Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/D-pftAoIwL6X5ZQiIy4ygZ8hhTE.roa
File: D-pftAoIwL6X5ZQiIy4ygZ8hhTE.roa (raw, json)
Hash identifier: 7m32jdJ9jEfyikWitfjPODUJ3rHdzGR4JuSRrv8rqD8=
Subject key identifier: 0F:EA:5F:B4:0A:08:C0:BE:97:E5:94:22:23:2E:32:81:9F:21:85:31
Certificate issuer: /CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Certificate serial: 0185719586E8C3677F085C78DC25B60E9975
Authority key identifier: 15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/D-pftAoIwL6X5ZQiIy4ygZ8hhTE.roa
Signing time: Mon 02 Jan 2023 08:25:02 +0000
ROA not before: Mon 02 Jan 2023 08:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 394814
IP address blocks: 91.239.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:86:e8:c3:67:7f:08:5c:78:dc:25:b6:0e:99:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Validity
Not Before: Jan 2 08:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fea5fb40a08c0be97e59422232e32819f218531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:79:84:96:24:bc:16:53:ad:c0:de:2c:3b:
13:b2:96:8d:5b:f6:82:8a:aa:a6:f8:14:68:1a:7f:
bd:18:fb:cf:b1:25:02:e0:36:ed:ab:33:e3:77:1c:
80:86:b6:78:3b:16:a6:53:63:4e:60:27:72:3c:90:
68:92:9b:f2:7f:7e:76:35:c0:01:f9:6a:6c:75:26:
26:63:f2:56:cb:ff:32:eb:85:e1:b8:39:0d:d3:f2:
e6:dc:eb:e4:cd:b7:9a:e1:d0:c1:47:bf:0f:b1:83:
54:3a:9a:37:3e:99:49:37:89:28:f4:c7:4f:20:d5:
62:d5:03:ea:04:6a:c8:84:8d:f2:98:81:b3:29:c2:
bf:5b:5a:fb:ed:42:dd:a1:c2:24:b2:ea:3e:77:4c:
50:c9:98:76:d4:5d:20:c4:8b:5a:e0:ea:75:1b:2c:
16:b0:ca:87:62:4e:23:6c:2c:ac:29:6e:d5:55:cf:
b5:e2:59:ff:03:36:a1:44:fd:db:87:a4:37:a3:7d:
ed:34:57:2d:7e:2a:d7:b0:14:a3:ae:b7:9a:43:08:
32:1b:49:a5:88:df:18:3f:b5:99:ca:f1:44:6c:ac:
17:ba:9b:fa:61:66:a2:fc:63:3d:3c:0e:aa:06:42:
52:37:f2:e6:0c:63:5f:0b:43:9f:3b:03:38:0c:5c:
d1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EA:5F:B4:0A:08:C0:BE:97:E5:94:22:23:2E:32:81:9F:21:85:31
X509v3 Authority Key Identifier:
keyid:15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/D-pftAoIwL6X5ZQiIy4ygZ8hhTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.187.0/24
Signature Algorithm: sha256WithRSAEncryption
68:b1:19:80:e8:a6:40:77:46:a3:55:28:de:78:d3:1c:5a:9b:
b1:0c:27:a6:fe:c9:be:19:83:1f:71:cc:1c:85:11:95:8c:67:
39:ff:27:2b:0e:60:e8:9e:ce:17:ba:84:9e:a1:f6:8b:58:79:
41:9f:5c:3a:40:c6:12:46:b6:c3:65:80:40:f0:d8:a4:ba:87:
c6:39:5f:6c:b7:cf:7e:4b:a8:9a:b3:06:55:79:67:d4:c9:94:
1e:8c:0e:f0:31:91:5c:03:b9:f9:fd:6d:b2:3b:9f:69:5a:f1:
4f:1b:91:04:1e:70:99:ec:8f:3a:e1:de:00:8e:29:ea:cb:75:
cb:8c:b1:5f:d5:b9:9b:a3:e8:91:42:f0:54:87:52:71:4f:14:
16:3c:46:d8:c6:29:45:d1:ab:1f:60:3d:28:37:a7:94:03:b5:
61:a2:f7:d8:19:df:a0:61:b0:2e:d4:c0:6a:a5:a7:0c:19:59:
15:3c:4a:d0:4a:3e:fe:71:f8:87:7c:31:8e:a8:6c:bc:0e:42:
7b:bb:fb:27:90:45:ff:11:f3:a4:ad:eb:fd:61:9a:d3:6d:1f:
d7:6d:da:33:fd:f5:60:d1:20:57:50:05:ce:34:f7:f5:27:ca:
dc:b4:60:55:fd:5c:a1:e3:1a:1f:4d:87:26:62:fe:9a:f2:58:
e0:92:47:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:25 2024 by rpki-client on console-ams.rpki-client.org