Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/BDG9j1oQYyc5MfM-PPx8Z_KTQKI.roa
File: BDG9j1oQYyc5MfM-PPx8Z_KTQKI.roa (raw, json)
Hash identifier: mJPi3G94Ev06I9mwslQxLlz+YseNeCCM/8r3wFwlAmA=
Subject key identifier: 04:31:BD:8F:5A:10:63:27:39:31:F3:3E:3C:FC:7C:67:F2:93:40:A2
Certificate issuer: /CN=927105c9d1fb0690554971f464ca21f4a45c106a
Certificate serial: 01856CAF20085A5612739346D03E251CAD48
Authority key identifier: 92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/BDG9j1oQYyc5MfM-PPx8Z_KTQKI.roa
Signing time: Sun 01 Jan 2023 09:34:54 +0000
ROA not before: Sun 01 Jan 2023 09:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49123
IP address blocks: 91.212.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:20:08:5a:56:12:73:93:46:d0:3e:25:1c:ad:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927105c9d1fb0690554971f464ca21f4a45c106a
Validity
Not Before: Jan 1 09:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0431bd8f5a1063273931f33e3cfc7c67f29340a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:47:04:3e:0e:1d:05:f6:c2:80:09:ae:b1:5b:
a8:a6:5f:37:c3:8d:77:87:fa:09:52:28:b3:33:eb:
85:85:f9:c9:3b:b3:1b:f6:9a:3c:90:a2:f8:a6:49:
2a:09:c8:f5:ec:87:4d:54:b7:ab:a5:66:12:72:b8:
95:2b:7e:9d:8e:2a:fa:6e:d4:4e:cb:0b:6e:1d:ef:
e5:6f:92:65:be:3a:3f:8d:9f:c2:59:9b:fe:de:52:
4a:f3:c1:6f:74:de:42:92:dc:1f:9e:ac:5a:6f:b1:
11:76:7c:e9:43:96:68:83:03:a7:e0:e4:18:5c:e7:
b1:38:b5:17:72:6b:e8:9a:3b:44:14:9f:c5:30:bb:
90:69:0a:09:b4:c3:17:35:d2:1c:54:b6:ca:5f:76:
f4:71:35:75:f0:28:16:66:10:6c:33:6e:ed:9f:51:
84:c7:33:66:91:33:19:60:5f:95:f0:87:2c:08:1e:
ca:18:6b:e6:3c:2b:5d:a1:36:b1:60:d8:91:bb:59:
4c:1f:17:34:a8:42:a1:fb:83:b4:51:58:49:e5:b3:
d6:3d:38:a5:6f:80:07:de:36:ff:27:18:13:98:0f:
cc:ca:cd:63:da:91:50:7f:ec:de:e2:07:d9:ca:b5:
96:df:81:98:ab:b3:c0:c2:a1:c7:22:88:3e:47:c7:
fe:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:31:BD:8F:5A:10:63:27:39:31:F3:3E:3C:FC:7C:67:F2:93:40:A2
X509v3 Authority Key Identifier:
keyid:92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/BDG9j1oQYyc5MfM-PPx8Z_KTQKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.143.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:fe:99:6e:cc:30:01:04:29:4d:88:78:05:d8:7b:b2:74:02:
95:96:bb:2d:16:c2:da:50:b8:e7:34:a0:39:e4:e1:be:70:b9:
90:71:79:e5:55:43:f5:e8:5a:e8:14:7a:1e:68:ed:38:71:90:
3d:d7:aa:69:05:c2:7f:86:bf:fd:c7:0d:4d:f9:53:b4:c6:e5:
c1:bb:1d:4d:fb:b7:92:02:e3:56:d1:ba:de:ba:5f:d0:5f:d0:
0e:76:68:cf:a0:69:54:a2:d4:c2:8c:a7:6e:d7:01:32:cd:77:
b9:bd:09:35:1e:94:27:fc:b1:11:45:ce:de:2b:2d:42:7b:fa:
2c:f7:2f:6f:15:bb:8e:fb:ca:c8:b6:a2:ce:a9:d3:41:b2:d9:
cc:e1:ce:81:d0:ef:35:1a:12:5d:be:f4:cc:35:dd:c2:e8:9e:
96:c1:9e:14:cb:2e:3d:bb:1c:f1:0f:c8:60:f0:98:84:29:70:
0d:7e:cc:65:8c:4a:2d:cd:74:c0:ab:84:d3:c8:3a:1b:68:38:
5b:0e:2d:ba:a7:a4:cd:fe:93:af:4d:97:8b:b8:31:ee:b5:83:
a5:f6:b5:74:de:1b:61:73:e6:83:75:f5:3c:c6:fd:2f:6b:87:
7e:88:06:9d:68:e1:29:56:d3:47:34:cb:f5:b9:62:ef:ca:c5:
4d:7f:b9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:08 2024 by rpki-client on console-fra.rpki-client.org