Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/06utR04Y3wkzpiAZmcJAltGPat4.roa
File: 06utR04Y3wkzpiAZmcJAltGPat4.roa (raw, json)
Hash identifier: 9fTGGftUeuhM1wA8aEI8FMUNKKxNCLO6Ep0PvZEuCmE=
Subject key identifier: D3:AB:AD:47:4E:18:DF:09:33:A6:20:19:99:C2:40:96:D1:8F:6A:DE
Certificate issuer: /CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Certificate serial: 01856F5DEDCDD1E6F95E318B4C5C3192DF3E
Authority key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/06utR04Y3wkzpiAZmcJAltGPat4.roa
Signing time: Sun 01 Jan 2023 22:05:04 +0000
ROA not before: Sun 01 Jan 2023 22:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 91.234.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Dec 2023 04:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:ed:cd:d1:e6:f9:5e:31:8b:4c:5c:31:92:df:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Validity
Not Before: Jan 1 22:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3abad474e18df0933a6201999c24096d18f6ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:fc:d5:b6:0c:35:b3:45:d6:09:9d:a7:88:
db:e1:d2:d6:9c:27:b8:6b:c2:3c:8a:09:f0:d8:bd:
a9:45:c7:b1:3b:07:82:f7:b6:c0:70:fb:1b:ec:d6:
e9:83:18:6b:4a:40:0e:98:50:b7:dd:00:82:33:be:
a5:2b:56:03:3d:64:a4:39:e5:f9:26:10:5d:11:42:
57:1e:b7:58:51:1e:89:25:bc:db:a7:95:69:13:4c:
f8:e1:94:33:79:7d:56:5d:e7:04:10:85:c4:ac:f1:
d8:cc:ad:15:3e:39:5d:11:4b:0f:20:ab:c9:1f:0b:
4d:f0:68:53:c6:99:0e:70:c6:50:1f:e9:3b:b1:2e:
92:dd:3d:ee:e9:3f:02:b8:b5:16:7f:65:15:11:f0:
66:cc:eb:29:bb:24:5c:44:ab:55:75:3d:ef:5a:1e:
19:96:96:b1:a4:2d:5a:71:d9:6d:74:1f:f1:3d:6e:
91:d5:7e:bc:b1:c0:22:dc:32:ef:43:f7:7c:6a:63:
0c:9f:69:0a:a6:99:4b:07:3b:28:3c:16:0a:c4:29:
ec:a5:e9:a7:54:d8:38:6a:81:1c:39:39:cb:19:e4:
df:fe:33:4d:a0:89:96:8b:c3:6c:71:29:01:77:e8:
f1:6f:15:68:df:d7:dc:8d:53:30:04:22:eb:0e:92:
cc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AB:AD:47:4E:18:DF:09:33:A6:20:19:99:C2:40:96:D1:8F:6A:DE
X509v3 Authority Key Identifier:
keyid:26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/06utR04Y3wkzpiAZmcJAltGPat4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.36.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ac:78:5a:bf:95:dd:38:9a:c2:d3:02:f4:62:5d:11:77:60:
a4:bc:fb:43:17:d8:d9:22:6e:04:ef:98:6e:b9:3d:49:19:97:
a7:1b:a5:10:60:30:56:07:1b:1d:d7:f4:7c:ec:a6:df:2f:61:
a5:af:5f:b3:2d:83:8c:f6:15:fc:a7:e4:2d:d2:c9:54:d9:bf:
b4:75:ec:48:09:12:5f:c7:15:60:cf:af:60:8c:50:0c:67:4d:
39:64:88:45:2d:c7:27:4d:a3:d1:bf:52:d6:39:6b:bd:54:a0:
d4:37:3f:ad:5b:0c:3c:f0:44:13:a4:0a:94:78:20:8d:db:f5:
24:d1:9c:16:bf:19:c0:75:0f:b7:4a:eb:2e:8f:a0:50:6e:3e:
bc:7c:d8:73:c8:1d:fb:ae:1f:a1:12:0c:05:ae:82:d4:9c:eb:
e3:89:27:45:ee:fe:bb:a9:bf:8d:c7:a1:ec:f5:0b:0e:85:25:
68:bb:d5:e8:06:67:0c:cd:53:f5:6b:f1:f5:c0:8a:df:96:31:
d8:97:f4:3a:c5:42:af:c1:54:35:86:d4:28:79:74:40:6a:7c:
46:11:e1:9a:d4:e2:66:c1:6c:5b:a3:05:4e:be:1e:0d:bf:dc:
ef:89:90:b6:8a:17:06:dc:bd:b5:fd:28:1d:7d:dc:b0:f1:44:
dd:32:fe:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:47 2024 by rpki-client on console-ams.rpki-client.org