Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/A33MlAxENCpZhjAdzY_GlxochpY.roa
File: A33MlAxENCpZhjAdzY_GlxochpY.roa (raw, json)
Hash identifier: q7GOlJitL+d79wis+nxM69YpidDhIFuk/oK/uJoMtuI=
Subject key identifier: 03:7D:CC:94:0C:44:34:2A:59:86:30:1D:CD:8F:C6:97:1A:1C:86:96
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4F8BD6868A23E0FCD7BA6968D64B0
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/A33MlAxENCpZhjAdzY_GlxochpY.roa
Signing time: Sun 01 Jan 2023 19:35:29 +0000
ROA not before: Sun 01 Jan 2023 19:35:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202768
IP address blocks: 91.107.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:f8:bd:68:68:a2:3e:0f:cd:7b:a6:96:8d:64:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=037dcc940c44342a5986301dcd8fc6971a1c8696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:f5:11:a0:15:39:78:7d:54:c0:e1:39:7f:
a1:3e:0a:7c:b0:fe:e3:c6:1d:5b:a2:51:ee:1b:cb:
88:e9:ed:5e:b4:1c:4d:e4:94:24:32:de:82:5c:2b:
dc:1a:93:a7:cf:62:cc:8a:c7:a8:3f:53:58:04:cc:
13:a1:26:93:23:77:06:54:e8:4d:8b:ed:94:07:21:
da:7f:40:4d:f7:ae:41:81:3f:88:3a:00:08:7c:da:
cf:92:c1:96:1a:24:0a:bb:bc:37:d8:c1:54:93:9e:
0d:05:28:4b:54:e6:cd:a0:1d:c3:a1:7c:49:24:a0:
15:5e:4b:c5:72:26:6a:72:f6:39:df:1b:aa:71:de:
0f:96:cd:a2:ac:ca:25:24:cb:97:a8:71:fa:26:91:
b2:a6:e6:3b:87:e0:b7:26:d6:af:ef:0b:79:f4:9b:
f8:e1:66:3c:ba:83:78:b5:37:ce:0d:0c:de:4c:4b:
2b:8b:3e:8e:a9:af:28:38:a5:e3:e3:3f:22:44:ed:
80:aa:47:c2:e6:70:36:e5:59:f8:c5:aa:a4:7a:f4:
9e:ab:44:bd:75:8a:ae:4b:62:3f:ea:49:bb:77:40:
94:ea:99:c7:78:ac:77:26:20:05:42:b9:fe:71:67:
bb:70:f5:ae:ba:06:be:6b:cc:5f:d6:30:a5:eb:36:
a7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7D:CC:94:0C:44:34:2A:59:86:30:1D:CD:8F:C6:97:1A:1C:86:96
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/A33MlAxENCpZhjAdzY_GlxochpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.107.115.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:77:b4:fb:d7:63:d9:b7:0d:d8:d4:c7:22:db:9b:0d:37:08:
bf:27:71:9a:17:db:52:a7:39:85:59:ed:f4:e7:ce:78:01:d5:
a8:4e:b5:38:44:46:2e:30:6d:f5:b0:35:6c:1f:71:14:90:b1:
35:5f:fc:5c:1d:cf:95:ed:33:53:e4:5e:83:0b:66:9c:13:29:
f0:f6:fe:50:c3:b1:c8:ec:4b:6a:4f:d9:59:3e:4c:a9:ec:14:
3c:02:4a:d2:f3:6d:dc:4c:80:d4:54:ed:72:bc:eb:b9:02:41:
3d:db:f8:ad:da:59:25:e7:f6:66:fc:c7:1c:c2:59:6e:e4:3e:
6d:f1:49:67:b3:9a:40:ef:ef:0c:f6:2b:74:05:e5:67:f6:44:
74:41:20:81:ef:4d:07:33:2b:a6:4d:41:10:fb:76:6c:cd:95:
db:c6:5c:7e:c0:4d:40:bb:4d:c2:c4:46:dc:91:eb:50:57:c8:
2f:72:99:cf:ab:62:66:a8:10:da:25:2f:fb:46:ff:6f:b6:37:
f8:3b:ef:94:3f:89:5e:98:af:80:1a:b8:85:c7:7b:01:8a:08:
6c:6f:91:fa:90:67:4c:80:bf:98:48:19:24:bb:ce:be:0e:ac:
fa:7e:9b:6f:70:b6:5d:33:85:6e:a8:80:a2:40:15:d5:58:66:
26:ab:d6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:24 2024 by rpki-client on console-fra.rpki-client.org