Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/9Mtr9-yx4a0gP2Fddtoi0KEGhzY.roa
File: 9Mtr9-yx4a0gP2Fddtoi0KEGhzY.roa (raw, json)
Hash identifier: AMpw5k7kEQgjPR7Ia2uy6gcYoy14++dMXoGMHaH3PkI=
Subject key identifier: F4:CB:6B:F7:EC:B1:E1:AD:20:3F:61:5D:76:DA:22:D0:A1:06:87:36
Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial: 01928A4CA634F80F4E4F04BB90180A9011AB
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/9Mtr9-yx4a0gP2Fddtoi0KEGhzY.roa
Signing time: Mon 14 Oct 2024 09:12:11 +0000
ROA not before: Mon 14 Oct 2024 09:12:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51167
IP address blocks: 91.239.43.0/24 maxlen: 24
213.109.76.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 15 Oct 2024 08:37:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8a:4c:a6:34:f8:0f:4e:4f:04:bb:90:18:0a:90:11:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
Validity
Not Before: Oct 14 09:12:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4cb6bf7ecb1e1ad203f615d76da22d0a1068736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:54:e8:97:0f:7e:0c:c8:e2:2b:fb:49:1b:
85:9f:7b:07:ce:94:31:6a:d1:e9:aa:78:78:c7:49:
23:b9:42:d7:ba:7d:fa:74:b9:0e:16:69:20:c2:7b:
ba:ea:f6:c9:f7:42:29:f2:2a:b7:db:20:94:12:df:
cc:2c:16:19:b6:9e:49:aa:07:fb:c6:81:d7:7f:a5:
e5:d8:5b:e5:6e:49:e2:5c:77:e6:db:1f:70:42:3e:
26:33:a0:35:9b:75:1f:2e:04:47:ed:c3:10:55:0c:
2c:e4:c0:28:62:7b:99:42:8c:c2:00:af:e6:32:2b:
f4:ac:f7:27:fc:b2:50:4a:1d:e7:e6:ab:40:7c:4e:
16:f2:32:00:c4:03:94:7a:d0:1d:9d:50:d0:ad:7e:
2b:9b:6a:3f:b5:ba:61:3b:e1:0f:24:8a:b3:24:fb:
3c:a8:0d:51:d5:52:04:58:e8:fa:76:46:4e:4b:26:
3b:cc:2d:96:a5:02:d0:ce:0f:d3:9a:80:7d:70:f7:
96:55:14:85:83:18:4a:0b:d8:92:16:91:5a:f4:1e:
85:44:99:3b:d6:7f:35:c1:af:e9:36:4f:9b:10:1b:
f7:b4:17:ee:e1:68:0c:45:49:f3:0c:37:cb:fa:f2:
83:65:f6:a4:cc:03:e3:e6:59:25:09:02:50:07:58:
18:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CB:6B:F7:EC:B1:E1:AD:20:3F:61:5D:76:DA:22:D0:A1:06:87:36
X509v3 Authority Key Identifier:
keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/9Mtr9-yx4a0gP2Fddtoi0KEGhzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.43.0/24
213.109.76.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:18:81:8d:55:42:18:43:e5:d4:9e:d3:9a:08:2f:36:ab:01:
d5:04:81:99:68:74:9a:71:51:fe:68:3d:f9:1a:2a:1f:91:ed:
9f:fb:52:55:d5:0f:ef:b7:3c:8c:05:44:34:7f:ba:22:47:0f:
ee:3b:22:3e:21:08:55:b1:3d:d1:d4:ab:2e:43:de:50:96:08:
27:fd:6b:fb:64:32:03:40:bd:c7:0c:1d:ed:81:79:d2:8b:25:
f4:90:ed:ba:6f:92:4e:33:76:23:d9:72:31:e8:df:ec:a2:84:
df:19:8c:b3:30:70:83:56:78:5f:bd:55:ac:6f:d4:77:6a:5d:
a3:8a:8c:3e:a0:bd:9d:75:2d:20:c9:27:4b:da:15:df:84:a5:
d0:9a:53:0a:ae:cd:e1:f8:4d:f0:f9:c3:14:f9:e7:af:c7:46:
5a:21:ae:85:d0:87:7d:a3:5b:36:1a:d8:7f:e9:1b:91:5f:cc:
a6:e2:96:30:28:cf:3b:85:79:a0:76:24:76:d2:4d:b1:b7:fd:
1d:b9:fe:fe:d6:d9:94:ac:16:a8:3c:75:23:dc:ad:73:87:ee:
0f:10:67:e0:b5:cb:b5:6c:02:46:ef:8d:ca:27:89:81:db:02:
df:61:f5:2b:53:a0:fe:dd:4f:85:68:4c:2b:d3:d1:ca:c3:66:
1e:76:3a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 10:34:59 2024 by rpki-client on console-fra.rpki-client.org