Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/n0lnoQAfdyrvybqg2j1JUFXsmJA.roa
File: n0lnoQAfdyrvybqg2j1JUFXsmJA.roa (raw, json)
Hash identifier: UhpxCDHMLxpVeUdoyxuXY9HMzjJVnUZD3ndVg5samhY=
Subject key identifier: 9F:49:67:A1:00:1F:77:2A:EF:C9:BA:A0:DA:3D:49:50:55:EC:98:90
Certificate issuer: /CN=4a5c86f5ce3b70b5db5315d6aa9d57a001bcd686
Certificate serial: 018ABDB25B6F44E9CC0C0C3A6DC2248C9DFF
Authority key identifier: 4A:5C:86:F5:CE:3B:70:B5:DB:53:15:D6:AA:9D:57:A0:01:BC:D6:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/n0lnoQAfdyrvybqg2j1JUFXsmJA.roa
Signing time: Fri 22 Sep 2023 16:21:37 +0000
ROA not before: Fri 22 Sep 2023 16:21:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211157
IP address blocks: 185.76.151.0/24 maxlen: 24
91.105.192.0/23 maxlen: 23
2a0a:f280:203::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bd:b2:5b:6f:44:e9:cc:0c:0c:3a:6d:c2:24:8c:9d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a5c86f5ce3b70b5db5315d6aa9d57a001bcd686
Validity
Not Before: Sep 22 16:21:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f4967a1001f772aefc9baa0da3d495055ec9890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b2:9b:7b:4b:b3:ca:b4:e0:39:3d:f9:d3:55:
8f:93:57:e9:67:ab:8e:bb:93:b8:6b:b0:6c:f3:41:
7b:ce:8c:58:5a:1c:b1:eb:9a:f0:08:db:46:c7:e3:
70:e3:4d:b1:f2:85:f5:d4:05:83:75:1d:c1:24:8b:
30:30:25:f8:39:7d:f9:bc:ad:97:db:a8:af:0b:37:
67:0f:ab:3f:38:21:26:94:13:e2:61:b7:36:4b:9b:
6c:d9:09:ea:59:c4:e8:1f:9f:97:ed:cd:8b:88:39:
fc:ea:57:4d:19:c1:ba:ca:6f:d0:6c:6b:60:48:07:
84:c0:05:01:5f:71:c3:41:ef:b8:36:d4:e2:3c:af:
80:d4:4b:d8:b5:4a:f9:11:8b:78:88:d4:ae:64:e2:
2e:47:a3:d3:33:51:e7:8b:ab:fe:fc:a2:22:18:33:
a4:c6:54:1e:19:17:f4:fc:f8:08:9f:2e:7a:03:eb:
c1:dd:e4:47:df:f5:8d:d1:da:56:8d:47:29:bc:a2:
67:ef:df:45:ff:d3:ee:9c:ea:be:cb:b3:eb:0c:f5:
98:f1:86:6e:5e:c9:e8:b0:2f:69:0e:27:c1:85:01:
14:66:cc:99:07:93:9e:e3:6b:aa:b7:6b:41:07:c7:
25:ec:29:e9:67:e9:a3:90:2c:fd:78:3e:40:20:f2:
bf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:49:67:A1:00:1F:77:2A:EF:C9:BA:A0:DA:3D:49:50:55:EC:98:90
X509v3 Authority Key Identifier:
keyid:4A:5C:86:F5:CE:3B:70:B5:DB:53:15:D6:AA:9D:57:A0:01:BC:D6:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/n0lnoQAfdyrvybqg2j1JUFXsmJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.105.192.0/23
185.76.151.0/24
IPv6:
2a0a:f280:203::/48
Signature Algorithm: sha256WithRSAEncryption
3f:e5:f0:5a:5b:c2:00:a2:1f:39:aa:ff:ea:a6:40:3a:0a:b3:
4a:88:3c:a4:19:54:c2:69:59:4e:9d:ee:c7:2a:9e:1a:01:af:
2d:97:4e:29:f0:0d:2a:1e:cf:43:e1:6a:23:56:9d:37:b3:4c:
76:36:f7:59:79:a4:86:94:a1:98:86:37:3f:30:28:48:0e:34:
8e:53:3e:33:8f:a8:ae:28:ef:a0:d1:27:91:2c:94:64:a6:09:
61:24:d6:28:12:2b:5f:22:6c:d7:91:5d:f5:2f:3d:96:bc:29:
28:65:01:f6:14:99:25:d6:31:71:8c:c4:04:78:8e:4f:45:19:
5f:5b:f8:65:ba:24:79:d7:c6:a0:12:b4:fd:71:5c:2d:23:48:
e9:79:b2:e9:e7:5b:09:1f:1a:20:22:65:92:98:a3:4b:88:56:
29:55:ae:87:d2:a6:4d:43:42:14:f6:2f:22:c5:6c:b1:86:9e:
0f:5b:88:7f:89:6e:92:3a:f6:b7:01:08:33:a0:6a:04:22:e8:
7a:cd:77:74:58:e4:12:25:1e:36:47:37:f9:23:bc:40:ec:3b:
74:68:d1:2f:e9:59:e5:3b:25:b6:47:26:d9:34:09:bd:90:14:
df:40:84:e8:f9:b7:b8:19:ac:e7:79:f5:44:7f:0a:01:52:a3:
f5:0a:a6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:50 2024 by rpki-client on console-ams.rpki-client.org