:40:1a:8c:c0:ca:97:e5:91:7e:79:c5:
03:3b:e7:b7:76:91:4c:2e:29:b2:f9:4e:87:24:1a:
19:56:0d:4d:09:be:bf:5a:d8:ae:da:78:0e:82:3a:
6c:3e:7f:05:be:04:b2:c6:4a:38:b1:c2:7e:f6:aa:
1f:34:ef:46:06:26:4b:68:a6:3e:61:4f:76:c1:85:
dd:18:da:b1:fa:8d:0e:d5:af:be:a0:34:14:7d:a7:
af:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3A:1D:FF:7B:37:93:C2:83:78:6B:D5:53:F8:57:23:13:46:FC:B9
X509v3 Authority Key Identifier:
keyid:53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/OTod_3s3k8KDeGvVU_hXIxNG_Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.68.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:d0:5c:59:32:7d:be:c2:aa:e0:7a:5a:31:b0:d1:0a:8d:02:
9b:26:ef:ec:fd:14:75:59:34:3f:bd:82:82:76:2a:9c:ef:1b:
89:96:76:ec:2b:41:31:6e:6c:d5:b7:5c:7a:39:2b:d9:37:24:
a1:d7:d3:d2:57:9c:1c:91:13:78:8c:59:7a:1d:fc:1f:fb:7c:
08:1d:38:3c:0f:1e:50:a5:44:f8:a0:96:7a:16:9f:96:49:2a:
36:73:92:3a:74:24:e4:53:4b:4d:af:21:7c:67:1e:be:23:cb:
5a:3f:cb:33:53:20:42:4c:c0:15:06:17:8b:94:d1:98:f4:e0:
f2:b6:6e:53:59:aa:69:19:1a:a5:93:be:1f:b1:75:98:24:db:
64:ef:d2:a0:3f:2b:4b:9f:56:63:74:b7:78:b0:d0:2c:f3:78:
06:e2:f8:d6:53:fc:09:84:5a:8e:3f:f2:91:d3:1d:a9:bc:5b:
d7:c9:05:9c:6c:0d:f9:3a:4e:9f:69:5f:43:85:7f:3d:03:78:
56:b2:dd:64:bb:34:26:c9:d8:e5:d7:67:75:05:2c:7d:b5:05:
8a:df:82:a2:c1:02:b8:ac:3b:d4:df:bc:6b:7f:89:d2:18:5f:
6d:dd:29:20:5b:2f:bb:de:a0:d7:53:24:ab:05:12:fa:f2:d6:
4a:d2:9f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:12 2024 by rpki-client on console-ams.rpki-client.org