Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/STd-HwBwMSrM0LClWQ9kDk0ogtA.roa
File: STd-HwBwMSrM0LClWQ9kDk0ogtA.roa (raw, json)
Hash identifier: 9DjIRYoQN79bg9Qsrixl9BeUYU+MvudRjH0Y+KkFkOg=
Subject key identifier: 49:37:7E:1F:00:70:31:2A:CC:D0:B0:A5:59:0F:64:0E:4D:28:82:D0
Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial: 018CE3DE56392090DC61DF1A5DE6517A58E6
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/STd-HwBwMSrM0LClWQ9kDk0ogtA.roa
Signing time: Sun 07 Jan 2024 12:20:48 +0000
ROA not before: Sun 07 Jan 2024 12:20:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 91.232.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 20:36:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e3:de:56:39:20:90:dc:61:df:1a:5d:e6:51:7a:58:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
Validity
Not Before: Jan 7 12:20:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49377e1f0070312accd0b0a5590f640e4d2882d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7f:bf:1f:92:64:e8:9b:8d:5f:ef:d1:cc:ff:
a0:4c:2c:35:4c:2c:2b:f8:94:02:1e:7f:f8:17:89:
c7:a9:c7:06:fd:51:fe:79:4a:e8:88:33:9b:83:8e:
7f:90:6a:7e:eb:ff:5e:0c:83:1b:88:b1:e1:a1:34:
28:50:aa:cf:85:5c:6c:0b:6f:ac:d6:c3:85:9e:f0:
91:70:50:72:74:98:d0:e2:9e:78:e3:c0:b0:9d:ff:
b1:24:8f:ab:13:b4:9b:9f:7f:34:63:fe:91:51:83:
aa:3e:3c:d6:bd:93:14:a3:16:2a:98:e5:21:82:01:
77:fc:66:9c:42:a1:68:45:63:b7:15:2f:c0:25:6f:
bf:e5:c3:c4:31:31:13:a4:8b:bc:60:0f:2d:eb:a4:
35:37:9f:14:a2:df:7d:4d:96:e9:d6:82:88:27:ea:
88:ff:07:82:72:5a:26:6a:a6:ca:30:96:57:fb:e7:
35:52:ca:77:66:6d:73:bf:68:12:85:b5:73:9d:e8:
e5:0f:f8:1b:3b:bb:87:56:99:b9:69:c1:6b:b4:51:
27:3c:f6:42:5a:4e:19:45:ba:c7:07:0d:74:0b:d0:
4b:07:b6:5b:58:16:f0:c6:a6:a3:e2:15:11:77:e0:
ab:e6:41:a4:f0:5e:85:81:5f:92:0f:80:f2:6c:51:
c8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:37:7E:1F:00:70:31:2A:CC:D0:B0:A5:59:0F:64:0E:4D:28:82:D0
X509v3 Authority Key Identifier:
keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/STd-HwBwMSrM0LClWQ9kDk0ogtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.103.0/24
Signature Algorithm: sha256WithRSAEncryption
04:97:c2:7a:e3:69:b4:f4:ea:a1:9e:47:02:89:44:ad:08:f4:
b6:33:81:f8:ac:b0:c8:cf:f8:0d:a3:a8:7a:65:c0:90:c0:ed:
f4:b4:34:c4:3b:c9:73:d4:a8:02:ac:f6:48:ac:33:66:38:e3:
ce:9a:12:ed:de:96:69:3b:4a:18:81:e7:99:53:c5:10:28:16:
6d:fe:27:ae:d7:43:16:df:13:fa:f2:e3:30:2a:99:ba:a8:ab:
69:f2:65:77:df:66:0a:4b:c0:01:8f:2d:b7:7e:86:a6:e1:34:
e2:04:8c:44:b7:7f:7f:ba:92:d9:dc:90:60:46:0c:06:93:9b:
58:b2:11:c2:8a:db:e1:bd:17:ae:f8:dc:ed:c1:42:f3:e3:51:
85:e2:65:a9:0d:7a:a0:43:cb:9a:57:a9:c0:06:fb:b3:63:ba:
9e:d8:88:75:c4:57:ba:c2:23:02:f4:cc:2c:5e:78:47:23:56:
27:31:fe:a2:34:bd:5d:cf:fd:81:d2:24:1c:02:18:63:e3:f4:
dd:ab:ca:48:de:be:4f:3e:ed:19:06:a1:3e:4e:71:16:89:9d:
5c:24:f3:7c:c1:96:55:87:d7:ac:7b:05:95:95:16:cd:94:39:
6f:01:37:4e:9b:9f:53:4f:5b:46:46:34:17:28:90:a9:bb:ca:
eb:c8:46:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 00:26:13 2024 by rpki-client on console-fra.rpki-client.org