Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/GF2Ng0vTPHs6UHkjtHh4fegM25k.roa
File: GF2Ng0vTPHs6UHkjtHh4fegM25k.roa (raw, json)
Hash identifier: xcvzORt6ib7PVFRtXajUSRNIGLcIAJ88bc4A3j9eHVI=
Subject key identifier: 18:5D:8D:83:4B:D3:3C:7B:3A:50:79:23:B4:78:78:7D:E8:0C:DB:99
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B9495EDFA3B0AF25C1D6D77088C37D
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/GF2Ng0vTPHs6UHkjtHh4fegM25k.roa
Signing time: Mon 01 Jan 2024 20:31:20 +0000
ROA not before: Mon 01 Jan 2024 20:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 263759
IP address blocks: 91.229.134.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 04 Jan 2024 09:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:49:5e:df:a3:b0:af:25:c1:d6:d7:70:88:c3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=185d8d834bd33c7b3a507923b478787de80cdb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5c:0a:17:e2:92:b6:b2:de:97:f3:51:7d:9c:
e0:6d:36:8e:47:d3:b7:e6:80:cf:72:e6:bb:db:01:
a7:24:9e:86:8e:a0:f6:69:38:a5:d1:ec:7e:94:5d:
e8:30:73:7d:43:34:85:aa:24:14:fa:1e:01:f2:68:
48:9c:71:8b:d1:68:11:8b:26:3b:a0:28:e5:e7:18:
4d:b7:ad:20:55:0b:4e:36:cc:15:06:7d:bc:d4:c2:
48:8e:fb:a2:73:05:9b:53:01:d5:c1:76:fb:4a:70:
05:5a:c1:35:12:6d:a8:d8:a5:51:c6:7a:27:20:76:
7d:9d:27:9c:6b:bf:c7:bd:2e:92:ef:b0:eb:bd:86:
69:f8:98:21:f1:d6:ad:1d:de:7c:62:52:24:16:cb:
1c:c9:71:d5:12:19:9d:40:31:90:81:fe:f7:e0:ae:
d2:b5:21:6f:5e:fd:0f:f1:ab:29:aa:0e:ab:cd:62:
9b:ed:f4:2b:2a:fd:61:5c:88:37:2f:00:2a:c8:2d:
ed:8c:dc:a3:3a:8f:d1:a1:cf:f8:96:6c:e1:00:de:
21:95:ab:41:ae:50:e3:29:bd:88:11:51:2a:2b:1a:
cd:75:92:24:1a:e2:a1:47:bb:27:d7:07:ca:d9:f0:
67:31:bd:b5:c1:49:98:f9:c5:1a:9c:6b:01:7d:b1:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5D:8D:83:4B:D3:3C:7B:3A:50:79:23:B4:78:78:7D:E8:0C:DB:99
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/GF2Ng0vTPHs6UHkjtHh4fegM25k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.134.0/23
Signature Algorithm: sha256WithRSAEncryption
34:9d:e6:00:db:36:44:2b:51:f0:f6:99:6a:ca:40:9f:ca:0e:
72:dc:99:de:0c:c5:62:16:e3:43:b9:63:ed:eb:86:07:93:96:
7a:b5:5d:2d:1c:28:e8:b5:c7:7e:6f:78:63:7f:05:38:d0:97:
34:3d:ca:0a:af:0c:31:ca:27:df:7f:a9:f4:da:58:bf:dc:e2:
62:ff:5e:9d:ca:c2:b4:bf:64:40:a9:db:33:e2:2e:2f:32:ef:
83:9d:5f:a3:8c:6f:9c:ec:51:48:aa:e9:35:44:58:0c:d9:d2:
5b:85:97:4f:87:6a:60:fb:83:10:3d:5c:dd:c4:da:b0:d5:a0:
37:ef:64:6a:1a:c0:65:68:15:96:27:a4:29:3c:65:18:b2:03:
88:f3:d9:94:66:d1:49:1a:af:8d:41:59:63:40:31:67:80:82:
4f:66:3f:5f:cd:a3:22:3f:74:3a:56:23:ce:0b:f5:2d:a6:3f:
55:ef:fd:54:3f:46:5f:67:6e:4b:90:4c:44:fd:2e:f9:c9:39:
03:61:ec:33:ef:c8:2a:ea:48:84:34:38:8c:73:42:e1:77:10:
35:05:f7:9e:5e:8a:db:c1:de:a1:11:9a:a9:4f:7f:e3:3f:5a:
2e:59:d2:14:11:37:67:58:3e:2c:ee:6d:16:02:f1:58:32:87:
2d:3e:d9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org