Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/9D6FL3wYe0tMdT41eQ31wQOki0g.roa
File: 9D6FL3wYe0tMdT41eQ31wQOki0g.roa (raw, json)
Hash identifier: um9KkYgpIVJtLfObg9ukIexGOgguATv10GTP66LX9IE=
Subject key identifier: F4:3E:85:2F:7C:18:7B:4B:4C:75:3E:35:79:0D:F5:C1:03:A4:8B:48
Certificate issuer: /CN=46d713ada8dabcf77681c0ca42d9969e447c8ea7
Certificate serial: 019246CAF48637EB3667520AB9B037A38511
Authority key identifier: 46:D7:13:AD:A8:DA:BC:F7:76:81:C0:CA:42:D9:96:9E:44:7C:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtcTrajavPd2gcDKQtmWnkR8jqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/9D6FL3wYe0tMdT41eQ31wQOki0g.roa
Signing time: Tue 01 Oct 2024 06:35:58 +0000
ROA not before: Tue 01 Oct 2024 06:35:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.209.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 09:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:46:ca:f4:86:37:eb:36:67:52:0a:b9:b0:37:a3:85:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d713ada8dabcf77681c0ca42d9969e447c8ea7
Validity
Not Before: Oct 1 06:35:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f43e852f7c187b4b4c753e35790df5c103a48b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cc:c3:b1:c9:26:0d:6b:92:87:49:19:f5:9f:
46:3a:ed:82:37:f7:7b:01:f8:2e:17:c9:d3:ed:09:
61:6e:be:c5:07:73:66:79:81:9b:04:7b:a1:cb:1f:
fd:17:25:81:c9:8c:d6:f9:a4:1b:02:4c:4d:56:49:
1e:58:f0:17:f2:49:01:4d:2f:49:35:23:28:4f:41:
b4:65:6d:3e:1f:6b:46:f0:9a:b7:54:af:57:b6:7c:
62:73:c4:52:79:1f:0d:21:24:f8:81:03:50:ef:d4:
4d:0b:3f:f9:cf:c5:87:da:2d:41:2f:d0:22:72:f8:
04:18:32:03:03:03:43:5f:64:e5:ed:fc:14:00:c7:
43:3a:cb:c8:e7:29:3c:15:c7:2b:42:84:62:05:e4:
6a:39:21:f4:a5:04:3d:0b:61:83:ce:cc:df:8c:b3:
05:64:8b:57:28:7c:63:21:21:13:cc:5b:8e:56:9a:
5c:71:cf:49:7b:e3:14:77:87:c6:7b:7c:cc:ec:57:
3e:f1:16:2f:d2:7a:74:25:c8:63:26:17:32:6a:89:
8c:6f:4f:2d:1f:8b:80:c5:dc:72:a6:8c:a4:a0:d7:
c7:af:3c:5e:d3:3b:27:7e:dc:0e:86:82:3c:73:ac:
4a:7b:ed:20:f3:5e:21:f2:44:9e:bb:5c:5a:e0:97:
e4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3E:85:2F:7C:18:7B:4B:4C:75:3E:35:79:0D:F5:C1:03:A4:8B:48
X509v3 Authority Key Identifier:
keyid:46:D7:13:AD:A8:DA:BC:F7:76:81:C0:CA:42:D9:96:9E:44:7C:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtcTrajavPd2gcDKQtmWnkR8jqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/9D6FL3wYe0tMdT41eQ31wQOki0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/RtcTrajavPd2gcDKQtmWnkR8jqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.40.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:69:cb:ff:76:86:dd:ef:ed:72:94:b5:cf:3a:1f:4b:41:48:
73:59:21:a3:e4:6f:6d:a2:70:6a:a2:58:ec:fe:cc:ea:a3:21:
73:d4:c7:f2:6a:46:70:c6:6c:31:b2:6f:99:09:bd:6a:5e:a9:
f2:e5:b5:b8:b7:e2:7d:27:ed:36:97:c3:e2:20:17:c2:5e:9d:
eb:4f:d1:1c:c7:5e:d9:8b:1d:59:43:7a:c8:15:10:c7:9d:40:
82:95:5b:cb:40:1a:43:4a:6b:66:6e:33:a8:13:7d:5d:ec:c9:
49:d7:a1:3a:78:59:a1:5b:c6:1a:3b:e8:2f:6d:b5:a4:c9:18:
31:94:c6:d2:5a:75:4b:9a:81:e8:3d:f3:7c:f0:72:37:29:f0:
47:4b:6d:3f:49:e3:93:eb:da:2d:5f:bf:85:d2:55:6a:af:60:
c9:dc:5d:8c:0b:5d:2b:54:f9:be:7d:35:36:89:3b:ef:6a:d2:
d1:2b:28:5a:f1:75:cd:08:81:98:7f:a4:8e:94:ad:69:e2:ee:
c5:f7:3c:5b:1e:58:dd:fc:ca:50:10:c8:fe:68:ea:d0:c6:28:
1c:eb:ff:d2:ad:5e:02:f0:7b:46:1c:fc:41:94:09:b7:12:cc:
b1:d4:70:a6:3f:91:3a:c3:d2:e2:ce:39:34:11:8d:e1:47:16:
ec:ef:91:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 12:20:05 2024 by rpki-client on console-ams.rpki-client.org