Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/DSXY6e0CpO9bKnC2F-A2oymu1w0.roa
File: DSXY6e0CpO9bKnC2F-A2oymu1w0.roa (raw, json)
Hash identifier: 1EUCCSGdZfODJaWwTg5q40kPYlRpmpkLlwF0Z87gE9U=
Subject key identifier: 0D:25:D8:E9:ED:02:A4:EF:5B:2A:70:B6:17:E0:36:A3:29:AE:D7:0D
Certificate issuer: /CN=559349644323315f806dc64ca4d9ed9557762757
Certificate serial: 01856DCAC13F24D0E86A45977CAAB1AF0397
Authority key identifier: 55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/DSXY6e0CpO9bKnC2F-A2oymu1w0.roa
Signing time: Sun 01 Jan 2023 14:44:42 +0000
ROA not before: Sun 01 Jan 2023 14:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206892
IP address blocks: 91.206.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:c1:3f:24:d0:e8:6a:45:97:7c:aa:b1:af:03:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559349644323315f806dc64ca4d9ed9557762757
Validity
Not Before: Jan 1 14:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d25d8e9ed02a4ef5b2a70b617e036a329aed70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:53:0f:84:c6:cf:86:fa:a8:b8:dc:4c:5f:
07:2b:43:3e:c5:65:7e:7c:06:02:06:54:1b:d5:bb:
60:a9:ba:8a:70:f4:68:06:71:fe:21:ae:03:78:f9:
2d:22:f6:30:00:f2:1b:b8:f9:f1:2c:8c:51:41:11:
c5:7b:e3:b4:ed:30:df:1b:cd:27:57:49:a7:87:f8:
36:0f:f6:1b:e6:21:c8:d6:6e:d1:0c:13:0a:ce:6d:
da:1a:fb:64:46:71:57:89:dd:43:33:43:f4:dc:b4:
7b:86:16:92:62:a8:8f:27:63:0a:4e:1f:c1:cb:f4:
e4:bd:c1:d4:49:95:ee:f0:07:e1:59:10:7e:34:0d:
91:12:50:5e:71:c5:6b:bd:1d:96:6d:da:df:d3:5a:
5d:17:e0:90:56:28:af:1e:42:5e:de:28:e7:88:c2:
33:0a:87:53:19:1f:80:29:92:cd:b1:b6:27:5f:65:
cb:44:50:77:ca:66:fc:99:3f:14:61:36:2c:9f:9e:
67:db:58:c6:f2:2f:a3:34:19:64:f8:18:3f:40:16:
5b:ea:e7:5b:42:23:04:f0:79:f3:81:05:5c:ab:97:
d2:2a:2a:65:0d:99:30:f9:1e:91:6f:a6:3e:25:0f:
3a:01:a6:f4:18:f3:47:63:5f:ec:3d:af:30:d7:1b:
31:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:25:D8:E9:ED:02:A4:EF:5B:2A:70:B6:17:E0:36:A3:29:AE:D7:0D
X509v3 Authority Key Identifier:
keyid:55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/DSXY6e0CpO9bKnC2F-A2oymu1w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.112.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:d3:99:30:04:a6:b1:f7:59:42:a6:4e:09:3c:63:cf:f0:0b:
8e:20:ab:47:59:6e:8b:6c:f5:39:e1:cf:37:25:4f:cc:1e:c7:
44:f5:d2:09:aa:2b:24:fe:5d:fe:c5:7f:91:a7:68:47:61:21:
71:e2:17:92:9d:49:43:96:f9:15:84:b4:83:d3:55:ae:a3:b6:
ae:2d:83:31:6c:2b:a3:f4:3f:cb:19:50:c9:0a:45:51:aa:e2:
d7:18:25:65:ee:32:cf:4e:2f:43:54:49:f5:8f:7c:a8:48:26:
d9:63:32:79:1a:68:a1:27:52:9e:0f:81:4b:16:f5:35:5c:e3:
74:83:09:18:d3:a9:35:ac:5a:d6:5e:4f:6d:34:3f:95:b9:e7:
3b:31:34:56:51:44:93:d5:6f:34:8a:22:db:7f:30:68:1e:02:
38:18:f4:06:e5:48:63:3b:be:73:d5:e0:3a:ba:f4:4f:53:85:
3a:0e:77:06:1f:02:b2:db:dd:c9:1e:b5:04:aa:e6:25:a4:30:
35:24:01:b6:18:a4:9a:22:90:bc:8c:9b:55:54:6c:82:4b:52:
b1:83:a3:2b:bf:a6:9a:cf:3a:f3:f6:c2:ad:9a:41:82:5d:71:
87:2f:73:5b:f7:11:bc:60:26:b7:38:ab:e4:e1:dc:42:2c:bb:
e7:fe:11:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:34 2024 by rpki-client on console-fra.rpki-client.org