Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/qtaZ6i2r6c0qSu-fGR9w7uhR9ac.roa
File: qtaZ6i2r6c0qSu-fGR9w7uhR9ac.roa (raw, json)
Hash identifier: viD4omK/411rqYVip4KYIVFR5CPtIphUqwASCDEezh8=
Subject key identifier: AA:D6:99:EA:2D:AB:E9:CD:2A:4A:EF:9F:19:1F:70:EE:E8:51:F5:A7
Certificate issuer: /CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Certificate serial: 01856C5CACB515702E3A7BFEE908594D0E3F
Authority key identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/qtaZ6i2r6c0qSu-fGR9w7uhR9ac.roa
Signing time: Sun 01 Jan 2023 08:04:50 +0000
ROA not before: Sun 01 Jan 2023 08:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 91.206.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Nov 2023 15:18:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:ac:b5:15:70:2e:3a:7b:fe:e9:08:59:4d:0e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Validity
Not Before: Jan 1 08:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aad699ea2dabe9cd2a4aef9f191f70eee851f5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c3:cb:a0:c2:31:8d:74:6c:b9:aa:f1:5d:a7:
f2:ef:7c:2e:06:9d:0b:22:22:2f:0e:17:6e:f1:7d:
77:67:ce:50:e4:47:8f:d6:72:d7:ee:8d:85:ec:cd:
85:6a:f2:d4:d2:7d:f0:a4:e9:0e:ef:6f:17:f8:21:
bb:da:82:3c:1d:43:81:a7:5c:60:53:08:d9:53:fc:
53:4f:9b:df:c4:7e:db:67:b9:af:75:2a:15:21:15:
18:e7:be:cb:3a:37:df:23:a8:7d:4b:02:33:04:75:
a6:a3:31:28:0a:6e:4c:ea:83:c5:e3:a2:61:82:4c:
aa:48:a6:dd:ed:ea:99:b5:ce:24:8b:ea:af:fc:bb:
64:b2:a8:b2:92:29:fe:3a:7c:e1:f8:ac:dc:b8:be:
dc:bd:ce:08:f6:79:55:d2:71:10:da:a1:b2:22:f6:
af:d2:f1:40:75:6c:f0:ea:08:c3:3c:45:4f:95:f2:
ff:3a:5c:8f:67:fc:02:4a:21:82:16:9d:80:f0:5f:
f5:0c:55:21:0b:b8:c8:88:6e:79:7b:5d:43:b6:69:
b8:12:62:d2:5f:bb:15:f4:6a:8c:7b:ee:dd:d1:b9:
7f:84:b3:6b:17:b4:e3:3b:97:ea:54:88:3a:b2:36:
5f:e1:f2:58:f4:37:59:2e:4a:a7:4d:a4:9c:23:72:
f9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D6:99:EA:2D:AB:E9:CD:2A:4A:EF:9F:19:1F:70:EE:E8:51:F5:A7
X509v3 Authority Key Identifier:
keyid:1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/qtaZ6i2r6c0qSu-fGR9w7uhR9ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.208.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ad:ce:d0:fb:e0:2d:55:2b:93:97:c8:63:b8:66:72:1c:fc:
e4:93:ca:40:0b:cf:d9:c3:42:40:98:a3:7d:0e:a8:f4:16:e1:
af:7c:9f:70:b5:33:1e:49:02:f0:96:cf:f6:a5:25:d1:b7:93:
20:5a:9e:07:0f:88:72:f3:b8:ee:4a:9f:b4:2e:11:6d:94:81:
18:cd:fd:03:06:49:dd:a4:f3:ee:6b:e1:87:60:08:d8:c7:f6:
3b:6f:1e:d2:77:0c:f2:87:c9:b7:46:85:bb:68:0c:98:85:f6:
5a:a3:13:04:52:f7:0b:48:f7:5c:0f:b8:a5:c5:8c:c1:fe:1c:
96:b5:38:d4:49:47:93:e7:96:6c:34:77:bf:9f:30:b9:0c:2a:
c0:59:bc:93:09:1f:f1:89:be:ce:8b:17:bf:54:6a:ae:69:9c:
b8:f1:9d:dc:1b:64:81:39:a0:e2:c2:f7:99:f4:f3:97:79:bb:
15:a6:f6:6d:de:07:07:3e:d2:a2:4f:28:2b:4a:2b:34:c4:0a:
8c:b7:4a:73:5b:3b:06:9f:d3:8d:ca:a1:3d:2d:43:e2:70:f7:
c6:a7:06:01:f9:38:14:87:35:8a:29:ae:dc:24:c9:02:e6:74:
79:be:de:3a:b4:ec:99:cf:a6:73:0c:c3:58:2e:bd:dd:37:81:
db:7c:28:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:22 2024 by rpki-client on console-ams.rpki-client.org