Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/C8i8q_lxgUkFm5l8ZvcEoS2TjME.roa
File: C8i8q_lxgUkFm5l8ZvcEoS2TjME.roa (raw, json)
Hash identifier: 3JV8xE5UOWp7MSLNUU+5Zit7Bp7hG92JnC4yZF5+p0Y=
Subject key identifier: 0B:C8:BC:AB:F9:71:81:49:05:9B:99:7C:66:F7:04:A1:2D:93:8C:C1
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01856C785DFA749219DC9B6266E26607CEB9
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/C8i8q_lxgUkFm5l8ZvcEoS2TjME.roa
Signing time: Sun 01 Jan 2023 08:35:05 +0000
ROA not before: Sun 01 Jan 2023 08:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203758
IP address blocks: 91.244.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Jul 2023 12:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:5d:fa:74:92:19:dc:9b:62:66:e2:66:07:ce:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 08:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bc8bcabf9718149059b997c66f704a12d938cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:2d:dd:4b:99:84:da:3a:0b:51:ed:41:1e:
4a:ab:2b:96:91:7e:c2:43:29:51:ab:fd:e8:1d:1e:
ce:0f:39:10:8c:b4:01:e3:20:11:4e:89:99:59:f8:
5d:e3:1f:e3:79:cc:be:c3:2d:04:70:18:e1:0e:36:
60:39:f5:34:bc:32:8a:a1:d4:2e:b2:41:22:6e:e4:
e5:b7:91:78:94:97:13:17:90:09:d1:49:91:ba:65:
d7:8b:9c:c5:fb:4b:5f:af:3e:b7:7c:0f:ab:8e:ce:
18:0e:d5:1e:5f:5c:b1:0e:6b:1d:b6:d0:cd:f3:6e:
d4:0e:39:96:75:76:2a:66:5d:dd:58:51:d8:22:59:
fd:c6:21:c4:5f:1f:ca:9f:e5:cd:c2:30:72:62:40:
fa:7b:c6:cf:d0:ad:e0:9e:05:fc:2d:9b:13:54:a1:
71:22:48:6a:a6:3e:35:60:40:bd:84:0c:26:8b:87:
a2:80:79:be:e2:da:57:7a:a4:ed:7b:df:80:33:1d:
8d:d0:e0:d6:98:e9:6f:97:56:1a:dd:3b:23:e3:e1:
fc:48:ff:81:de:63:47:91:62:4e:db:cc:c4:55:97:
63:bc:2e:a8:f4:b2:4d:32:8b:a0:8c:63:08:81:e7:
6a:88:48:09:7d:00:10:7a:92:1c:3e:75:82:8f:1b:
05:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C8:BC:AB:F9:71:81:49:05:9B:99:7C:66:F7:04:A1:2D:93:8C:C1
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/C8i8q_lxgUkFm5l8ZvcEoS2TjME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.199.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ba:14:9d:25:09:a2:c7:6f:11:b9:a6:98:2f:70:45:b5:34:
ba:b1:4e:02:1a:f5:28:26:4e:f1:7e:c8:03:d8:9e:11:e2:37:
10:49:76:48:f9:c5:3f:c0:6f:cc:d5:24:dc:c7:13:8d:cf:d6:
86:6d:98:48:50:5b:43:f0:bd:fb:0b:c5:49:d7:91:15:26:ab:
bb:3f:26:7e:c0:85:e8:80:a7:d1:10:01:83:24:85:90:f8:dd:
f2:66:62:f2:a1:cf:39:a9:1f:76:05:c8:01:ce:f2:74:6a:5e:
7a:25:da:d0:f2:22:13:9c:e3:93:72:4b:53:3f:77:da:15:e3:
f1:4e:fc:2b:3f:a8:bc:64:07:a0:0c:7a:23:5f:f2:26:f6:01:
0e:a6:1b:74:65:d0:05:44:46:83:8f:26:db:73:21:03:20:3c:
82:fa:06:a0:47:e2:05:3a:ca:b0:25:74:51:b3:76:b4:0b:66:
d1:9a:1f:b0:33:ad:a0:29:a5:42:e8:a0:da:ea:dc:15:57:c0:
af:07:38:cd:a4:2f:dc:c5:ab:10:ec:0f:47:5a:09:00:86:38:
f1:97:e9:bc:cd:e1:8d:fa:a6:75:ff:33:07:65:a3:4e:84:55:
e1:36:6a:bb:b6:0d:50:f1:49:2d:17:85:8e:4e:55:2b:7f:81:
98:9c:60:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org