Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/O4Dr4GQZkXAkfp2g6PQHu2q5oJo.roa
File: O4Dr4GQZkXAkfp2g6PQHu2q5oJo.roa (raw, json)
Hash identifier: wkXIAnXTTiwYEJmrMNQRbGaw12ti7w65SXJVUG8/03k=
Subject key identifier: 3B:80:EB:E0:64:19:91:70:24:7E:9D:A0:E8:F4:07:BB:6A:B9:A0:9A
Certificate issuer: /CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Certificate serial: 018713EFFCC3E2EBDC7B5A303C9D92BB5EF9
Authority key identifier: FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/O4Dr4GQZkXAkfp2g6PQHu2q5oJo.roa
Signing time: Fri 24 Mar 2023 14:05:07 +0000
ROA not before: Fri 24 Mar 2023 14:05:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58118
IP address blocks: 91.239.8.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:13:ef:fc:c3:e2:eb:dc:7b:5a:30:3c:9d:92:bb:5e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Validity
Not Before: Mar 24 14:05:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b80ebe064199170247e9da0e8f407bb6ab9a09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e2:d0:5c:62:58:f3:fa:c8:05:88:dc:15:eb:
0b:13:06:e6:86:3d:30:19:02:3e:e9:fb:06:02:90:
e5:db:4c:a4:28:30:0c:06:07:9e:6b:0b:bb:ef:b6:
f6:f1:90:f6:76:a9:c5:88:e8:d9:ac:44:6c:58:9b:
d8:be:ef:99:e3:ae:ac:8f:b2:d3:6e:f4:4e:6f:02:
43:49:73:df:b8:49:fa:e1:93:02:72:5b:1b:fa:ea:
87:d4:35:d6:1b:1b:7d:ea:d8:a3:43:f4:4e:6d:21:
b4:ac:95:0b:bc:35:dc:4d:b9:b1:f3:d1:68:0b:f2:
fd:ec:07:85:41:1e:a9:60:fa:90:ec:6b:df:85:1f:
5a:17:96:7c:b1:a6:ba:19:24:1d:90:af:fe:bd:67:
a7:95:ec:bb:d1:9d:21:d3:fb:5f:ef:6c:c8:43:3a:
8e:f7:46:04:00:f0:bf:e2:5e:f4:9a:84:d3:c4:fd:
4e:f9:13:01:3f:99:b0:40:d7:05:db:dc:e8:a4:ee:
c7:30:6d:27:f9:85:b6:8c:e9:2a:e3:ca:df:1d:d8:
0c:d7:36:d3:ad:c0:4e:4b:93:5d:c7:12:4c:6a:78:
f1:08:5a:8e:40:47:a8:e5:a4:db:3c:66:ac:10:32:
55:b0:00:5b:60:1f:92:21:63:43:4b:3d:4b:e4:1d:
fa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:80:EB:E0:64:19:91:70:24:7E:9D:A0:E8:F4:07:BB:6A:B9:A0:9A
X509v3 Authority Key Identifier:
keyid:FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/O4Dr4GQZkXAkfp2g6PQHu2q5oJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.8.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:cb:6c:7e:85:57:12:e2:93:f2:c7:d4:c5:35:95:6f:31:a3:
c5:f8:c9:5e:b8:fe:cc:11:27:05:d7:e2:2b:36:4b:1e:c9:f5:
f7:bc:bf:aa:40:2d:7d:ac:0d:6f:98:bf:80:04:a2:1a:34:86:
43:d2:a7:02:f8:73:de:e1:30:1b:10:2b:90:8b:09:d6:a2:82:
e3:43:99:24:85:a4:49:f5:0f:79:25:eb:b9:3e:d6:16:20:55:
f8:12:41:b1:00:73:f6:79:1d:49:55:89:55:a5:16:53:06:de:
00:05:f3:d3:5c:de:06:c5:2c:fd:20:9d:17:e4:58:a4:0e:a4:
8e:4b:4d:a0:76:43:36:eb:c6:9b:3f:22:1e:6e:5c:f1:92:27:
89:64:ca:ea:a3:f2:00:9b:06:7c:d5:8c:23:2e:d0:29:c5:c2:
4d:61:f0:bb:fa:02:74:ba:22:4b:bb:27:c0:ad:8d:1a:09:23:
9b:3d:16:fe:21:84:2b:eb:e7:63:4d:0c:a1:3f:a9:13:84:76:
ea:1e:5c:d3:64:c4:43:05:73:04:e1:a3:ad:f1:00:41:cd:44:
e1:29:11:eb:44:9f:b2:42:03:a0:d8:dc:9d:1c:c1:b5:7b:3f:
19:80:52:da:2b:bf:68:1e:bb:40:02:50:8e:20:e1:25:5a:c7:
2e:e0:fb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:26 2024 by rpki-client on console-ams.rpki-client.org