Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/sbMYBSCsAKfOWuyA1QBpt3JFDD4.roa
File: sbMYBSCsAKfOWuyA1QBpt3JFDD4.roa (raw, json)
Hash identifier: acksDY9qe2osjll2LtnbD6rkNFTbz+/3fatP/J6+pbA=
Subject key identifier: B1:B3:18:05:20:AC:00:A7:CE:5A:EC:80:D5:00:69:B7:72:45:0C:3E
Certificate issuer: /CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
Certificate serial: 01856DDD4654C8B9EDE2BD152A88BE3D4237
Authority key identifier: 99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/sbMYBSCsAKfOWuyA1QBpt3JFDD4.roa
Signing time: Sun 01 Jan 2023 15:04:55 +0000
ROA not before: Sun 01 Jan 2023 15:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43008
IP address blocks: 91.194.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:46:54:c8:b9:ed:e2:bd:15:2a:88:be:3d:42:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
Validity
Not Before: Jan 1 15:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1b3180520ac00a7ce5aec80d50069b772450c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:56:79:ab:6d:77:9f:13:51:ac:89:1d:e6:a2:
b3:aa:11:ad:84:55:be:42:15:ab:7d:8d:95:95:a7:
ea:fa:60:b4:f1:9b:2e:f8:0d:c2:27:fd:34:7d:d1:
2b:64:e6:18:37:be:75:94:61:b3:1a:e2:55:76:ef:
c4:b9:f2:cf:45:3a:f3:f6:08:2b:6d:c2:17:be:d2:
1f:a1:ab:04:5c:de:8f:ca:44:0f:76:25:f0:00:ba:
0f:e2:b3:0e:12:74:78:2e:4e:5d:e1:11:6f:95:07:
22:76:d9:64:56:13:63:2c:29:67:ef:de:51:1b:d5:
80:c6:72:4e:20:62:3b:ae:ef:9b:29:26:41:88:42:
bf:e4:09:63:5a:93:65:c1:1b:bb:98:2a:45:c9:b0:
56:eb:25:4d:b6:00:be:62:4e:52:48:03:1c:4a:10:
04:80:7a:a0:d2:f7:c0:a5:7f:22:f6:b0:f1:d7:ed:
11:79:6f:b8:f3:2e:cf:7d:ea:d0:53:92:6f:2e:9d:
ab:a9:27:2f:76:49:70:7e:df:82:db:3e:fb:d2:76:
dd:f8:54:cd:2b:cf:1c:dc:6a:e4:b2:5d:14:4c:5e:
e7:0b:a6:37:54:3f:54:3c:98:b9:7d:84:04:85:36:
32:4b:e7:00:5a:e1:17:04:d1:87:b4:d1:21:e2:a4:
36:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B3:18:05:20:AC:00:A7:CE:5A:EC:80:D5:00:69:B7:72:45:0C:3E
X509v3 Authority Key Identifier:
keyid:99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/sbMYBSCsAKfOWuyA1QBpt3JFDD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.30.0/24
Signature Algorithm: sha256WithRSAEncryption
54:d7:37:4b:5d:03:c6:2b:37:1e:91:62:82:42:3e:36:d3:66:
07:57:15:d6:68:3f:25:eb:82:9e:bf:e9:f5:75:6d:9f:23:77:
f6:f1:08:54:dc:7c:38:63:da:16:fb:95:65:60:d3:1d:22:5b:
ef:f4:e4:99:2e:fb:d0:24:7f:02:e1:bc:44:46:ab:c7:c0:01:
06:0c:eb:54:24:32:2e:b2:e8:d2:b3:8f:65:d9:05:c5:84:a2:
6d:b5:e7:e7:06:d1:4d:48:49:10:db:a4:b3:56:3d:e1:a5:1e:
07:68:ba:e0:86:c6:ac:1d:7a:e1:f2:cd:3a:27:73:84:e5:2f:
f8:ff:d8:72:49:fd:10:d6:96:19:b0:96:2b:22:25:bd:23:02:
75:4d:4c:7c:a6:90:e9:2c:0f:6e:d3:ff:b6:28:7c:f8:93:f5:
65:b2:73:af:bf:be:a3:20:6d:95:67:cb:da:91:80:08:55:b2:
c0:9c:aa:cf:b9:48:3e:b8:2d:76:49:ab:a8:56:f4:87:83:d0:
61:14:10:be:43:b0:12:b2:d3:82:ed:3e:48:57:a4:dd:eb:52:
04:67:bd:64:29:d2:b5:cd:5b:eb:00:be:a3:37:53:b4:25:3e:
eb:52:dd:e1:0b:d8:e2:c9:be:2a:d2:c1:ef:d5:36:9b:91:a4:
9f:5d:23:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:14 2024 by rpki-client on console-fra.rpki-client.org