Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/_NcUgBsJI4JUe1G6JFcEuHmpNSg.roa
File: _NcUgBsJI4JUe1G6JFcEuHmpNSg.roa (raw, json)
Hash identifier: llLxG06wimedjhJQ2DOdXETk3rlEqmF9kOKms+Yb6OM=
Subject key identifier: FC:D7:14:80:1B:09:23:82:54:7B:51:BA:24:57:04:B8:79:A9:35:28
Certificate issuer: /CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Certificate serial: 01856C5CAC0A75125A3AE9BAAEBA105929C9
Authority key identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/_NcUgBsJI4JUe1G6JFcEuHmpNSg.roa
Signing time: Sun 01 Jan 2023 08:04:50 +0000
ROA not before: Sun 01 Jan 2023 08:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140947
IP address blocks: 91.207.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Mar 2023 15:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:ac:0a:75:12:5a:3a:e9:ba:ae:ba:10:59:29:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Validity
Not Before: Jan 1 08:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcd714801b092382547b51ba245704b879a93528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9e:21:13:3d:fe:aa:9f:41:c5:49:c0:33:16:
16:de:8b:aa:fe:36:b9:1b:2c:c6:84:ef:41:0a:6c:
fb:57:98:65:01:e6:5b:f4:25:9c:89:71:64:4e:ae:
e1:24:ee:88:ed:30:02:c8:0b:6e:06:94:48:47:cf:
d3:97:88:84:71:1c:92:11:69:44:99:aa:d2:f2:98:
6e:8e:f7:9d:ce:fd:24:28:c0:f9:c2:9c:7b:22:eb:
26:1e:ad:3c:93:0b:a6:a3:aa:07:00:ba:d2:ed:fd:
d2:d7:b5:3e:a1:a9:69:fb:2f:db:e6:e6:33:f8:54:
30:1a:db:e2:da:6c:d2:17:7d:8c:38:74:18:14:00:
d3:ec:84:76:9b:49:44:06:59:f6:1f:83:57:37:d1:
28:49:ff:0b:95:83:15:ef:d9:d9:e1:58:0e:09:0f:
80:03:54:13:b0:03:63:37:7d:5b:87:c8:38:7d:75:
be:ef:ce:00:16:01:cb:0e:a6:15:e9:07:16:a9:ce:
17:91:50:b3:88:fa:b6:89:62:e3:bd:68:15:70:5e:
a8:3a:d6:34:ff:40:58:92:73:29:aa:89:9c:41:d5:
5e:43:82:5f:68:89:b5:f6:64:d4:a0:49:7d:6d:99:
3c:67:57:8f:c1:45:6e:92:bb:41:b1:d4:d2:58:e5:
4a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D7:14:80:1B:09:23:82:54:7B:51:BA:24:57:04:B8:79:A9:35:28
X509v3 Authority Key Identifier:
keyid:1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/_NcUgBsJI4JUe1G6JFcEuHmpNSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:28:b5:a7:6d:ac:0a:d3:45:95:c0:d1:40:be:e4:b4:91:6e:
48:cf:36:37:b8:7e:32:70:61:dc:18:ef:7f:d5:ef:2d:92:8d:
02:59:e8:39:b6:a6:ba:1e:c5:24:61:0f:0c:51:c9:86:27:66:
c0:53:7c:be:7f:66:95:28:02:c8:fd:34:5c:c1:82:93:0c:8b:
0b:94:af:ef:c5:70:b9:a3:4e:e0:61:ec:85:e0:6e:d6:ca:31:
df:06:f2:81:98:34:7c:29:a6:d3:da:49:0b:0c:d0:ae:d7:12:
46:a3:29:4b:94:04:98:df:2e:e8:6c:64:cd:46:8e:8b:c5:27:
52:0f:81:97:85:82:83:72:11:99:9c:44:1b:e9:c1:51:af:c8:
dd:33:45:40:70:e9:76:ae:d2:81:ea:aa:8f:d9:4b:79:fd:72:
b1:36:a1:ff:22:83:14:5d:b0:87:94:ee:cc:20:fb:b9:22:3f:
ba:5d:63:f0:eb:0c:67:2f:2a:16:0b:74:a5:9b:1c:d9:b7:67:
b2:80:c8:55:ea:ff:ba:38:8f:a6:31:09:3f:18:4e:72:bc:c3:
6d:c3:b4:c9:6b:62:12:78:48:d5:bb:ad:0d:5b:6d:db:1e:e1:
b0:bd:a2:71:c3:40:f2:4a:06:56:ef:72:3c:52:e7:ac:3f:eb:
d8:7e:40:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:22 2024 by rpki-client on console-ams.rpki-client.org