Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Hx9X6J-bLHCVCZGt6qgn37f-Mdc.roa
File: Hx9X6J-bLHCVCZGt6qgn37f-Mdc.roa (raw, json)
Hash identifier: P4jSoArD7kSnuwANIGe5PxLKKuAl+hXVGjnh/ZVrJ30=
Subject key identifier: 1F:1F:57:E8:9F:9B:2C:70:95:09:91:AD:EA:A8:27:DF:B7:FE:31:D7
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018943CE75DE63BFA41A7AE451F23309982E
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Hx9X6J-bLHCVCZGt6qgn37f-Mdc.roa
Signing time: Tue 11 Jul 2023 07:15:51 +0000
ROA not before: Tue 11 Jul 2023 07:15:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 81.28.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 04:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:43:ce:75:de:63:bf:a4:1a:7a:e4:51:f2:33:09:98:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jul 11 07:15:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f1f57e89f9b2c70950991adeaa827dfb7fe31d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:3c:95:8c:38:40:1d:fe:1d:2e:58:99:eb:
d6:32:79:fa:d5:5f:42:92:1c:27:6c:6c:b5:e3:1f:
fb:91:bb:c4:03:af:ae:6e:02:cd:21:d6:b9:51:41:
6a:5f:f2:52:ff:d8:8f:5a:b3:07:cd:54:d0:fb:b9:
66:2f:c8:52:10:e0:38:42:11:92:42:14:4c:89:a5:
0f:5d:b4:4f:81:6b:42:a2:8f:76:96:f8:a2:1c:53:
fb:a9:d0:fd:3a:b1:22:49:27:db:81:f8:f9:39:2e:
38:dc:59:7c:2a:95:a2:c6:b7:c5:7e:ee:5f:9a:52:
8c:b7:84:c7:90:18:cf:05:37:54:4a:3f:68:5f:7b:
16:a9:29:fa:e3:ad:a8:48:dc:26:ee:e6:4d:55:10:
b9:b0:8e:31:a9:3c:8b:d3:88:37:78:10:b2:e3:d7:
e9:05:48:97:f0:67:83:27:64:43:c9:a2:09:69:e5:
4d:a1:a7:6c:e3:39:1c:19:f9:57:d5:68:5e:13:4c:
8c:59:f1:99:f0:92:bc:a1:20:ac:88:0f:38:4c:27:
ed:3f:00:fd:85:bf:00:82:81:5d:75:86:a2:98:6b:
dc:d3:f0:b4:17:31:bb:83:76:2f:22:9e:bd:46:de:
84:87:fe:7b:ae:2a:b4:b1:c9:21:42:a5:09:61:f4:
fd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1F:57:E8:9F:9B:2C:70:95:09:91:AD:EA:A8:27:DF:B7:FE:31:D7
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Hx9X6J-bLHCVCZGt6qgn37f-Mdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.28.252.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:d8:a9:6e:05:5b:7d:a5:53:7e:db:27:29:fe:8f:6e:2f:b0:
ed:46:28:36:e6:ca:e1:c2:d6:7e:27:3d:ff:88:2f:0a:73:90:
94:9a:15:d5:48:65:60:d8:9c:dc:56:6e:b0:ac:76:e3:ea:b8:
89:6f:61:f5:98:91:94:e9:3a:5b:f2:be:5f:2c:8d:d3:6a:d2:
e0:9d:e0:d3:1f:38:01:ac:88:3b:10:20:4c:e4:c8:86:a0:08:
ae:2d:0b:c1:70:fb:2a:97:27:4a:bd:1e:56:f6:f2:06:23:11:
32:4f:d2:c9:0e:fe:14:63:d3:a6:ad:f4:02:53:20:fa:b6:4c:
0c:66:1a:06:9e:db:f9:20:5d:3c:a5:b2:cf:a0:a7:76:0f:ff:
fd:41:b1:fc:89:1a:83:c8:e8:c8:2b:9f:0a:f2:5f:51:45:ec:
79:58:52:ad:6e:e6:7b:d0:ce:cf:d4:39:11:ca:fa:e9:9a:93:
e8:a3:30:fe:9a:6b:12:0f:ea:31:f5:22:75:14:de:3b:8a:3d:
13:6e:b3:cc:13:75:72:c6:dc:fd:b4:ba:96:4d:44:0b:fe:eb:
ec:42:6d:ea:93:e1:ac:4d:b7:53:e2:bc:56:ac:d6:09:10:9e:
1c:03:c0:2e:d7:4f:a3:cf:11:60:f0:7e:af:42:6d:ae:bf:14:
11:67:11:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:42 2024 by rpki-client on console-ams.rpki-client.org