Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/8A0d-yrpASZcttZLNUq8Tfa5JF0.roa
File: 8A0d-yrpASZcttZLNUq8Tfa5JF0.roa (raw, json)
Hash identifier: FIQmqdFNtnSQQqYHvVqBNlxwmunlDg73bHzLPTJLYpU=
Subject key identifier: F0:0D:1D:FB:2A:E9:01:26:5C:B6:D6:4B:35:4A:BC:4D:F6:B9:24:5D
Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Certificate serial: 01874148FA628824CB1DBE4906CAC7C3498B
Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/8A0d-yrpASZcttZLNUq8Tfa5JF0.roa
Signing time: Sun 02 Apr 2023 09:25:14 +0000
ROA not before: Sun 02 Apr 2023 09:25:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3225
IP address blocks: 91.216.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:41:48:fa:62:88:24:cb:1d:be:49:06:ca:c7:c3:49:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Validity
Not Before: Apr 2 09:25:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f00d1dfb2ae901265cb6d64b354abc4df6b9245d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4c:32:45:c3:f6:b5:52:5c:48:c0:30:5f:a6:
5e:40:fc:c8:39:20:4c:4f:ab:32:81:34:ae:6c:13:
d3:1f:80:b6:06:bf:36:20:21:21:05:36:0d:00:5c:
26:fb:d4:2e:5e:ea:01:9b:92:b2:e6:3c:6c:21:17:
8a:4a:b5:5b:18:44:fa:ef:08:d5:fe:ed:b7:5f:a4:
4a:02:55:fb:ca:f6:a4:33:6e:a2:5a:c6:63:97:e7:
fb:0d:4a:37:30:1e:47:51:d5:37:df:e4:44:65:0b:
cd:97:48:47:bb:7f:9f:a4:79:2c:5c:80:bd:be:d6:
2b:51:9e:44:5b:0a:31:5a:2d:5b:44:e8:31:9a:ae:
6f:d1:96:6e:81:3d:5d:e9:eb:25:89:35:4e:5b:e5:
cd:de:97:47:73:a4:48:c9:ae:b8:bf:fb:8d:da:67:
42:15:9c:61:09:ad:b7:00:4a:28:cd:69:da:91:31:
80:31:47:ad:c6:3f:d1:eb:cb:d4:5e:94:4b:06:cd:
98:36:da:a4:59:e7:6b:1b:8b:a3:c8:ed:e3:0f:e9:
31:03:cf:51:23:0a:71:58:54:1e:b9:6b:19:43:b4:
cd:db:8a:39:32:d4:91:96:50:05:fa:b6:01:e4:c6:
4a:b4:7d:7a:6f:37:da:05:03:04:be:2f:4e:07:d3:
b1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0D:1D:FB:2A:E9:01:26:5C:B6:D6:4B:35:4A:BC:4D:F6:B9:24:5D
X509v3 Authority Key Identifier:
keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/8A0d-yrpASZcttZLNUq8Tfa5JF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.188.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ab:4e:a2:70:9f:ae:0f:2d:37:94:57:1e:ec:b8:56:5c:73:
62:b5:c2:e1:63:43:1d:7f:f8:f9:6f:70:f8:c6:60:68:81:81:
41:90:81:84:c7:66:0f:ac:13:a3:39:85:ee:77:43:bb:e4:67:
35:51:49:7a:fc:fa:33:d5:a5:28:27:73:95:42:b5:05:42:89:
68:20:15:e4:f1:f8:c4:41:d2:ba:dc:f3:e0:dd:7f:e2:89:0a:
f6:18:35:73:85:e4:bc:6a:f2:0c:8b:5e:2d:fc:7e:40:44:40:
fd:a1:4b:2a:21:ed:39:63:b6:0f:02:93:ac:02:7a:50:6c:8e:
60:74:ae:d9:ac:5a:e3:5f:be:76:c2:42:7c:c4:af:22:bc:c2:
14:86:79:2a:69:5b:c1:77:fb:46:7a:b2:ae:0f:5c:9c:0b:ad:
f1:02:f5:ff:a5:47:71:1e:99:93:09:d2:62:9d:cb:0a:c0:de:
57:7e:c7:54:16:25:b6:97:8d:e5:18:f7:2b:05:d8:d5:09:67:
72:b4:b8:40:0d:6a:b2:1b:0a:35:6f:73:24:8a:a5:06:26:89:
45:e2:5f:c5:9b:86:5a:0d:54:f3:e9:a6:23:a6:dd:84:05:8a:
0a:6f:15:a5:f2:e0:62:8c:33:d6:9d:a9:28:16:9c:a5:e3:ae:
f8:a2:1e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:59 2024 by rpki-client on console-fra.rpki-client.org