Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/bEsvfek39R93oXChuqkiWSZP6-o.roa
File: bEsvfek39R93oXChuqkiWSZP6-o.roa (raw, json)
Hash identifier: WFPrho4eKXVPjkC3p6v35JAck2Kjb3ar45cJ05j5T2E=
Subject key identifier: 6C:4B:2F:7D:E9:37:F5:1F:77:A1:70:A1:BA:A9:22:59:26:4F:EB:EA
Certificate issuer: /CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
Certificate serial: 01856F26E25810D3F63A0CD21D20103D788E
Authority key identifier: 34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/bEsvfek39R93oXChuqkiWSZP6-o.roa
Signing time: Sun 01 Jan 2023 21:04:57 +0000
ROA not before: Sun 01 Jan 2023 21:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48609
IP address blocks: 91.209.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:e2:58:10:d3:f6:3a:0c:d2:1d:20:10:3d:78:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
Validity
Not Before: Jan 1 21:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c4b2f7de937f51f77a170a1baa92259264febea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:6c:78:34:01:15:b8:46:27:17:f7:68:f2:
ec:12:ca:44:0c:87:37:4a:5c:28:68:51:ab:d4:f8:
1d:37:b4:82:ca:c9:44:6f:8a:f7:65:bd:ce:d6:43:
8d:53:ef:82:2e:34:0f:88:f1:ea:ca:d5:af:3e:e0:
e4:aa:44:c2:ba:1f:d1:5f:8e:70:90:98:b6:8e:11:
28:54:fc:50:35:ef:a3:47:8b:3a:eb:f1:45:30:90:
8d:af:71:3e:51:3c:83:d5:be:53:89:1f:48:db:24:
b3:bf:63:1e:8b:d1:42:06:05:eb:94:3a:9c:a0:7c:
1a:8b:1f:f9:20:ab:12:37:c2:97:1a:c0:75:a0:64:
9f:9a:f2:ee:ff:56:92:3b:59:87:2a:54:e4:65:94:
7a:95:cb:b0:0d:c6:17:07:57:bc:9a:b8:18:a7:7a:
17:c3:b7:69:cc:b7:13:01:95:de:69:af:a2:be:67:
19:33:40:db:ad:08:5e:a0:99:c8:7b:3f:c2:cf:f0:
4e:9f:dd:94:22:1d:bd:77:4f:19:bc:81:8c:ae:fd:
06:bd:b4:f9:ac:f3:00:38:70:c0:3b:63:01:98:4d:
8a:b1:64:50:95:e3:11:e1:f8:70:02:3b:d9:07:21:
bf:2c:b3:89:19:76:a6:a8:41:9d:a8:69:b9:a4:c1:
31:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4B:2F:7D:E9:37:F5:1F:77:A1:70:A1:BA:A9:22:59:26:4F:EB:EA
X509v3 Authority Key Identifier:
keyid:34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/bEsvfek39R93oXChuqkiWSZP6-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.207.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:4d:32:51:3d:c2:ca:a7:f4:b4:2f:9c:07:6d:b3:62:f6:e9:
94:d5:b9:65:95:1b:01:21:d1:18:7a:f0:29:52:3f:e8:c5:e8:
de:41:0e:ac:7c:b9:42:e2:0d:6d:92:8f:54:13:17:11:fe:bb:
38:ab:44:7a:2d:72:32:e9:f6:c0:87:79:3d:1e:fd:ac:cb:bb:
c8:ce:06:b9:91:46:31:1c:f8:8a:dd:fb:8e:fa:e0:77:c2:84:
b8:ce:44:f9:c1:51:92:1a:03:e4:b7:81:55:06:30:3a:2c:a6:
8d:f0:d5:30:75:8a:22:0e:bb:7e:54:2c:50:02:70:d6:d4:4e:
bb:3d:8b:29:43:b2:f3:fd:4f:7d:72:51:ad:03:2e:b4:0d:85:
1d:0d:0a:35:a5:67:f6:c9:5b:67:9c:89:4a:bc:c7:24:30:08:
c7:6f:0d:fd:a3:15:13:b8:ad:09:db:c9:c4:40:2d:18:0f:84:
fc:22:54:40:ee:41:bb:e1:d0:b5:e4:70:8a:d4:9d:10:55:23:
c2:eb:36:e5:d6:79:67:4d:35:c7:2c:ef:4e:85:3e:2c:cc:3e:
b7:f7:1d:4c:f2:ac:5d:fb:fc:d3:82:2d:5a:5c:dc:72:be:ae:
eb:6b:f6:2e:ff:55:66:f4:bd:9b:dc:95:48:38:10:51:fc:7a:
9e:ac:df:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:48 2024 by rpki-client on console-fra.rpki-client.org