Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/D0zLjUKp1K7euTO84iwC3vpoN6M.roa
File: D0zLjUKp1K7euTO84iwC3vpoN6M.roa (raw, json)
Hash identifier: eQDJB2wG57ZCetvb9UlEuUiRoIYscxRWJw0tow3iwqc=
Subject key identifier: 0F:4C:CB:8D:42:A9:D4:AE:DE:B9:33:BC:E2:2C:02:DE:FA:68:37:A3
Certificate issuer: /CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Certificate serial: 018F9FB30D9239639478B95E771B95CA3D94
Authority key identifier: D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/D0zLjUKp1K7euTO84iwC3vpoN6M.roa
Signing time: Wed 22 May 2024 09:47:42 +0000
ROA not before: Wed 22 May 2024 09:47:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51741
IP address blocks: 91.217.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Jun 2024 20:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9f:b3:0d:92:39:63:94:78:b9:5e:77:1b:95:ca:3d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Validity
Not Before: May 22 09:47:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f4ccb8d42a9d4aedeb933bce22c02defa6837a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:76:47:e6:52:6c:99:73:0d:5c:cb:08:38:af:
77:6d:95:a4:c1:65:75:1e:f5:19:4d:cb:f4:df:33:
79:f8:12:de:89:15:30:44:3d:e6:80:cb:be:a4:40:
c5:27:ef:50:2f:b6:00:81:a8:94:44:9a:eb:d5:81:
c6:83:46:af:77:b7:ca:7e:dc:ad:cb:f7:77:0e:d3:
49:c6:20:1a:bc:95:23:6d:58:1a:94:10:64:e3:52:
d6:a6:c8:f7:a1:43:df:0f:3c:6a:60:88:80:4a:a0:
b1:01:d6:62:62:fe:65:e2:c6:d7:9e:e7:53:ce:9c:
33:a4:3a:5c:f3:66:80:65:80:1d:df:a5:cc:c5:c9:
8d:c7:aa:28:49:79:a5:08:d1:a5:e6:b5:b0:fe:c5:
f7:06:4c:9a:42:40:ea:07:05:7f:f4:d2:01:b5:0d:
92:9c:28:a0:d7:26:d7:bf:ee:09:a0:e7:8a:da:6c:
c7:8a:9e:3b:71:5a:61:3f:b3:18:00:69:ad:61:dc:
e2:1a:3e:8c:74:69:a5:e2:ee:c7:5d:7a:93:35:fb:
39:71:fb:48:a3:af:19:88:31:b4:3b:a9:56:7b:31:
9a:7b:52:e5:7a:aa:31:ca:3b:38:9b:ea:01:d3:20:
51:7f:b6:bd:5d:c5:48:0f:a4:50:a2:ab:b6:28:ed:
32:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4C:CB:8D:42:A9:D4:AE:DE:B9:33:BC:E2:2C:02:DE:FA:68:37:A3
X509v3 Authority Key Identifier:
keyid:D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/D0zLjUKp1K7euTO84iwC3vpoN6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.219.0/24
Signature Algorithm: sha256WithRSAEncryption
92:09:9c:00:48:0c:05:37:16:aa:76:2b:10:66:03:8f:be:60:
05:30:cc:b1:9e:58:dc:7b:d6:13:f3:3b:1a:c5:0c:2b:27:2c:
a2:95:0e:fc:41:c5:d0:e8:0e:e4:92:31:63:36:b4:7d:b6:94:
3a:69:ee:6f:05:92:c1:89:e0:a3:42:5a:ba:73:d4:41:8d:9f:
b5:1f:bd:58:ab:c9:78:e0:b6:bb:21:bc:ef:0d:f3:a3:11:b0:
96:c0:2f:c3:55:cb:3b:51:b7:70:08:11:1f:6d:93:c7:a2:a5:
57:2c:12:89:89:d1:4a:b2:b9:28:63:65:69:2a:e6:ed:8c:b2:
dc:22:5b:ff:9a:3a:bd:98:97:a0:1b:ef:53:01:7c:e4:0c:f1:
ef:32:e0:93:11:c8:60:92:41:72:24:20:8d:05:a5:1f:a2:24:
aa:1a:4c:2b:f1:5b:67:e4:85:0c:76:9d:fe:93:61:90:82:cf:
1b:f4:e9:62:51:94:7c:29:15:81:16:bd:a6:84:bd:a5:20:5f:
eb:8d:d6:10:b5:f2:b0:e5:a6:63:92:5a:3d:10:55:95:af:cc:
11:e4:0b:ce:19:e4:04:ae:23:43:1c:59:84:04:01:e0:e6:2a:
99:8a:7e:07:7a:2f:c5:d5:da:b8:09:c4:64:fd:2d:8c:aa:68:
37:86:10:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:00 2024 by rpki-client on console-fra.rpki-client.org