Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/cRCI3Z6lqHTEedWAeVufZ_dAiBU.roa
File: cRCI3Z6lqHTEedWAeVufZ_dAiBU.roa (raw, json)
Hash identifier: iE63qm3qXelHb1CEMVh0DU62o1qhkK3CjWfq0sNmuJk=
Subject key identifier: 71:10:88:DD:9E:A5:A8:74:C4:79:D5:80:79:5B:9F:67:F7:40:88:15
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018C7458CEACA54C49D60D93DC908A3B0D03
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/cRCI3Z6lqHTEedWAeVufZ_dAiBU.roa
Signing time: Sat 16 Dec 2023 20:37:06 +0000
ROA not before: Sat 16 Dec 2023 20:37:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 91.239.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:74:58:ce:ac:a5:4c:49:d6:0d:93:dc:90:8a:3b:0d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Dec 16 20:37:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=711088dd9ea5a874c479d580795b9f67f7408815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d5:84:af:56:c2:ed:b0:1c:a7:16:c3:e1:82:
d5:37:48:fc:da:5f:07:da:9f:a0:a1:03:47:a1:5b:
8c:66:d0:97:a0:f8:ec:55:93:9a:0d:be:e3:be:a7:
8e:ca:99:79:e8:ba:6b:36:1e:b3:06:4e:82:a3:f3:
63:70:71:49:58:42:6a:5c:ef:c6:c2:20:cf:a1:c0:
b5:a8:b0:61:0d:65:6c:f6:4d:19:5a:21:03:46:57:
b7:9b:1d:69:b0:a6:b5:ef:3f:fe:5f:ca:2f:97:97:
3f:12:b4:fe:2c:12:26:93:88:a2:28:79:9b:40:99:
e4:cd:07:84:bd:85:2d:08:3b:60:03:b5:99:ee:a0:
4a:97:d3:9b:08:05:b8:8c:ef:8b:40:5c:34:fd:41:
21:83:bb:c0:fb:cd:b7:19:16:2f:c0:43:4d:da:f1:
74:c8:7d:45:fe:94:76:88:29:a6:b2:d0:1b:29:45:
f4:9b:f6:00:d2:71:e2:3d:d2:46:c7:d4:89:7b:21:
18:f3:c0:e4:00:1b:a9:d5:a9:a3:92:3a:fc:91:70:
52:1b:7e:df:1c:cb:d4:39:2e:6a:28:32:16:7a:5a:
26:67:3a:50:dc:1a:aa:14:fa:7a:45:cb:de:d3:55:
93:e4:7d:fb:83:f3:8e:b3:5a:89:9a:64:7c:b1:b5:
80:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:10:88:DD:9E:A5:A8:74:C4:79:D5:80:79:5B:9F:67:F7:40:88:15
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/cRCI3Z6lqHTEedWAeVufZ_dAiBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.149.0/24
Signature Algorithm: sha256WithRSAEncryption
11:a8:3e:99:dd:4b:6a:80:c8:fb:d2:a0:63:75:82:69:ea:51:
1e:0b:20:3f:f2:50:3c:a8:83:69:08:02:ad:67:c0:1b:d7:ba:
c7:a5:4f:6d:e4:6e:20:72:51:27:9a:e4:cd:b7:ad:fb:7f:90:
d8:e1:58:b6:7e:74:ae:76:d7:f8:43:e3:c8:37:73:b5:ae:18:
48:d6:d5:20:49:df:0a:e2:bf:03:c9:07:ec:62:2b:15:ee:47:
5d:67:93:fd:28:0b:5f:e1:cf:9d:c0:d5:4a:c7:22:b6:5f:05:
76:65:78:96:02:d2:4f:de:11:33:b9:e5:ce:42:0b:ec:f4:3a:
15:b9:13:a3:bc:d2:a6:f3:d8:70:21:ec:4b:11:10:b8:7d:3d:
12:1e:57:55:f4:0e:41:fd:91:0f:99:01:6e:e6:22:db:14:4c:
09:bc:66:9c:8b:7a:96:79:ce:8a:ac:02:4a:10:b3:29:a3:0d:
c9:ef:61:88:78:0e:cd:a6:7c:17:5d:92:f9:70:a6:54:fc:bf:
c1:59:4e:63:09:11:db:6e:80:04:01:c2:8a:96:9d:b4:44:68:
73:70:9a:57:48:c9:64:e0:63:54:92:04:6f:8b:1c:c8:20:e8:
21:c3:b1:4b:e4:c3:0b:da:f8:17:06:e8:98:0d:37:19:c4:ad:
a8:06:5d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:43 2024 by rpki-client on console-ams.rpki-client.org