Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/0JEH5cqd3m5uDOUh6_s9wvXCns8.roa
File: 0JEH5cqd3m5uDOUh6_s9wvXCns8.roa (raw, json)
Hash identifier: IYYIAJ9XYPpowRqap/8RZpoP6IDV8fDQpThPzT0O0eU=
Subject key identifier: D0:91:07:E5:CA:9D:DE:6E:6E:0C:E5:21:EB:FB:3D:C2:F5:C2:9E:CF
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0188FCE835A36EEFA5B6C550624413C6AED0
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/0JEH5cqd3m5uDOUh6_s9wvXCns8.roa
Signing time: Tue 27 Jun 2023 12:50:56 +0000
ROA not before: Tue 27 Jun 2023 12:50:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211694
IP address blocks: 91.229.132.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 28 Jun 2023 12:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:e8:35:a3:6e:ef:a5:b6:c5:50:62:44:13:c6:ae:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jun 27 12:50:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d09107e5ca9dde6e6e0ce521ebfb3dc2f5c29ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3f:32:b7:4f:83:fc:fb:38:22:d5:c8:b3:43:
39:97:de:1d:1b:5d:2e:6d:0e:94:46:46:80:1a:b1:
ad:a8:b6:28:bb:c6:9e:93:4b:68:02:0a:42:e8:6f:
a0:a6:46:3a:37:ae:91:c0:fe:a7:95:1c:82:f5:ef:
d6:d6:c3:8a:23:4f:63:5f:6b:fa:c5:0c:e6:75:89:
d2:67:99:29:3b:02:68:a3:30:04:e7:c8:27:64:d9:
a5:0d:3f:b0:10:05:09:5c:9e:72:b1:3d:6d:91:1f:
97:b1:96:59:de:16:8f:83:8c:d0:be:fd:1b:3e:64:
e9:bb:94:a4:0c:a4:da:1f:84:d3:fe:77:9d:01:b7:
8e:c2:7c:f5:e5:23:be:d2:57:29:30:aa:2e:49:71:
8c:b8:e2:b4:e2:08:65:dd:11:78:7a:55:3e:15:2e:
ab:c8:6d:1d:ae:27:4e:b7:b9:a7:0e:7b:8a:d9:a0:
f2:be:66:5b:8a:64:01:f7:d2:a7:df:26:b4:b5:78:
4c:7e:4f:59:8c:28:7e:fc:96:6f:69:10:f8:00:2f:
8f:83:32:b1:12:86:b4:a2:6e:a6:28:12:82:f7:28:
31:52:f0:0c:96:eb:2a:8d:27:a1:ea:41:86:9c:c2:
b3:5b:6a:1a:fc:95:7c:92:0e:f0:a0:df:cc:64:61:
a5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:91:07:E5:CA:9D:DE:6E:6E:0C:E5:21:EB:FB:3D:C2:F5:C2:9E:CF
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/0JEH5cqd3m5uDOUh6_s9wvXCns8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.132.0/23
Signature Algorithm: sha256WithRSAEncryption
79:5c:7c:5c:65:5f:33:ef:1b:71:ae:8e:9a:35:b8:5e:08:14:
cb:d2:96:5e:85:9e:ed:3d:3c:94:b3:55:d1:dd:e7:8f:b4:2f:
27:a5:5b:d3:65:82:af:74:be:45:9f:e4:a0:28:33:30:24:0d:
01:90:0d:aa:4a:4b:bd:f0:25:a2:14:66:fc:62:62:7d:a1:de:
94:58:36:d1:77:f6:b6:d3:50:7b:9c:ad:f2:76:65:1a:92:08:
e8:64:19:21:9f:24:4a:a5:ec:1a:8c:7b:64:71:0b:1a:74:24:
59:0f:51:ee:34:04:e2:ea:00:61:89:a2:58:f6:ef:94:72:00:
a9:5c:79:0d:fb:5e:6f:f6:8c:2c:30:d6:ad:55:52:ea:a9:a1:
0a:fd:6b:9f:58:a9:c7:86:0a:5b:a3:50:c7:bf:3c:93:7d:22:
50:29:e3:d3:60:1b:50:4f:65:80:c3:89:60:68:c7:fc:b7:c0:
f2:4f:63:e3:9c:f1:e3:d2:a0:41:3d:c8:aa:d4:99:e8:9e:68:
9d:0c:e5:27:8b:07:a7:bc:05:14:01:42:ed:6f:07:cd:f0:a1:
0c:ec:80:80:b3:eb:fc:06:c3:96:35:eb:79:18:34:83:b4:8f:
7f:4c:1f:1b:c8:35:c1:3b:e3:3f:b9:6d:21:45:0f:66:1a:8b:
17:cd:95:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org