Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/DWm2w1qpgdJD91cDGI58Diip-Xg.roa
File: DWm2w1qpgdJD91cDGI58Diip-Xg.roa (raw, json)
Hash identifier: b7F1P3IoJU/dYwR6kwy10npXdvLyZilxheEHUAKDO9U=
Subject key identifier: 0D:69:B6:C3:5A:A9:81:D2:43:F7:57:03:18:8E:7C:0E:28:A9:F9:78
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018C7E1B47A1DB2216D2CB5011F7EA67BCB3
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/DWm2w1qpgdJD91cDGI58Diip-Xg.roa
Signing time: Mon 18 Dec 2023 18:06:06 +0000
ROA not before: Mon 18 Dec 2023 18:06:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 91.239.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7e:1b:47:a1:db:22:16:d2:cb:50:11:f7:ea:67:bc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Dec 18 18:06:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d69b6c35aa981d243f75703188e7c0e28a9f978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:18:c4:2d:bd:d2:36:47:28:90:9b:ed:6e:91:
d0:97:41:fb:49:ab:72:c1:6c:04:37:eb:c9:8c:79:
e4:c6:ef:5c:18:91:4f:92:25:a0:2c:17:dc:4b:99:
26:7e:ad:72:60:c7:fb:e5:f0:c4:17:b4:68:4e:df:
e0:f6:6d:e1:76:d5:bc:12:ed:35:eb:c9:88:07:8d:
0a:d9:df:e1:ec:56:c8:61:8c:e0:37:3a:6a:34:98:
30:65:2d:54:6b:de:ad:19:81:00:84:97:1e:7c:23:
9c:6b:ea:44:9a:ba:8f:8e:a8:a5:87:f7:af:24:ab:
98:9a:ad:c8:bb:67:99:49:0b:4b:d5:52:af:95:44:
d3:f8:7b:8f:a7:a7:e0:10:6b:6e:8b:c0:e6:ed:bd:
0a:38:21:09:c0:5b:ae:55:20:1f:83:38:e0:43:4a:
88:0f:9f:6d:ef:bc:cd:25:9b:23:d0:b2:ec:53:08:
f3:f4:82:f5:eb:0a:af:80:e8:23:32:ef:07:95:96:
9f:3d:e5:fc:b1:a8:68:d8:f3:74:97:5f:5b:5c:29:
48:58:26:10:5a:9a:1b:ff:aa:f9:25:1f:d4:e6:70:
13:3c:ef:d5:f6:e2:2b:4c:c5:f4:77:83:69:f2:0a:
ab:82:dc:24:f0:1e:62:ae:2e:8d:cd:5f:70:93:e7:
b4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:69:B6:C3:5A:A9:81:D2:43:F7:57:03:18:8E:7C:0E:28:A9:F9:78
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/DWm2w1qpgdJD91cDGI58Diip-Xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.149.0/24
Signature Algorithm: sha256WithRSAEncryption
41:ef:09:4b:15:fe:26:10:e6:c7:e3:36:93:e6:7c:56:90:3d:
61:7a:a5:cb:d7:27:52:85:a9:b6:0a:78:b6:4a:a1:8e:e1:ab:
2f:b8:74:42:f3:15:6e:90:5f:c1:99:58:a9:34:12:01:b9:ca:
8c:27:e4:46:f0:b9:d0:e7:cd:59:9a:c9:c7:b6:9d:17:4d:ac:
40:62:4d:69:f1:63:21:ea:7e:14:ea:0c:18:a5:bc:6c:a3:db:
2c:46:d5:fc:fc:77:58:d8:f8:30:ef:d1:8e:c5:8f:34:f6:ce:
75:b3:a6:5c:6c:c1:27:40:95:de:f8:0b:62:38:80:5e:85:d4:
57:ff:81:2a:aa:ae:be:e8:05:84:3d:c7:f2:14:3c:f5:e3:89:
91:d6:45:d7:c5:4f:d4:28:8f:db:c9:ab:99:a3:8b:23:e6:bb:
15:ce:a6:6d:20:75:3b:23:e7:2d:f9:62:82:c0:6a:68:aa:8f:
44:93:98:9a:5b:e9:27:26:16:2d:c6:5b:5c:1e:e8:d9:ec:29:
5a:14:10:d4:34:60:19:2d:30:57:e4:fd:54:3e:71:58:f4:8a:
e8:a4:0a:6b:15:81:75:e2:80:7c:e0:c1:ff:b2:e9:bf:5f:3d:
f9:be:a4:22:d5:3b:21:6f:6f:2c:37:37:98:0c:fe:51:ac:83:
50:7b:e5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:42 2024 by rpki-client on console-ams.rpki-client.org