Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/D21xtiKil8wyZnwz9aeuQ39dat0.roa
File: D21xtiKil8wyZnwz9aeuQ39dat0.roa (raw, json)
Hash identifier: j8A2+uJKHCcEo5lcqNjF8L0PMUIRMjb3PteCdlGHybI=
Subject key identifier: 0F:6D:71:B6:22:A2:97:CC:32:66:7C:33:F5:A7:AE:43:7F:5D:6A:DD
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01856C7858DDACD5FA45E00F58C83BEADF38
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/D21xtiKil8wyZnwz9aeuQ39dat0.roa
Signing time: Sun 01 Jan 2023 08:35:04 +0000
ROA not before: Sun 01 Jan 2023 08:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15440
IP address blocks: 91.244.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:58:dd:ac:d5:fa:45:e0:0f:58:c8:3b:ea:df:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 08:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f6d71b622a297cc32667c33f5a7ae437f5d6add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1d:81:bc:81:05:d1:f3:e3:8f:aa:2d:13:af:
59:a6:6c:6a:3e:c5:cc:d6:79:02:3d:11:fe:7a:3e:
c4:11:81:5e:c9:e8:86:02:fd:33:0c:ee:4d:e7:c5:
1f:94:3c:0b:f8:14:1e:76:5f:37:1c:96:64:45:b2:
54:52:3a:51:41:48:7d:02:e9:ac:4c:c8:14:d6:22:
25:50:a4:e2:e9:25:5b:ab:90:a6:76:8d:b0:3d:7b:
f1:d3:4a:7b:0e:86:8f:a0:70:bd:a0:59:52:8f:40:
8e:bf:60:1b:34:bd:3d:fa:eb:8e:a2:01:f5:fe:3c:
12:f7:6b:fc:9f:40:66:23:85:c1:9c:eb:9f:72:95:
76:f4:89:d5:e6:1b:da:fc:8e:96:eb:da:d6:2f:b8:
90:04:ed:63:8a:5f:0e:9a:c8:7e:ca:65:1a:6e:cf:
c2:07:aa:64:1b:0a:f1:15:89:61:aa:03:b8:cd:1a:
d9:10:05:8e:d3:0e:bf:46:98:e7:b7:3e:b7:68:9b:
35:6b:72:12:9e:64:97:0c:42:0b:5c:92:4e:7c:64:
0c:c2:78:09:d8:b3:17:38:9f:00:25:8c:fd:de:74:
71:a8:6a:47:94:04:43:76:64:81:26:f2:14:c0:e1:
88:da:c9:d3:10:48:c8:08:8b:cc:30:b1:a3:1e:20:
84:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6D:71:B6:22:A2:97:CC:32:66:7C:33:F5:A7:AE:43:7F:5D:6A:DD
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/D21xtiKil8wyZnwz9aeuQ39dat0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.197.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ce:53:17:2c:cc:cb:37:d5:81:71:50:02:f7:3f:13:60:22:
7d:62:ec:01:ee:6b:39:e2:97:8b:b7:e2:68:82:b6:45:74:c1:
8b:8c:ae:33:e5:0d:80:3b:26:27:10:22:f9:9e:d4:94:d1:83:
9a:5a:de:5d:d2:92:2f:96:85:1a:7a:2b:37:33:36:92:8f:64:
fb:c1:fa:ba:53:62:3f:0d:96:4f:a2:90:3b:a2:cc:22:6a:a0:
07:91:29:28:8a:fa:80:b7:0f:a3:82:69:f2:e2:00:03:54:a0:
b4:e6:28:78:71:3a:ea:53:ae:e8:ee:e9:dd:e9:ef:90:a4:80:
5a:80:5a:c2:7f:c8:f6:0d:58:41:b8:58:ba:19:60:65:fd:d3:
36:62:2d:0a:8e:af:21:94:e3:ac:7c:67:f6:a9:39:d5:0a:52:
00:20:c6:b9:48:a3:57:ea:26:65:56:f0:5b:8c:d9:c9:a8:17:
ba:d1:b0:77:49:a7:f3:97:5f:98:65:9b:1c:aa:2b:43:7f:2b:
0d:99:0e:d3:89:68:d5:f3:d0:57:3f:8f:be:fa:dc:e2:26:b4:
ab:15:44:df:ef:14:75:86:29:5d:9d:00:d4:73:6a:f6:f6:e3:
40:c6:bb:ea:c6:0a:92:7e:99:e7:87:35:64:1e:13:96:d8:f4:
cd:4e:76:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org