Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/f0U0-W_P6HZu0vvjGzI1ua8nzt4.roa
File: f0U0-W_P6HZu0vvjGzI1ua8nzt4.roa (raw, json)
Hash identifier: p0jwztMpMlNBLpr2CR3n/O15dab5lhIz9nNK+yna0Wc=
Subject key identifier: 7F:45:34:F9:6F:CF:E8:76:6E:D2:FB:E3:1B:32:35:B9:AF:27:CE:DE
Certificate issuer: /CN=798e0da4f91007b224768acb4d131f12517d2b7a
Certificate serial: 0188D87D843547718CF65126C3C835741BD4
Authority key identifier: 79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/f0U0-W_P6HZu0vvjGzI1ua8nzt4.roa
Signing time: Tue 20 Jun 2023 11:08:04 +0000
ROA not before: Tue 20 Jun 2023 11:08:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31229
IP address blocks: 91.202.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Jun 2023 10:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d8:7d:84:35:47:71:8c:f6:51:26:c3:c8:35:74:1b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798e0da4f91007b224768acb4d131f12517d2b7a
Validity
Not Before: Jun 20 11:08:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f4534f96fcfe8766ed2fbe31b3235b9af27cede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:04:9d:a2:18:fc:fb:f7:8c:63:f7:78:80:c7:
5e:51:b4:fd:d3:57:ce:84:af:6f:15:66:82:b9:ca:
8e:23:87:31:b7:35:f8:53:bd:b2:b9:9a:b2:ba:43:
d0:6d:52:f6:88:66:bd:86:bf:fc:37:4f:0c:3e:f0:
46:7f:88:a3:09:c1:63:24:fc:13:29:f3:46:11:7d:
10:44:10:38:35:36:06:dd:7a:78:0e:33:1f:92:29:
b1:ca:d5:09:21:9a:13:10:72:30:d5:27:98:c0:1c:
ab:f9:6f:11:95:a9:90:04:e3:b1:44:1c:ef:97:e8:
1b:36:35:65:5f:e0:73:35:19:98:22:17:4e:eb:0e:
73:68:f4:93:ec:f0:62:42:ee:2a:9f:ce:24:99:d8:
63:9e:b4:fe:7a:26:82:af:88:30:2c:7d:97:01:02:
de:01:23:98:8a:49:6d:8a:2f:89:05:6b:ea:09:ef:
cf:e6:6e:35:70:59:f8:81:cf:64:2f:e8:68:d4:4e:
94:09:70:b5:5c:00:37:32:f7:38:b8:60:de:37:e6:
7a:60:e9:83:dc:6d:59:c3:2d:2c:61:86:5e:3d:30:
fa:35:f0:b2:c0:bb:1b:37:60:08:7e:36:65:13:94:
59:33:67:0b:f6:e8:a5:85:58:42:fd:40:0b:d1:4d:
6b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:45:34:F9:6F:CF:E8:76:6E:D2:FB:E3:1B:32:35:B9:AF:27:CE:DE
X509v3 Authority Key Identifier:
keyid:79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/f0U0-W_P6HZu0vvjGzI1ua8nzt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.101.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:95:eb:1f:82:9b:b8:44:9b:87:16:7b:6d:8a:b5:c4:bf:7a:
57:1b:6a:9d:11:8e:5e:e2:e9:bb:85:22:33:f4:47:09:53:55:
96:b7:79:1d:d9:f0:b2:3a:4b:db:c4:41:78:95:da:30:da:54:
57:3a:c0:75:d3:8d:2a:cb:74:ac:cc:0f:88:16:b1:52:33:d5:
f9:db:d9:03:05:fe:d9:87:ac:8c:90:c3:2d:1d:5e:67:40:47:
7b:55:be:0f:64:21:37:7f:30:19:95:c6:0b:08:59:3d:c3:f3:
4d:b5:0d:98:17:c7:1e:e8:57:c0:39:1b:36:f5:35:a4:63:ad:
c3:b8:5d:ca:42:cf:a6:4b:9a:d7:02:ae:f2:8e:29:b8:dd:e6:
8e:6f:00:51:2e:5b:22:f5:bc:3d:9d:f9:7d:5d:90:09:10:05:
ee:c6:5c:e7:82:f0:82:a8:b1:e8:df:55:f5:10:6b:26:d4:32:
52:5e:91:f9:9c:c4:79:65:09:b1:28:2c:5c:e4:e1:32:e0:ab:
16:08:69:ee:27:ee:c2:0a:5d:b6:93:ec:63:e1:cd:92:1c:bf:
10:6f:17:6e:97:d8:80:58:b0:23:d5:13:98:94:8b:e3:83:4c:
76:00:13:ad:52:8c:f7:d3:04:42:dc:85:59:35:b5:73:a8:f8:
6b:bb:dd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org