Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/kqZ95bzGiAfTA-aVeK6zAZcFOaM.roa
File: kqZ95bzGiAfTA-aVeK6zAZcFOaM.roa (raw, json)
Hash identifier: EdAFyBM49/ylkJQTvhJW3XLBBDFIsCGhPA69AHBiUWk=
Subject key identifier: 92:A6:7D:E5:BC:C6:88:07:D3:03:E6:95:78:AE:B3:01:97:05:39:A3
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 018570B984CC4FC5D4C936BB411AA2C83E9A
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/kqZ95bzGiAfTA-aVeK6zAZcFOaM.roa
Signing time: Mon 02 Jan 2023 04:24:44 +0000
ROA not before: Mon 02 Jan 2023 04:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15830
IP address blocks: 91.240.206.0/24 maxlen: 24
91.240.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b9:84:cc:4f:c5:d4:c9:36:bb:41:1a:a2:c8:3e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Jan 2 04:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92a67de5bcc68807d303e69578aeb301970539a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:29:f5:13:1b:ba:3c:c4:8b:d5:9b:8d:f7:
94:6a:89:04:c4:11:55:5b:50:d6:15:e4:4e:47:ee:
fb:b9:fc:a8:54:ff:23:ad:cf:7d:ff:fb:dd:d1:3a:
08:00:e8:76:42:e7:db:8e:8c:09:6c:3e:69:dc:3f:
2d:25:5a:f1:23:4c:22:da:21:77:a3:09:f0:d6:79:
18:24:c9:fd:87:43:16:2c:6b:7f:2f:2f:29:4e:86:
44:a9:48:71:1e:9e:2b:71:15:6d:21:b2:cd:05:6b:
53:0d:75:7a:55:de:aa:7f:dc:62:29:b6:f0:29:be:
db:c7:d2:be:99:56:e6:dc:c4:27:09:ae:28:df:c0:
8a:3a:81:bc:57:ff:c2:0a:6b:71:4e:c3:c7:e6:a4:
a0:cd:46:35:aa:39:e4:b1:8e:8c:50:e9:f6:fd:06:
10:e4:bb:0e:79:8f:92:31:59:6a:07:6f:43:52:fe:
f8:83:b9:09:0d:ae:4c:9b:ac:f6:45:1a:16:b5:71:
3a:36:c2:cc:23:d6:c9:26:9d:e7:2b:44:c6:4f:f0:
d6:98:c8:0a:9d:6b:e3:27:aa:b0:ee:95:f7:9b:86:
65:b0:c8:9a:f9:d2:06:ab:0d:0f:39:7a:a2:65:86:
e8:d7:85:ed:07:b2:1e:67:eb:45:c2:5f:96:89:4e:
a2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A6:7D:E5:BC:C6:88:07:D3:03:E6:95:78:AE:B3:01:97:05:39:A3
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/kqZ95bzGiAfTA-aVeK6zAZcFOaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.205.0-91.240.206.255
Signature Algorithm: sha256WithRSAEncryption
17:49:45:72:a0:66:27:d6:50:24:90:77:5a:de:47:55:49:11:
20:ae:5b:e4:f2:69:63:c9:5e:62:7a:a6:ca:23:3e:93:b0:32:
c0:3a:a8:18:4f:08:21:0c:4f:3b:54:cb:ae:9b:aa:d4:c6:3c:
e3:1e:5b:92:81:a6:86:2c:1d:32:c9:fa:57:ce:d6:9f:09:52:
25:79:2a:a3:ee:25:ad:92:93:86:00:b2:72:d8:7e:86:17:b1:
61:78:6a:bb:e6:0d:d8:a4:04:ef:d9:5d:3f:d7:f2:18:3f:63:
96:9c:49:63:8e:2f:52:6f:cd:f0:c8:c3:35:0b:cf:d8:a9:21:
5f:aa:45:63:dd:8c:3c:59:11:7a:aa:08:0a:2a:aa:d5:fa:b2:
b6:df:19:e7:ee:45:72:c8:e3:13:0f:8c:da:97:14:6f:3b:1f:
e4:1c:86:8d:d3:9d:a4:0a:67:c4:97:75:af:70:5c:f7:62:48:
bc:b9:e8:24:a9:41:3f:88:84:05:b6:d8:8c:ac:08:60:77:e0:
f7:dd:f1:b6:ce:72:ae:1d:4f:92:9b:e0:e9:21:92:40:21:37:
2f:26:1b:83:96:1b:19:02:56:21:7e:b1:ae:e2:6a:7b:15:7f:
88:ed:4b:b2:ce:78:39:0a:76:21:e3:13:46:33:4d:9c:fe:c4:
23:66:95:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:30 2024 by rpki-client on console-ams.rpki-client.org