Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/0OQjO64wlSa1ZXSbOFKHukaMdcI.roa
File: 0OQjO64wlSa1ZXSbOFKHukaMdcI.roa (raw, json)
Hash identifier: +cN+Oj/JAw5Rzh0us6YGV6TKtXXGTXkoxc+Kk0fAhb4=
Subject key identifier: D0:E4:23:3B:AE:30:95:26:B5:65:74:9B:38:52:87:BA:46:8C:75:C2
Certificate issuer: /CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Certificate serial: 018B000682D19F437E8781AF5FAE64302E3B
Authority key identifier: 0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/0OQjO64wlSa1ZXSbOFKHukaMdcI.roa
Signing time: Thu 05 Oct 2023 13:28:28 +0000
ROA not before: Thu 05 Oct 2023 13:28:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60592
IP address blocks: 91.224.58.0/24 maxlen: 24
193.150.132.0/23 maxlen: 23
193.150.130.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:00:06:82:d1:9f:43:7e:87:81:af:5f:ae:64:30:2e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Validity
Not Before: Oct 5 13:28:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0e4233bae309526b565749b385287ba468c75c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d1:37:77:2d:cb:d8:54:7c:97:eb:3b:7c:2e:
d7:e5:ea:6f:b2:83:eb:0c:aa:a1:48:d9:24:32:62:
2b:16:56:c7:b9:64:13:82:ac:5c:8e:b8:a6:79:f8:
30:a6:08:da:8b:c5:28:05:20:39:04:ac:a4:e0:81:
e4:0c:3e:1d:76:f6:7e:e4:e9:20:f6:73:d9:95:cf:
4c:5c:37:e6:35:bf:06:fa:57:6f:1c:a9:43:30:56:
d8:7e:40:4e:6b:81:59:49:58:21:26:93:b8:d2:9c:
59:20:1b:ef:1d:02:c2:17:5a:5e:7d:4b:70:77:53:
21:c5:24:59:2c:7c:29:8a:19:68:41:3c:a0:5a:f6:
6f:5c:4b:44:57:47:01:48:5a:9d:7d:81:00:49:15:
96:65:88:9a:d3:5a:86:d3:46:c0:b2:93:ab:2b:e1:
fa:c6:ec:92:65:77:58:99:8e:c2:e5:e9:23:a9:7e:
7d:0c:a7:55:ff:f1:a7:68:89:45:bf:d9:ff:e2:a1:
ea:a6:8b:f2:23:a3:fa:87:51:a8:22:15:ef:3f:47:
29:1c:15:fa:87:e9:ea:66:9a:fb:c6:9e:b3:a6:3c:
3f:9e:b5:db:57:49:e1:c0:a8:f9:7c:ec:5e:ff:40:
db:93:39:d2:50:d5:b9:da:1a:60:a2:6a:79:12:be:
d5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E4:23:3B:AE:30:95:26:B5:65:74:9B:38:52:87:BA:46:8C:75:C2
X509v3 Authority Key Identifier:
keyid:0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/0OQjO64wlSa1ZXSbOFKHukaMdcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.58.0/24
193.150.130.0-193.150.133.255
Signature Algorithm: sha256WithRSAEncryption
0f:0a:bb:68:bf:f8:17:af:e7:a7:81:c3:2e:f2:47:8d:13:f5:
d9:f9:a0:c4:8d:26:71:97:c3:48:14:98:c2:71:36:8f:c0:04:
85:b8:c9:69:fb:09:14:ea:43:69:89:3c:8f:91:ad:3f:f1:58:
1f:b6:39:d2:a9:e9:2f:4c:86:89:00:89:22:eb:30:a1:a5:2b:
15:e1:63:08:5f:ae:38:a8:7f:fe:07:49:2c:7e:47:f1:8a:3f:
e8:00:72:cb:c3:16:5d:b8:40:8d:49:09:74:6f:86:a1:a0:a2:
90:83:2e:42:d7:a8:8f:2c:39:1b:e6:e8:52:e2:05:c3:b8:73:
c7:88:9a:07:39:90:6b:22:e0:8d:3f:76:26:23:bd:5f:6c:d4:
0b:b1:28:4e:00:b6:6e:ab:39:44:7e:77:be:1c:2b:c0:51:f3:
3f:ed:7a:31:d7:e1:d6:22:b9:c1:5c:b2:7f:56:65:a3:d2:88:
da:e4:f8:86:65:41:71:3f:81:05:26:b2:59:23:d0:36:67:f1:
36:06:e9:04:2d:3c:e8:56:4d:28:d2:cf:19:bf:87:1c:c5:d9:
db:42:a9:5f:d7:6a:ac:a6:b7:43:c3:1c:5c:ce:05:ec:f7:93:
df:15:e8:81:00:4b:d6:03:2c:8b:1b:51:c6:24:7a:3a:a9:7a:
07:4b:da:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:31 2024 by rpki-client on console-fra.rpki-client.org