Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/D8aR8y2RKqgC2vC879FSbgcQmqg.roa
File: D8aR8y2RKqgC2vC879FSbgcQmqg.roa (raw, json)
Hash identifier: 3MIdzWcYMo9U/xKvSdETeBL/cKmiduD1SKr83XqFCzw=
Subject key identifier: 0F:C6:91:F3:2D:91:2A:A8:02:DA:F0:BC:EF:D1:52:6E:07:10:9A:A8
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01864FC22DC1DDDA632027DF81D9C55D21D0
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/D8aR8y2RKqgC2vC879FSbgcQmqg.roa
Signing time: Tue 14 Feb 2023 11:49:30 +0000
ROA not before: Tue 14 Feb 2023 11:49:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203458
IP address blocks: 91.188.206.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:c2:2d:c1:dd:da:63:20:27:df:81:d9:c5:5d:21:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 14 11:49:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fc691f32d912aa802daf0bcefd1526e07109aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fa:1b:65:58:8a:74:af:9b:d8:d9:e0:03:8b:
d0:ba:21:00:e8:c8:20:43:e8:f0:a0:aa:74:c5:41:
7b:4f:2a:03:fd:2d:d1:bc:23:64:a3:8d:18:93:d4:
09:49:d8:41:5a:3c:17:43:09:e5:9f:94:74:fe:48:
98:25:82:0e:47:52:70:89:ac:2d:8a:86:07:a1:92:
c8:60:c1:d6:68:74:ca:7b:63:75:8e:63:ff:e3:0e:
05:19:9d:12:eb:b0:fc:3f:b4:5c:49:35:7b:42:a7:
b6:56:df:c8:0c:02:6b:80:81:bb:86:a1:f4:00:94:
35:b0:ca:8f:a5:9b:52:eb:92:10:1a:6b:59:e8:94:
8a:9a:fe:ca:08:21:2d:2d:68:af:cd:69:98:c6:24:
b4:dd:b1:83:9f:8e:84:9b:20:67:78:da:b8:17:60:
75:8a:8f:53:c0:bb:f0:26:28:5c:f8:64:d9:a1:33:
ad:37:ba:74:7d:f5:c7:ed:ad:51:df:df:94:a3:ab:
de:51:f2:46:b2:04:28:a1:01:dd:7c:24:d2:49:da:
23:ef:14:d5:f9:c4:47:ab:46:f7:5c:d1:81:00:25:
2c:f9:e4:cf:15:6a:69:91:54:57:ec:71:fc:7e:8a:
16:37:ca:d8:4f:0f:47:51:1e:b2:fc:09:1c:a1:52:
aa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C6:91:F3:2D:91:2A:A8:02:DA:F0:BC:EF:D1:52:6E:07:10:9A:A8
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/D8aR8y2RKqgC2vC879FSbgcQmqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.206.0/24
Signature Algorithm: sha256WithRSAEncryption
79:aa:a3:54:7b:46:15:dd:f1:b8:63:18:0a:97:4f:3d:f6:aa:
7c:e0:4f:44:1a:dc:6c:4b:44:24:3c:20:5a:04:d7:af:38:67:
89:a8:62:88:8b:e7:75:ed:93:aa:d6:f3:1c:3e:68:54:77:90:
d6:ca:ad:09:de:ff:12:13:6c:34:a6:b8:ae:f2:d3:c6:70:73:
1a:0f:15:10:7f:d9:a4:9d:92:0a:83:8f:02:06:0b:f8:fd:de:
2f:72:59:20:75:b2:33:6d:93:d5:2b:7b:9d:11:c7:5f:39:a1:
80:9d:b3:8f:88:78:04:98:0f:27:e2:b4:70:56:ea:b8:e6:99:
1c:29:01:cd:ff:8a:52:97:f8:e2:b6:c0:7a:44:83:6d:32:4b:
5b:ca:f9:7f:81:6b:39:07:bc:e2:e4:15:38:d2:ae:4b:2a:df:
8f:87:0c:99:4c:63:b7:28:dc:88:4a:5c:80:00:37:a0:84:c1:
3d:4c:91:80:4a:e4:d2:b1:f8:73:9b:79:8a:e5:52:36:30:57:
42:1b:1b:81:b2:b4:8b:fe:b5:78:f3:f1:c2:ab:8d:e3:b7:09:
61:e1:fe:62:e9:2d:5a:d2:7c:a9:6d:38:bc:d1:86:43:1e:65:
50:5c:a8:ca:4b:93:6b:ef:41:57:7f:cf:e2:90:70:b6:aa:c9:
21:cc:f0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:28 2024 by rpki-client on console-fra.rpki-client.org