Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/C0dOg-3W6ZNhnpnI9Q1D9Fikf74.roa
File: C0dOg-3W6ZNhnpnI9Q1D9Fikf74.roa (raw, json)
Hash identifier: KshB6LhcaUOEorJa/oFID3fKU6dOYO8Ma+Mq1FW2L1A=
Subject key identifier: 0B:47:4E:83:ED:D6:E9:93:61:9E:99:C8:F5:0D:43:F4:58:A4:7F:BE
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 0189741123AE0AB9D589399A0762359B8290
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/C0dOg-3W6ZNhnpnI9Q1D9Fikf74.roa
Signing time: Thu 20 Jul 2023 16:10:27 +0000
ROA not before: Thu 20 Jul 2023 16:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 91.193.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:74:11:23:ae:0a:b9:d5:89:39:9a:07:62:35:9b:82:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jul 20 16:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b474e83edd6e993619e99c8f50d43f458a47fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b4:96:8d:d7:38:e5:73:f4:84:f2:18:22:eb:
1d:b3:bd:35:b0:4a:fe:c4:66:33:e5:1f:e4:f2:7d:
9c:bf:e2:e5:51:09:72:b8:c4:4f:3c:7d:4d:35:19:
22:ff:4c:d2:05:c3:ea:15:fe:9a:17:ec:3f:55:5f:
b1:b3:01:7e:d0:c2:81:dc:f7:a8:13:55:24:f6:c0:
f2:c9:f2:87:ae:f4:68:00:ff:3b:1f:1c:16:c6:e7:
3a:69:cc:c0:91:8b:ac:97:88:ef:30:83:c2:d8:44:
7e:23:d6:13:d2:e9:6a:7a:c2:ce:1f:f6:61:8e:c3:
6d:9a:d7:ab:df:1c:4b:3d:e2:04:04:7a:ed:4e:f1:
63:c7:a7:d3:d1:2c:77:d1:94:98:ad:83:93:e0:0b:
19:13:cf:9c:c3:5e:76:2b:60:70:49:b0:fb:e8:02:
61:5a:54:ed:f9:61:38:2f:42:e0:3a:e7:29:fc:c5:
92:98:ea:99:f9:93:0d:d9:28:fc:9b:9e:92:2c:b4:
f2:85:11:e4:26:f5:0d:cf:bd:e2:b2:92:96:56:70:
ed:b3:0a:91:b4:df:46:c5:c6:07:d3:79:bc:36:de:
23:70:41:4f:21:20:a6:65:79:3a:3e:56:b6:01:a9:
3e:48:a3:6b:a6:5b:c0:84:2e:3e:de:30:dc:aa:5e:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:47:4E:83:ED:D6:E9:93:61:9E:99:C8:F5:0D:43:F4:58:A4:7F:BE
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/C0dOg-3W6ZNhnpnI9Q1D9Fikf74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.232.0/24
Signature Algorithm: sha256WithRSAEncryption
59:01:d7:6d:7f:32:a1:5e:75:f1:ee:04:bb:7e:04:61:ff:0c:
85:85:f9:fd:e2:68:1d:06:4b:fb:a8:ae:ae:8e:ae:cd:0c:6e:
4b:45:56:84:44:cb:07:75:ff:18:2f:3f:10:f5:a6:e9:ca:e1:
97:2c:9d:f4:e0:37:41:6b:db:4f:96:56:c5:70:a7:06:9d:8b:
97:61:c8:05:07:4f:21:8f:27:13:e6:c1:97:e5:39:8a:14:de:
60:51:73:27:d9:45:e8:d2:33:4c:3c:5c:27:d8:d8:f4:b9:6e:
eb:4d:87:f4:bf:0a:38:75:cb:37:07:cc:c5:e6:4d:bf:56:02:
9c:2b:ea:99:6c:fd:e9:96:ab:26:ac:b3:aa:25:2d:a9:11:d7:
3d:16:e2:7b:6f:0e:38:63:c5:fb:2f:8d:36:c7:7a:d7:d5:89:
f0:71:1b:26:4d:4e:f4:1b:49:aa:60:7f:4f:2a:e9:91:3e:b0:
17:1e:fd:dd:97:65:71:18:1e:53:3f:fe:01:29:51:0a:9f:cf:
e4:4c:1e:53:cc:a5:81:ac:87:09:d2:50:14:10:5b:a0:77:6c:
f8:31:30:7d:b0:62:40:c4:6a:ec:19:13:ee:0b:a4:e3:c5:f6:
64:8c:ae:fa:36:e7:9b:9f:c8:7f:79:31:d6:a6:cf:8e:7f:1a:
67:4c:b9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:13 2024 by rpki-client on console-ams.rpki-client.org