Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/c3q9210D6X6E9zg_DANI-tBmEt4.roa
File: c3q9210D6X6E9zg_DANI-tBmEt4.roa (raw, json)
Hash identifier: VOxnPz8LeN6ewxRZXcckZthAkxdxVCduN+g5FDAjcCc=
Subject key identifier: 73:7A:BD:DB:5D:03:E9:7E:84:F7:38:3F:0C:03:48:FA:D0:66:12:DE
Certificate issuer: /CN=9f87521f15e0457288a9f196a8c8865c36922150
Certificate serial: 01856F548AAB29D15A67BF2FBA3C4C5E9F8E
Authority key identifier: 9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/c3q9210D6X6E9zg_DANI-tBmEt4.roa
Signing time: Sun 01 Jan 2023 21:54:49 +0000
ROA not before: Sun 01 Jan 2023 21:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50984
IP address blocks: 91.216.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:8a:ab:29:d1:5a:67:bf:2f:ba:3c:4c:5e:9f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f87521f15e0457288a9f196a8c8865c36922150
Validity
Not Before: Jan 1 21:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=737abddb5d03e97e84f7383f0c0348fad06612de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3b:59:57:57:43:33:1a:aa:20:81:73:28:ce:
55:85:41:00:41:a0:75:e1:cb:4d:dc:26:da:fe:eb:
7a:09:ba:92:83:3d:3b:93:e6:94:0d:81:da:c4:33:
d0:5e:c1:ea:96:78:26:4d:07:0d:ba:a0:c7:e2:3f:
7c:ee:8c:e8:03:6b:7f:8a:58:69:58:81:5d:fd:fd:
2e:ed:7a:05:9b:91:6a:b2:c4:ba:08:36:bc:67:e1:
0c:95:6c:76:6a:b4:2a:7d:c3:d3:df:68:81:b3:39:
e9:3a:e0:0b:64:a6:5e:75:7f:ac:6b:3d:d9:db:45:
07:f0:e2:57:16:5d:89:2f:31:ad:1f:fb:6a:83:78:
c1:84:3a:7a:24:94:16:78:cd:79:10:32:87:11:88:
25:36:9c:6b:52:d0:23:f4:1f:3d:ac:67:a2:1c:c5:
4c:55:92:69:38:62:e7:ed:f7:8d:31:d7:c5:6f:4f:
08:d8:16:cd:e8:8d:9c:6b:90:f3:07:db:42:06:df:
9a:eb:e0:14:2a:44:7f:76:44:36:c5:10:5c:5a:d7:
cf:d9:ae:98:f0:03:c8:8a:52:a3:6c:63:91:8d:62:
27:3f:e8:bd:5e:53:8e:f6:54:be:1a:e1:00:83:69:
6d:ef:e3:a6:1a:a8:7e:b4:7f:73:85:21:4f:07:ff:
dc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7A:BD:DB:5D:03:E9:7E:84:F7:38:3F:0C:03:48:FA:D0:66:12:DE
X509v3 Authority Key Identifier:
keyid:9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/c3q9210D6X6E9zg_DANI-tBmEt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.75.0/24
Signature Algorithm: sha256WithRSAEncryption
46:79:d8:15:81:db:ac:67:12:4f:8f:4f:e0:fa:bf:a8:0a:e4:
f4:80:46:50:12:d8:27:7d:ce:ab:ad:98:76:89:8a:3f:36:c7:
a4:47:ba:cf:73:cb:4b:31:2a:fb:a7:76:ee:5e:bb:8a:60:77:
4e:d5:df:2b:eb:86:d6:19:ef:73:c4:50:42:95:26:d3:f7:29:
65:e7:e3:2b:16:2d:9b:73:e1:2d:1d:56:5d:e2:4b:93:09:7a:
33:e4:d0:cf:47:af:96:ab:ea:c8:a7:ff:db:1e:ed:cc:16:f2:
49:af:4f:7a:d7:fc:1c:46:92:bb:3d:11:a3:9e:6e:4a:9a:72:
24:a1:b5:96:5a:cf:73:95:ef:46:02:06:0f:91:41:66:ea:4d:
23:d2:3c:a2:6e:aa:27:c9:3b:30:74:58:cb:68:cd:83:a7:b3:
bb:7e:e3:43:0e:c1:fb:cd:1d:12:97:ef:ca:ce:22:11:83:ec:
29:be:92:ff:a5:d1:08:bc:cf:0d:7b:ee:2b:bf:7c:0a:95:c6:
b2:a4:be:a7:a7:2a:d3:f9:66:21:d7:c2:ff:71:40:74:7a:8e:
44:a5:1a:5f:f8:c7:22:c9:29:81:11:93:09:71:3c:58:e8:2b:
bc:c3:7f:eb:0d:f7:dd:f3:2a:0d:2e:c0:1a:0e:e0:93:1c:b0:
d9:10:b9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:34 2024 by rpki-client on console-fra.rpki-client.org