Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/lGNSZUVCRlNQQprYTZid1hJ5R1M.roa
File: lGNSZUVCRlNQQprYTZid1hJ5R1M.roa (raw, json)
Hash identifier: dHh+4M+80ipXdbDPxIjJcMMG9h8FqGCJuEtMqngUBG8=
Subject key identifier: 94:63:52:65:45:42:46:53:50:42:9A:D8:4D:98:9D:D6:12:79:47:53
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 01856D41942D8F054E4D4C8AB80AA585323E
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/lGNSZUVCRlNQQprYTZid1hJ5R1M.roa
Signing time: Sun 01 Jan 2023 12:14:52 +0000
ROA not before: Sun 01 Jan 2023 12:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44820
IP address blocks: 91.216.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:94:2d:8f:05:4e:4d:4c:8a:b8:0a:a5:85:32:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Jan 1 12:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=946352654542465350429ad84d989dd612794753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:eb:58:06:dd:e3:9f:4e:8c:f6:2c:3f:33:78:
a2:4c:18:a4:03:05:07:55:55:07:13:07:e3:74:39:
75:b9:78:85:7e:89:ca:dc:1a:45:04:a9:a5:8b:3a:
ba:b2:7f:fd:85:46:39:cd:ba:e0:e0:47:3c:64:85:
2e:70:eb:07:44:a5:3d:ea:e3:bf:ab:03:a9:d5:ce:
25:11:77:43:86:3b:11:c6:59:2d:62:04:75:63:25:
e8:3b:12:33:34:f7:62:03:69:ca:a4:47:9a:77:c9:
05:72:2e:3d:99:13:ea:d0:1c:3a:cc:f3:d4:4c:80:
7b:2a:9c:1b:4a:88:18:88:1f:e5:ee:8b:85:2b:8b:
2d:c0:88:ac:31:24:a7:db:55:22:18:ba:ee:85:ed:
88:0e:61:12:c2:c6:0c:c6:8c:df:1b:e6:a8:5e:09:
59:23:99:de:d3:80:85:e2:70:8b:bf:b6:01:67:c0:
46:b2:52:6c:a1:61:34:11:55:3d:b8:6f:85:5b:dc:
b8:93:4b:04:41:d3:85:64:bb:3b:92:1d:dc:33:1f:
8f:66:5d:4b:0b:49:68:f8:0e:83:1d:e3:fd:64:15:
f1:d6:d3:ea:e1:40:6b:ae:9b:94:90:0d:8f:22:43:
13:f5:d1:97:eb:b4:49:11:07:3f:67:1b:ed:16:8a:
b2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:63:52:65:45:42:46:53:50:42:9A:D8:4D:98:9D:D6:12:79:47:53
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/lGNSZUVCRlNQQprYTZid1hJ5R1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.106.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ea:95:9c:ad:23:f9:21:22:46:b4:90:1a:ea:ad:3f:6d:bd:
94:48:ac:c0:e4:46:56:af:96:b5:c2:cc:42:19:fb:37:b4:fb:
3a:57:55:8d:b0:74:ff:81:70:cf:82:cd:c9:e5:f4:e2:ee:42:
0d:25:71:03:40:42:58:99:9c:5f:68:aa:fb:a5:57:de:2e:4e:
ca:18:28:6c:58:43:32:e6:07:93:37:b6:f5:9c:11:9a:e8:70:
d9:17:b1:b7:4e:8b:ca:ed:d4:d5:55:18:7f:c8:b2:e9:c9:4c:
fb:a9:77:93:91:9e:e3:af:ee:24:d2:1d:b1:f5:fb:1a:16:7a:
64:b1:fa:f6:6c:db:74:70:c8:b6:6c:8f:b1:0d:23:0a:30:09:
81:bd:2f:82:bc:33:c5:90:4e:b8:8e:c9:70:b0:43:b8:63:e5:
26:7f:c5:54:e4:fe:df:ee:9a:4a:6e:a1:b4:fd:b3:41:63:93:
2c:77:64:70:78:9e:b0:6b:f5:54:f0:1e:82:cf:46:6b:68:91:
c3:04:4d:9e:5f:a0:b2:27:d1:27:25:90:3b:49:d9:8d:78:3d:
3c:79:16:d6:96:d5:1f:c1:d8:b9:e1:99:59:79:3a:3e:1c:b0:
2d:58:47:b5:b6:45:fc:3c:84:78:56:94:dc:25:7a:4a:77:35:
bd:71:64:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:02 2024 by rpki-client on console-ams.rpki-client.org