Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/42HLl9dOtw2yYl0RzwM04WQdSFQ.roa
File: 42HLl9dOtw2yYl0RzwM04WQdSFQ.roa (raw, json)
Hash identifier: ZLC3lo7kKEV3iub26yesbPxrTJVze/IHJZzDi6aYQBo=
Subject key identifier: E3:61:CB:97:D7:4E:B7:0D:B2:62:5D:11:CF:03:34:E1:64:1D:48:54
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 0185706718EEC66D792BA571A951A32CA357
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/42HLl9dOtw2yYl0RzwM04WQdSFQ.roa
Signing time: Mon 02 Jan 2023 02:54:42 +0000
ROA not before: Mon 02 Jan 2023 02:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34918
IP address blocks: 91.239.214.0/24 maxlen: 24
185.126.8.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Jan 2023 13:04:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:18:ee:c6:6d:79:2b:a5:71:a9:51:a3:2c:a3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 2 02:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e361cb97d74eb70db2625d11cf0334e1641d4854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8c:db:cb:12:f0:86:f2:3e:eb:62:70:a5:21:
3b:69:93:df:f9:f4:b9:aa:31:39:2e:66:14:14:95:
e7:ce:8a:13:4b:40:00:bc:37:b8:44:00:8d:b1:a0:
75:91:c8:a0:55:8b:82:05:29:e7:99:89:76:69:2c:
a3:4f:14:48:0b:af:ec:a8:2c:60:f0:57:41:0d:0d:
80:45:c3:da:de:c1:e3:d5:c9:2d:0d:15:d0:13:de:
e3:0e:86:e1:9a:31:ba:31:66:85:73:2d:ec:3f:94:
d4:99:ab:e7:7f:38:7f:ab:31:80:35:17:23:7a:63:
f3:a4:02:94:7d:3f:21:02:eb:2e:b8:04:cd:e1:71:
00:cd:2f:42:d8:b6:64:fe:e6:87:4e:23:f7:66:cd:
d4:81:e3:0b:73:7e:96:91:34:25:c6:1f:c7:b9:21:
4f:97:f2:50:7f:ac:f1:76:8a:ce:79:ee:d4:39:19:
2f:88:91:3d:5e:84:f8:72:94:f0:41:1a:50:06:ae:
84:be:09:88:00:49:3c:9f:19:14:7d:3a:eb:64:77:
d7:5a:2b:68:d0:1a:5e:87:1b:71:16:1f:e7:56:a4:
29:f0:1f:93:c2:b7:0e:57:4f:5b:ab:01:d8:86:8a:
fe:12:33:56:1a:05:58:11:01:04:d3:cc:67:dd:42:
4d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:61:CB:97:D7:4E:B7:0D:B2:62:5D:11:CF:03:34:E1:64:1D:48:54
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/42HLl9dOtw2yYl0RzwM04WQdSFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.214.0/24
185.126.8.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:42:d4:6f:1e:4e:c0:18:f0:e2:69:81:8d:81:c8:d4:18:f9:
ad:1c:71:4f:48:46:4f:ec:6a:74:b2:81:63:2e:b5:3d:6c:60:
67:22:63:cb:d1:02:33:92:b5:5c:35:31:f1:03:dd:99:57:55:
41:bd:8b:74:85:d8:2c:6b:43:b7:86:dc:95:1b:5b:a1:4d:b8:
6c:52:17:82:86:7c:34:f2:88:25:c6:6a:90:87:48:9a:8a:51:
3e:f1:fa:11:7f:95:06:3a:2a:12:24:0e:b9:a1:0e:0c:9c:c3:
40:65:73:c2:2f:93:78:e9:28:c6:78:fd:1a:6d:65:c7:4a:fd:
e6:36:a8:ca:c3:e4:34:2f:69:24:05:a7:c5:8e:2d:c9:90:8e:
26:8a:68:5c:86:e3:ee:23:fd:1f:6f:cf:b3:b5:70:46:d6:70:
fa:60:63:1a:ae:b9:65:b9:32:40:12:64:8f:6f:e8:2d:d9:c1:
52:07:78:80:bc:4a:35:d6:bf:ff:ec:77:4f:5c:df:09:60:06:
f1:3d:b2:eb:85:88:9d:5c:db:f4:43:0f:1f:36:bb:a3:05:5b:
00:f4:2c:91:11:8e:b7:ff:02:b5:e7:d5:a1:d6:2d:17:9f:3b:
bc:c5:a9:c1:1c:21:a4:35:13:2d:87:50:c3:79:51:d0:64:89:
82:0e:e9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:33 2024 by rpki-client on console-ams.rpki-client.org