Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/S27conaQOscNJqi45CEyuvvgzRE.roa
File: S27conaQOscNJqi45CEyuvvgzRE.roa (raw, json)
Hash identifier: WND9eFhzjb6S2jDpwCuJNHmR42AQ/J7fTbM38YjEAoc=
Subject key identifier: 4B:6E:DC:A2:76:90:3A:C7:0D:26:A8:B8:E4:21:32:BA:FB:E0:CD:11
Certificate issuer: /CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Certificate serial: 018F0C604C902940203331525A6A99B017DD
Authority key identifier: D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/S27conaQOscNJqi45CEyuvvgzRE.roa
Signing time: Tue 23 Apr 2024 19:13:08 +0000
ROA not before: Tue 23 Apr 2024 19:13:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 91.217.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 07:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0c:60:4c:90:29:40:20:33:31:52:5a:6a:99:b0:17:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Validity
Not Before: Apr 23 19:13:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b6edca276903ac70d26a8b8e42132bafbe0cd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2f:de:82:ea:5b:ae:d2:bb:d0:2d:b2:b8:f8:
26:fb:72:0f:56:b4:c7:da:55:a8:ed:9c:d7:79:4d:
28:13:eb:83:27:26:26:a2:cb:2d:77:d1:9f:fb:e8:
0e:87:03:72:f4:ff:16:bd:37:86:a7:cb:eb:d1:57:
98:0e:18:ac:72:28:82:ca:c4:0c:d8:ea:24:c1:f8:
32:73:08:1a:08:28:fb:c7:07:6b:d5:39:37:1e:2b:
e6:1d:42:c2:1b:d2:17:1a:30:77:2f:c7:0a:4a:b1:
e4:be:a8:36:dc:93:1d:e6:21:64:1c:43:fc:5e:cf:
e7:f4:83:9c:87:af:de:5f:fd:19:31:03:9c:f4:0d:
d3:96:10:fb:0d:92:41:ff:d8:ba:53:53:cb:dc:ad:
1b:ae:74:9d:f5:d1:63:f2:20:6f:8d:cc:66:ea:8b:
ba:75:93:80:ae:99:1b:af:2f:f3:2a:41:5d:54:40:
df:fc:a8:27:17:77:3d:1c:7e:8f:68:fc:a7:a2:f7:
27:8d:ed:4c:97:42:00:05:8f:62:45:d9:f5:b6:c5:
be:9c:24:82:71:39:ce:f8:ae:77:2d:cc:7c:d5:4e:
b3:77:e7:c4:6a:50:0e:05:3f:5a:9a:df:bb:d8:ac:
02:94:c9:45:4f:f2:79:61:b9:19:d0:07:07:e1:81:
52:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6E:DC:A2:76:90:3A:C7:0D:26:A8:B8:E4:21:32:BA:FB:E0:CD:11
X509v3 Authority Key Identifier:
keyid:D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/S27conaQOscNJqi45CEyuvvgzRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.219.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:0b:61:95:ac:18:34:6f:a9:40:c6:b9:ca:6d:1b:a2:7d:bb:
13:4a:d9:3b:e1:6f:8a:7e:37:31:08:f5:d5:ac:4b:f0:4d:07:
b8:9d:95:15:55:4f:24:0d:fb:39:b4:ff:7f:89:6e:3c:b1:e2:
e4:97:47:17:8d:a7:7a:9b:d8:46:0b:b6:a5:db:5f:c0:c5:c7:
a4:06:ba:87:6b:49:49:1d:4f:e9:74:5d:10:4c:3e:f5:d7:fa:
b7:49:f0:2a:5c:32:6e:c2:75:ea:ae:0b:28:a5:fc:28:e5:16:
85:96:8c:68:0e:f5:01:ad:19:a2:13:3e:e8:5b:34:7e:be:45:
12:56:a4:1f:4c:7f:e8:3c:95:22:f2:43:bc:cb:96:c3:e6:92:
08:fe:50:eb:59:35:e1:c7:90:af:b3:07:9f:55:28:d8:05:59:
1f:fe:ce:51:f4:f0:26:b6:b1:d0:ac:8e:0e:fa:2c:68:8b:4a:
80:df:21:b0:3e:e0:72:78:40:5a:42:25:dc:a6:b8:a1:d0:10:
2d:f5:ea:56:c2:9d:47:60:65:e2:37:03:90:47:22:41:dc:37:
e2:ec:8b:23:f0:82:60:3c:bf:2f:89:d7:f5:7f:a9:f6:e3:36:
23:1c:16:53:8e:c5:47:6f:dc:9a:50:be:e1:b7:5c:19:8e:c4:
87:c6:54:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:00 2024 by rpki-client on console-fra.rpki-client.org