Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/o0IW3HxZj7uj_jR8wwm-4O0HHXQ.roa
File: o0IW3HxZj7uj_jR8wwm-4O0HHXQ.roa (raw, json)
Hash identifier: bjxrnfPkEaYhj8N7mnysXWYxXdWbvvm/w7WYjqmIRtc=
Subject key identifier: A3:42:16:DC:7C:59:8F:BB:A3:FE:34:7C:C3:09:BE:E0:ED:07:1D:74
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 01860A6E901BCBD57AAEC8545AD0A31F247C
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/o0IW3HxZj7uj_jR8wwm-4O0HHXQ.roa
Signing time: Wed 01 Feb 2023 00:44:23 +0000
ROA not before: Wed 01 Feb 2023 00:44:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210439
IP address blocks: 91.239.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Mar 2023 10:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0a:6e:90:1b:cb:d5:7a:ae:c8:54:5a:d0:a3:1f:24:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Feb 1 00:44:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a34216dc7c598fbba3fe347cc309bee0ed071d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e9:8b:67:3f:21:c3:e7:bf:f1:e7:01:60:57:
ac:86:5c:61:8c:bc:11:d9:79:42:35:9f:cb:c8:36:
11:ce:df:81:d8:54:49:f6:0c:df:fd:bd:f8:5c:2e:
14:db:76:27:24:3c:f7:03:32:de:13:dc:f2:fd:66:
ca:9f:f2:fa:93:fe:f6:9b:ab:14:47:48:bf:38:1e:
90:41:bc:f9:40:8a:36:50:0d:f8:cb:27:bd:cb:95:
a8:77:15:c1:a5:13:78:47:54:05:31:81:92:42:dd:
2a:0b:a4:82:b4:f7:64:dc:9c:6c:36:c5:4b:1a:96:
b9:a3:1b:71:9a:9e:db:14:39:9f:4d:52:35:88:4a:
d1:37:9e:60:78:cd:71:f9:40:ce:22:fb:e0:06:f1:
06:3a:6a:8f:77:05:38:d9:b2:28:25:a7:cd:c8:4b:
bd:9c:4d:c0:dd:c9:f6:10:c7:9b:5f:b2:07:a4:35:
b9:da:fa:48:49:d3:e4:f7:f0:1e:dc:5c:3a:2f:4d:
02:2b:25:86:43:db:1f:54:f0:8d:5d:34:17:57:ff:
3f:04:40:1e:be:bf:f4:1e:0f:e6:bd:b3:ab:2c:16:
43:07:36:12:46:77:0c:b8:c9:50:dd:bf:98:27:a5:
a4:c4:05:9b:8b:e6:48:02:2d:19:e7:72:9e:c1:a5:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:42:16:DC:7C:59:8F:BB:A3:FE:34:7C:C3:09:BE:E0:ED:07:1D:74
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/o0IW3HxZj7uj_jR8wwm-4O0HHXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.62.0/24
Signature Algorithm: sha256WithRSAEncryption
88:5e:16:fc:6f:d0:f7:ce:1b:a9:95:7e:a0:b5:46:46:3f:9d:
4c:d3:ae:ce:9a:ab:63:02:cd:b3:f2:f4:71:d4:8b:84:63:57:
91:ca:3a:18:ab:a1:a3:ff:49:6d:6a:33:77:d3:48:c3:5c:f0:
d7:40:2a:55:54:14:59:f2:a7:39:e4:08:1b:78:c9:7a:fb:27:
be:cd:2f:47:b5:ba:ff:98:be:80:1c:5a:17:8f:b2:1c:3b:ca:
19:d9:05:81:54:fe:d3:44:9e:20:b8:b3:39:b8:a8:13:6c:4c:
f0:73:a4:24:81:9c:87:a9:a9:7e:b1:6e:21:35:4c:35:ee:aa:
42:3d:c3:a4:01:de:48:69:df:32:22:2b:4e:fc:ba:89:28:07:
77:ad:99:34:5d:73:a3:84:fb:a2:e6:98:fa:56:dd:12:da:d2:
c0:a0:a5:e6:60:4e:b1:0f:6a:f4:02:21:3e:be:75:2d:89:56:
5d:76:1f:ea:ce:8d:41:f8:9c:82:ce:f3:1d:29:2d:69:3e:64:
bb:95:eb:82:12:e5:44:7e:2d:37:ca:d4:c7:6d:5d:16:84:3b:
79:27:80:4c:9f:d2:48:d4:2d:61:7a:98:fa:c8:da:53:02:42:
7d:e4:f4:b5:bd:c4:d4:73:01:ac:16:dd:a7:fe:66:eb:4c:26:
7d:47:0e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-fra.rpki-client.org