Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/B84IVyigyf49GCHWRAJjRj6U1vk.roa
File: B84IVyigyf49GCHWRAJjRj6U1vk.roa (raw, json)
Hash identifier: woXs58gX/I71bGkdo8Xq4Q8OwUJVhbRPEFLSAt8XcSo=
Subject key identifier: 07:CE:08:57:28:A0:C9:FE:3D:18:21:D6:44:02:63:46:3E:94:D6:F9
Certificate issuer: /CN=cfc025a9d55bfd643757da4d499dce17201774d2
Certificate serial: 01856F94CC5167FE408A7BA33E9DD2D4056B
Authority key identifier: CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/B84IVyigyf49GCHWRAJjRj6U1vk.roa
Signing time: Sun 01 Jan 2023 23:05:00 +0000
ROA not before: Sun 01 Jan 2023 23:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48782
IP address blocks: 91.212.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:cc:51:67:fe:40:8a:7b:a3:3e:9d:d2:d4:05:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc025a9d55bfd643757da4d499dce17201774d2
Validity
Not Before: Jan 1 23:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07ce085728a0c9fe3d1821d6440263463e94d6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fe:ff:e0:ab:96:6d:08:4d:43:3c:ac:bc:5a:
be:aa:21:1c:b6:98:84:a7:f0:53:2b:79:c5:16:31:
88:8a:41:67:50:e8:e2:6c:f1:8f:59:a2:24:11:eb:
5b:39:00:dc:21:25:16:c0:4a:bc:70:1d:b4:74:54:
cf:06:75:2b:ca:7e:cd:9e:c2:6d:74:73:5d:ed:bd:
bb:14:90:28:7d:12:6e:d4:20:36:28:3b:45:1c:71:
70:30:e9:64:a1:24:2e:57:66:22:84:a5:06:b7:eb:
a3:8b:1f:ab:3b:f4:a5:9b:2a:b4:4f:39:3f:1a:63:
dd:85:55:54:27:37:ae:4d:a2:2b:9a:d9:dc:8b:6a:
70:38:17:a7:3b:d9:8c:87:0f:d4:64:f3:64:71:e6:
7f:9b:db:bb:69:d5:4e:02:4c:c5:1b:4d:05:62:72:
a4:c5:da:e5:86:62:9d:96:38:c9:16:b9:30:1b:29:
48:40:76:10:7e:7f:75:2c:9b:4d:da:0c:ae:3c:0c:
2a:ee:f3:69:16:34:73:90:16:0e:38:0d:b2:61:9b:
7b:3d:d4:f4:3c:f9:03:e7:0e:39:d1:90:75:36:39:
be:0d:ee:25:15:88:68:6f:67:3d:a2:ed:40:66:c1:
8c:41:1b:64:ed:c4:ec:ff:3a:68:3d:8b:e4:4f:da:
d5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CE:08:57:28:A0:C9:FE:3D:18:21:D6:44:02:63:46:3E:94:D6:F9
X509v3 Authority Key Identifier:
keyid:CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/B84IVyigyf49GCHWRAJjRj6U1vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.30.0/24
Signature Algorithm: sha256WithRSAEncryption
57:2e:04:6e:cd:ea:81:45:ca:84:88:a3:bd:04:e3:eb:24:7c:
1d:64:66:c3:0d:c3:ef:91:8d:6e:3b:c8:81:de:2a:21:a8:d5:
17:dd:15:2a:69:ea:7c:b5:7f:e1:d5:b9:b8:d1:de:b9:6c:51:
82:24:e2:63:41:1f:ce:3f:06:b2:94:17:7b:df:be:86:7e:ef:
cf:50:2a:15:e3:e7:05:66:95:ef:97:d0:bf:2b:b8:dc:f7:31:
42:48:e8:ac:59:77:eb:00:e9:83:b4:a6:6e:9b:57:fd:25:7a:
66:d3:73:b0:7d:68:03:53:2e:09:33:dd:ed:40:6b:7f:52:95:
a3:9e:77:58:dc:77:c7:66:4c:2d:a8:cf:9d:a2:71:d9:99:11:
f6:69:08:38:29:b8:84:e5:1a:fd:61:53:fc:df:87:36:99:88:
56:f3:b1:93:c6:43:f7:c4:a9:ec:c7:b5:bd:03:eb:70:c2:bc:
88:92:8a:c2:90:b2:31:62:73:e5:21:fb:76:21:2d:19:9c:f4:
23:51:2c:6a:3f:42:5b:3e:6c:0d:6f:ff:89:6c:6e:b7:a5:43:
a3:11:d3:05:21:bf:70:28:15:e3:81:e6:eb:a0:9e:65:f7:3e:
17:eb:50:b8:11:7d:5c:04:10:28:0f:ae:e9:0d:7e:af:9f:56:
33:d9:3f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:42 2024 by rpki-client on console-fra.rpki-client.org