Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/O8VJbbYZ7YGzUZtREzruNKC8bQU.roa
File: O8VJbbYZ7YGzUZtREzruNKC8bQU.roa (raw, json)
Hash identifier: PZno9d817pfHp/bOcokgdgah0LpCQ4Rry3PyOFI1800=
Subject key identifier: 3B:C5:49:6D:B6:19:ED:81:B3:51:9B:51:13:3A:EE:34:A0:BC:6D:05
Certificate issuer: /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Certificate serial: 018570D51280B0A290317FAA8F88955E7CA4
Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/O8VJbbYZ7YGzUZtREzruNKC8bQU.roa
Signing time: Mon 02 Jan 2023 04:54:50 +0000
ROA not before: Mon 02 Jan 2023 04:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210593
IP address blocks: 91.247.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:12:80:b0:a2:90:31:7f:aa:8f:88:95:5e:7c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Validity
Not Before: Jan 2 04:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bc5496db619ed81b3519b51133aee34a0bc6d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:e7:c6:2c:5f:08:28:f1:60:79:af:63:2c:
17:c3:cf:03:8c:33:01:12:fc:a3:9c:19:99:37:85:
2d:a4:f2:cd:ee:05:ae:5e:6c:a5:18:c6:da:f4:2e:
23:d3:d9:9b:56:ef:71:68:7d:85:65:75:67:7e:12:
8a:c0:2e:65:22:30:79:51:ed:fc:6e:5a:32:8c:6c:
a0:7c:bd:bd:64:ab:94:a7:61:7f:fa:8b:33:71:1b:
0d:83:1e:d9:1e:40:9b:68:62:66:7a:36:08:fb:f8:
40:0a:70:f5:ec:01:c7:61:79:d2:49:19:a8:52:0b:
1c:f2:05:d6:f0:f9:2d:85:77:94:81:32:3a:7d:21:
8c:2a:ea:3e:67:2e:f7:c1:1f:90:36:df:40:5e:a7:
e5:10:7d:8c:f9:95:bd:e5:fc:a8:d2:27:78:cd:ab:
16:0e:8c:09:27:ea:b1:12:77:15:e2:42:1a:a5:35:
f2:80:a4:95:92:5a:07:22:91:d1:e1:52:26:9e:62:
1e:ad:7b:4c:24:0e:41:c0:b3:98:44:8b:24:ce:59:
1c:e0:bd:9e:b2:3c:08:3b:e7:cd:9a:fa:a1:1d:32:
33:fd:67:52:b5:ac:a8:f7:37:5e:3f:de:72:42:ee:
82:3f:cc:27:7e:5c:e1:c6:e3:22:01:fe:8e:0f:a6:
92:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C5:49:6D:B6:19:ED:81:B3:51:9B:51:13:3A:EE:34:A0:BC:6D:05
X509v3 Authority Key Identifier:
keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/O8VJbbYZ7YGzUZtREzruNKC8bQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.175.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:66:77:ec:74:98:b8:f8:27:c7:74:46:f5:11:3a:49:6a:e8:
ff:07:d6:f8:4f:b4:6e:68:03:4a:05:84:c5:ff:57:43:31:05:
70:e4:0b:61:4b:fb:0f:16:37:a9:a5:b3:13:27:20:8a:89:06:
11:8a:ba:a6:30:f5:eb:8f:be:18:7d:d4:16:90:b9:51:97:3b:
42:fa:8d:b5:ee:8e:5f:fb:21:ce:0d:a9:8b:38:64:f0:b9:ca:
e7:d8:f1:21:19:f1:36:2a:ef:2a:47:96:80:74:81:42:ee:d5:
9e:e8:98:22:51:06:e8:53:b0:08:0e:fd:d3:1d:66:11:9f:7f:
dd:25:45:96:eb:50:71:5c:12:c4:83:80:71:dc:15:6e:89:a4:
f1:f8:80:f6:d9:b3:1d:7c:ea:37:59:85:46:9f:3f:8f:e4:ad:
8c:6d:18:f0:4a:1d:33:f2:62:3f:89:02:e6:8c:3e:d4:7f:16:
9e:70:c4:ba:7b:b6:0d:71:c5:7b:45:73:6b:20:d4:94:23:e8:
f2:32:7a:1c:f0:81:ac:b8:db:41:a9:e0:1c:34:09:cd:e8:8a:
75:87:72:8d:d0:3d:36:14:05:58:cb:ca:88:b4:65:1f:f9:33:
d7:f8:46:d0:10:39:1d:80:6f:ee:a4:1d:c1:41:96:9c:60:94:
69:37:04:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:17 2024 by rpki-client on console-fra.rpki-client.org