Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a1c8bd-bd94-46f6-aa49-7417e71a76e8/1/IG-Uq0g-dzYMdpG2eKpVCAbaa2w.roa
File: IG-Uq0g-dzYMdpG2eKpVCAbaa2w.roa (raw, json)
Hash identifier: N1k28RvoH722gccvVNFZqEJ+IJxHQSa7JudjRCANnEs=
Subject key identifier: 20:6F:94:AB:48:3E:77:36:0C:76:91:B6:78:AA:55:08:06:DA:6B:6C
Certificate issuer: /CN=f68bc2019e8e506e399cbf6586699cc886fc20f6
Certificate serial: 01856C5CB4FE12C94F110F038398BEEA00E9
Authority key identifier: F6:8B:C2:01:9E:8E:50:6E:39:9C:BF:65:86:69:9C:C8:86:FC:20:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ovCAZ6OUG45nL9lhmmcyIb8IPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a1c8bd-bd94-46f6-aa49-7417e71a76e8/1/IG-Uq0g-dzYMdpG2eKpVCAbaa2w.roa
Signing time: Sun 01 Jan 2023 08:04:53 +0000
ROA not before: Sun 01 Jan 2023 08:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51533
IP address blocks: 91.217.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:b4:fe:12:c9:4f:11:0f:03:83:98:be:ea:00:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68bc2019e8e506e399cbf6586699cc886fc20f6
Validity
Not Before: Jan 1 08:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=206f94ab483e77360c7691b678aa550806da6b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:70:99:6b:77:f6:5e:66:cf:4a:99:b8:3b:
07:e5:e5:56:f7:44:7b:21:ad:17:a8:69:17:d5:ae:
6c:23:1b:ab:b7:cb:83:9f:73:a1:6b:dc:11:47:9e:
f2:56:25:0d:8b:e2:70:d3:1d:49:53:e9:10:f3:ec:
49:b5:34:72:77:ab:74:b7:d9:1c:1c:56:83:0d:3f:
95:da:0d:43:03:18:6b:0c:22:bc:04:1c:e9:f8:88:
00:f5:3e:eb:e4:88:0b:4c:88:80:b1:68:e3:29:53:
3f:35:1e:7f:8e:a9:f6:ca:c2:4c:58:e1:94:04:bc:
fe:dc:e7:bd:b6:ed:28:73:11:ff:6e:b9:fd:9f:74:
c1:65:a6:9e:c5:0b:90:68:fd:bf:56:d3:5d:9f:ef:
c8:17:63:85:2d:8a:f5:47:5c:55:c8:ed:de:bc:43:
f7:b3:be:ce:17:2d:06:c7:b2:37:4c:2e:da:22:e6:
dd:e5:4c:0a:6f:45:e2:4f:dd:47:5e:29:82:21:d0:
21:46:3a:73:2b:94:64:d6:bd:70:de:84:10:82:fb:
18:60:c4:91:1a:0d:e4:4b:eb:41:f8:b5:bc:68:34:
1e:36:db:fa:44:d8:b8:49:a0:b2:ed:3f:9b:2c:99:
6e:44:9e:35:a5:c2:d1:af:26:88:26:0f:05:b5:cc:
57:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6F:94:AB:48:3E:77:36:0C:76:91:B6:78:AA:55:08:06:DA:6B:6C
X509v3 Authority Key Identifier:
keyid:F6:8B:C2:01:9E:8E:50:6E:39:9C:BF:65:86:69:9C:C8:86:FC:20:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ovCAZ6OUG45nL9lhmmcyIb8IPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a1c8bd-bd94-46f6-aa49-7417e71a76e8/1/IG-Uq0g-dzYMdpG2eKpVCAbaa2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a1c8bd-bd94-46f6-aa49-7417e71a76e8/1/9ovCAZ6OUG45nL9lhmmcyIb8IPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.238.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:67:ba:8f:e5:ae:e4:8c:74:f7:26:ba:6a:c9:23:c7:25:bf:
35:a0:67:23:ea:49:fc:1b:7b:ae:38:d4:6b:f4:a7:50:49:92:
76:d8:fe:9f:ad:83:e1:0d:8b:6b:23:3e:38:fe:e4:df:62:9c:
34:ac:76:7c:3b:39:1e:3b:c9:93:1e:9c:2e:b1:89:48:09:17:
f6:88:46:70:5c:32:e7:01:3a:4a:83:dc:25:47:9c:a3:09:de:
57:7a:82:51:ed:98:1a:34:f5:d8:e0:f7:b0:a0:cb:43:fa:f9:
69:8a:9c:db:c5:b1:a9:34:ec:82:3a:f6:20:3b:a6:a4:70:2d:
77:ed:b6:57:aa:42:42:a6:f1:4b:45:fb:b8:2f:7d:6d:b4:b3:
e8:36:f6:c7:1c:5c:44:9f:b4:d7:b1:19:91:94:f9:8f:de:58:
78:53:fc:41:ce:2b:a2:78:d7:91:84:d1:54:e0:9b:0d:45:54:
20:db:9c:39:ea:cd:b4:a8:24:7a:3d:39:e9:db:24:cf:fe:97:
5c:07:bf:f3:e6:fb:46:6f:b2:cd:24:d1:f6:6b:28:ad:78:ba:
7d:a7:74:56:fa:a2:d5:63:72:30:66:1b:53:e4:dd:9e:78:29:
63:9f:ce:e9:5d:5a:61:85:95:2e:ff:bb:6f:f6:13:28:01:16:
63:2e:37:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:08 2024 by rpki-client on console-ams.rpki-client.org