Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/4AA8a2M_AqwJErfQ9EEkhIhdqTM.roa
File: 4AA8a2M_AqwJErfQ9EEkhIhdqTM.roa (raw, json)
Hash identifier: dSFjVtx9clbHmT88rq5tDX22OImHNUgRtlpaVSGk78g=
Subject key identifier: E0:00:3C:6B:63:3F:02:AC:09:12:B7:D0:F4:41:24:84:88:5D:A9:33
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01856CF85862CA93BF1D156360435AD43ECE
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/4AA8a2M_AqwJErfQ9EEkhIhdqTM.roa
Signing time: Sun 01 Jan 2023 10:54:52 +0000
ROA not before: Sun 01 Jan 2023 10:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57509
IP address blocks: 91.191.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:58:62:ca:93:bf:1d:15:63:60:43:5a:d4:3e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 10:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0003c6b633f02ac0912b7d0f4412484885da933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:33:db:f0:1e:63:bf:d3:2d:22:de:b9:0e:64:
75:62:55:65:19:6a:65:43:be:55:04:68:4d:88:1d:
39:e5:56:6d:86:38:05:05:b2:40:bb:c1:af:18:5e:
bd:12:14:dd:f1:73:5c:41:eb:9f:f5:5e:f5:51:9d:
47:53:f5:69:4f:18:91:d5:4b:da:20:9c:a6:89:0c:
52:73:c2:f2:6c:8f:c5:f1:82:a5:a4:9a:dc:1f:bc:
e1:83:f0:12:88:e1:91:f5:93:fd:fc:a4:af:4e:cd:
c3:89:6f:4c:f6:3e:ea:e0:30:99:22:4f:b5:ce:ac:
27:ef:f7:58:70:80:01:3d:2a:63:28:b6:f2:51:89:
8d:49:29:be:62:f7:1d:f9:7f:8e:bd:36:ef:90:2f:
cb:56:24:84:3b:43:2a:19:eb:e9:10:74:73:d1:61:
b9:a0:04:7b:94:96:ca:80:3d:42:a0:6a:45:a4:d0:
b2:37:9d:c0:47:b0:51:9a:2c:be:5d:d6:12:f4:36:
43:f1:c2:be:3d:b7:0e:94:32:e6:41:50:6a:e6:1a:
86:7d:06:f6:98:cc:a3:be:25:1f:53:f3:e5:b8:0c:
5b:85:0d:be:42:01:ed:bf:ec:71:64:55:d3:0e:91:
98:65:7c:e7:9f:37:53:ee:e7:d1:35:0c:5e:ba:56:
21:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:00:3C:6B:63:3F:02:AC:09:12:B7:D0:F4:41:24:84:88:5D:A9:33
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/4AA8a2M_AqwJErfQ9EEkhIhdqTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.191.209.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:76:8d:2a:2a:f5:3b:b2:81:40:2e:88:57:12:48:11:b9:9f:
e1:13:4e:94:21:51:9c:90:20:e3:d1:f3:8a:f3:c5:d0:cc:59:
4c:5e:6e:6f:f3:9a:73:43:2d:49:b6:95:14:cd:d3:4d:26:96:
f3:8d:2d:fd:3c:20:cb:f3:35:33:2c:63:b2:d2:43:43:2f:11:
cb:e4:d1:f5:44:c6:2a:8e:e8:d0:b9:6a:35:3f:7a:f0:80:cf:
dc:8a:46:51:9e:3f:e6:ae:c3:84:47:66:c7:f6:ab:3a:7e:54:
06:07:ac:b5:a6:af:4a:9b:50:d7:75:01:72:48:ee:73:fa:72:
73:04:e6:00:8a:94:78:92:5a:a4:7b:f1:14:69:bd:d2:6f:73:
f8:5f:1c:80:b2:95:3f:13:15:71:3c:d9:19:4c:be:c3:d5:05:
87:39:38:50:6e:42:19:c6:2f:ec:0a:44:ff:78:b7:df:2c:6a:
f9:c1:78:b6:4a:23:63:23:5b:85:50:fa:b1:73:11:a6:44:47:
66:34:12:d6:c3:c1:d7:1c:3a:d1:60:c3:7e:cd:27:b2:3f:4e:
19:15:b4:df:ab:44:96:48:b1:4f:2d:d6:3e:01:da:bf:aa:a6:
d4:77:fd:5a:62:6f:ee:c5:a3:74:61:ef:9b:ff:64:14:93:b0:
65:8a:f1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org