Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/9Ti6670bhwIWYWyK0ik05101Yik.roa
File: 9Ti6670bhwIWYWyK0ik05101Yik.roa (raw, json)
Hash identifier: CEWvkp0YZy/tiQDDbymC0s0Ly9bBqkC+TvzAWzR+p5M=
Subject key identifier: F5:38:BA:EB:BD:1B:87:02:16:61:6C:8A:D2:29:34:E7:5D:35:62:29
Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Certificate serial: 018FE50CBA49D33764129E8F2223835D7A5E
Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/9Ti6670bhwIWYWyK0ik05101Yik.roa
Signing time: Tue 04 Jun 2024 20:59:27 +0000
ROA not before: Tue 04 Jun 2024 20:59:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13030
IP address blocks: 91.90.166.0/24 maxlen: 24
2001:67c:328::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 05 Jun 2024 05:14:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e5:0c:ba:49:d3:37:64:12:9e:8f:22:23:83:5d:7a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Validity
Not Before: Jun 4 20:59:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f538baebbd1b870216616c8ad22934e75d356229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:93:a6:bd:66:7a:19:d7:a5:8b:d0:1c:ec:
67:f1:0a:b5:c3:3a:e5:04:01:d6:ea:64:02:27:e6:
ce:b1:4b:86:89:20:2a:ab:0c:e0:04:8a:90:69:bf:
cd:a5:fd:7a:0f:85:2a:49:e5:d6:1f:f7:4d:7d:a4:
63:0b:41:90:32:da:d4:2d:41:bd:18:9f:9e:ad:3b:
fa:03:15:44:5c:56:e9:dc:43:9d:8f:cd:97:a1:ff:
4f:fe:c3:57:e4:c6:52:ef:31:b5:00:b4:e6:c2:84:
1a:00:43:a1:d5:57:10:6e:d0:75:9e:a4:32:a3:d1:
89:b3:f3:78:21:c6:83:eb:79:af:bf:1e:e9:1b:12:
ca:9d:e8:36:d2:ae:5b:3b:83:64:9a:ee:cb:e5:6f:
15:44:27:72:ae:40:76:66:14:29:cc:ea:b4:9b:82:
18:ea:4c:7c:7a:57:02:4b:60:90:3e:bd:11:e6:4e:
fb:e1:0d:4f:9c:5e:4e:e0:ab:1d:3e:63:07:41:8d:
07:27:0d:ac:16:4e:9f:43:a8:9c:ea:ce:d2:62:29:
88:28:da:50:80:1a:b8:b4:e9:22:53:7e:32:b2:f3:
76:cd:56:3b:7d:42:e4:8d:cf:ad:67:12:fc:7d:9e:
2a:a8:19:fb:4b:a8:f8:15:57:45:f5:24:e8:42:ce:
27:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:38:BA:EB:BD:1B:87:02:16:61:6C:8A:D2:29:34:E7:5D:35:62:29
X509v3 Authority Key Identifier:
keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/9Ti6670bhwIWYWyK0ik05101Yik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.166.0/24
IPv6:
2001:67c:328::/48
Signature Algorithm: sha256WithRSAEncryption
52:74:e5:ae:74:b0:13:bd:7b:f3:b4:9e:ae:61:66:77:3a:13:
a4:65:ff:62:5e:90:c6:20:d4:d3:2d:2c:d9:66:d6:b4:2b:b7:
8b:18:b8:ae:61:a1:34:c2:29:8f:02:de:21:5c:11:3e:ac:2e:
36:88:4a:76:2d:68:45:5b:ec:30:a8:de:54:34:cf:f2:b2:86:
7d:79:ac:6a:bf:fe:41:cb:e5:7b:d9:24:6f:05:b5:fb:13:9d:
e3:cf:cc:5b:f5:6f:83:cb:36:24:be:ab:8a:99:07:5f:29:d7:
64:32:e1:1f:d4:e0:54:08:4a:0c:e9:5d:05:c7:81:f4:79:f6:
9a:44:1b:2e:f9:86:e5:15:12:c3:23:74:3f:b6:46:7f:63:30:
37:6f:19:eb:24:95:25:74:df:aa:33:a8:fc:c8:ce:2d:2c:c4:
0b:85:0d:5e:9b:e7:d9:c6:5c:0e:6a:f0:6b:2d:98:8a:ce:43:
46:b5:36:eb:57:d5:b0:79:b3:4d:4b:da:aa:01:e7:67:32:6d:
34:76:26:f7:ea:4e:cf:bb:95:c3:07:12:dc:c2:7b:c0:f5:00:
7b:28:b4:f0:95:92:91:76:39:92:ac:6d:72:68:45:3e:d4:02:
97:db:a9:bd:81:3b:31:3d:2a:8e:92:44:4d:a9:88:2b:9a:02:
59:71:13:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:36 2024 by rpki-client on console-ams.rpki-client.org