Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/0nTYjAKt7OXeHHk-WX7XwMz-D-U.roa
File: 0nTYjAKt7OXeHHk-WX7XwMz-D-U.roa (raw, json)
Hash identifier: 4/Mwhdq9xNoe+CXZc183CzMYmSUUfZrUKvHZerRBtBk=
Subject key identifier: D2:74:D8:8C:02:AD:EC:E5:DE:1C:79:3E:59:7E:D7:C0:CC:FE:0F:E5
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 019007E5BBD99CF18C773F832946F64BF4C0
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/0nTYjAKt7OXeHHk-WX7XwMz-D-U.roa
Signing time: Tue 11 Jun 2024 15:23:34 +0000
ROA not before: Tue 11 Jun 2024 15:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 91.186.216.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Jun 2024 14:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:07:e5:bb:d9:9c:f1:8c:77:3f:83:29:46:f6:4b:f4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jun 11 15:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d274d88c02adece5de1c793e597ed7c0ccfe0fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c9:1b:d4:63:25:31:8a:de:fa:d7:8b:6f:35:
81:19:a0:5c:09:b2:4b:69:83:59:3b:32:42:a8:06:
78:8c:89:27:12:e1:95:95:d0:49:66:5c:96:a1:ff:
5f:c5:5e:e3:56:9f:3d:b9:35:28:d7:5c:5a:45:28:
0f:14:c3:4f:0c:74:89:23:fc:63:b2:0c:af:14:f2:
57:ac:94:30:54:65:01:69:61:1d:69:66:ff:f2:c1:
61:3c:2d:c3:d6:a2:e5:3b:d9:50:5b:75:70:dc:91:
04:93:8a:17:9d:bd:5d:0d:b0:91:a4:9d:c0:64:8e:
6a:7f:1f:0b:05:bb:d4:50:f4:f4:08:a9:69:f6:63:
09:f5:51:f4:fd:b0:8c:15:4d:cd:8a:66:4a:eb:20:
45:9b:8d:20:7b:7a:86:c1:df:71:89:92:64:74:e8:
74:ae:db:04:87:98:67:1a:a7:36:e9:f8:60:36:4a:
03:24:ac:bc:06:86:5e:ba:9d:05:98:6e:21:25:b2:
f4:7a:f3:56:99:4d:09:79:57:dc:a6:13:c2:9f:83:
f7:62:a6:d9:a8:f3:58:ea:9a:15:a2:2f:c3:56:87:
a5:1a:16:6e:b2:7c:67:d2:1f:cb:88:7d:ee:0b:b2:
1a:5d:b6:e3:ab:47:6d:17:21:0c:6a:d6:5e:81:1e:
0a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:74:D8:8C:02:AD:EC:E5:DE:1C:79:3E:59:7E:D7:C0:CC:FE:0F:E5
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/0nTYjAKt7OXeHHk-WX7XwMz-D-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.216.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:59:9b:a1:02:5d:aa:25:ef:a0:c6:c8:8c:81:57:0c:fa:07:
58:f5:e6:5d:48:a7:07:10:7f:b8:a4:ee:21:5a:19:8d:80:46:
db:fb:d7:dd:8a:44:ee:d0:ca:cd:61:93:30:d1:e1:a8:d7:39:
ef:7d:89:23:ae:88:a3:37:64:36:1d:52:59:be:e9:aa:4e:54:
db:8f:8e:16:ea:c6:72:40:a8:44:c5:66:80:33:71:ac:fd:dc:
c5:d3:f9:3d:78:7d:2e:4e:b4:7b:54:54:32:f8:69:ff:fe:6d:
98:33:d2:8a:d9:20:40:1c:f1:db:ed:07:40:13:1d:7a:56:0b:
08:8c:e6:40:d8:97:a7:f1:6e:ee:8f:d8:4c:59:88:3e:13:0d:
ad:49:9a:32:27:85:80:25:bb:3e:d6:04:ff:32:5b:c8:06:53:
59:2b:5c:33:72:40:3a:ba:0e:89:3b:2f:55:64:2d:2f:e1:1d:
35:f6:25:79:5d:de:da:f4:7d:78:24:1e:64:ec:8b:34:0e:55:
32:cd:c2:88:b9:b2:4f:a2:8e:04:1f:25:af:44:e5:ab:29:a0:
9c:aa:48:9d:63:17:80:d1:90:7f:b8:d7:c7:1e:ae:a8:af:79:
28:59:62:93:4e:00:de:cb:24:fb:33:67:d5:52:e4:45:8c:ff:
8e:81:b3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 15:38:09 2024 by rpki-client on console-fra.rpki-client.org