Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/YEo-Szc9FJ2UiACCrZBB3BH1I_A.roa
File: YEo-Szc9FJ2UiACCrZBB3BH1I_A.roa (raw, json)
Hash identifier: /Yu80WgN9zkyqphJ1ItXntXADrmegTEKlnGJ+NEWGmU=
Subject key identifier: 60:4A:3E:4B:37:3D:14:9D:94:88:00:82:AD:90:41:DC:11:F5:23:F0
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018C250EE38162A2175CA6312E1A6423911A
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/YEo-Szc9FJ2UiACCrZBB3BH1I_A.roa
Signing time: Fri 01 Dec 2023 11:06:21 +0000
ROA not before: Fri 01 Dec 2023 11:06:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213200
IP address blocks: 91.223.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:25:0e:e3:81:62:a2:17:5c:a6:31:2e:1a:64:23:91:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 1 11:06:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=604a3e4b373d149d94880082ad9041dc11f523f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:14:14:2c:95:75:75:1d:24:1b:1a:08:2f:b0:
f1:84:4f:c0:79:50:71:d7:f7:bf:ad:a1:36:b0:f2:
4b:cf:f8:c6:d8:8f:c7:9f:2d:61:af:0d:2f:ea:3c:
3a:24:32:56:df:3d:51:22:1f:bf:36:27:cd:63:c1:
2a:45:a7:3e:da:7b:94:85:dd:9a:c5:15:02:cf:c9:
de:ca:d6:b6:fc:36:bc:51:fb:71:ec:71:fc:7f:73:
3e:b7:59:dc:e9:9d:23:46:10:0d:37:3b:53:da:2b:
4b:ba:0b:e3:51:37:ea:e9:05:37:43:f7:dd:54:81:
af:33:3a:b2:f0:7b:e5:31:78:22:02:8f:2a:0d:01:
22:e3:fd:69:39:3d:9b:65:76:fa:e7:6b:24:71:63:
b8:7a:61:19:2f:ea:7d:df:2f:71:03:57:a6:58:6c:
95:ae:17:86:30:a9:0c:a4:7a:0c:07:ca:f7:8c:45:
26:89:da:e0:1f:a2:61:e0:7d:b7:84:eb:e4:e3:e0:
a7:3d:cd:91:5a:38:fa:22:23:10:59:77:17:21:ad:
c2:a2:a7:8f:ff:7f:42:18:80:bd:a1:c0:85:49:c9:
66:75:3a:8a:00:3f:f6:b7:f6:2a:d6:be:a5:3c:67:
a3:95:ee:3c:1b:2a:18:f8:6b:fc:39:06:4b:bd:4d:
97:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4A:3E:4B:37:3D:14:9D:94:88:00:82:AD:90:41:DC:11:F5:23:F0
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/YEo-Szc9FJ2UiACCrZBB3BH1I_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.110.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:2b:d7:7a:4f:23:da:a2:26:dc:74:ea:c3:73:c1:53:6e:b8:
f1:a8:5d:bf:05:79:68:bd:25:85:72:2e:94:d7:f1:a3:9e:34:
98:7e:c2:37:9a:f4:2d:f8:39:4d:1a:95:63:a7:7f:56:50:ff:
9d:95:cf:2e:f1:e2:79:c8:99:e6:79:0b:06:1c:0c:99:39:6f:
47:10:cd:b9:24:f7:9a:23:8c:f5:aa:cc:63:77:1f:f1:bb:3c:
0b:b5:e8:19:a9:a3:fd:55:fe:fe:ad:4e:dd:a7:ab:7d:13:b0:
20:8f:3f:a3:7b:5c:89:10:d9:27:05:5e:c9:9f:ee:0d:07:15:
eb:07:6f:35:2c:6c:fa:7f:bf:ff:6c:75:a8:a1:2f:eb:71:f5:
8b:3e:66:d9:c2:d1:41:b2:f4:e6:9b:7e:e8:61:a9:e1:c4:58:
6a:1a:3e:d7:19:97:11:8c:1c:5c:3f:84:5b:e5:fc:f8:33:e4:
55:c5:0f:6a:f0:fa:5b:53:7a:44:d9:ab:1f:3d:04:58:bb:be:
6d:1e:7f:74:61:d9:bb:58:cc:c4:64:9d:94:37:c4:ad:e2:e5:
11:3c:bb:9e:1a:e9:42:83:8a:cf:18:9a:87:03:e6:5a:0e:ca:
db:82:f1:97:36:f5:a4:60:e0:c3:4e:19:45:0f:62:a3:dc:3f:
70:d4:46:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org