Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/vve77fdI5nmLJ8h2GiYZQ3vgfkM.roa
File: vve77fdI5nmLJ8h2GiYZQ3vgfkM.roa (raw, json)
Hash identifier: UzDsoSUJQrh+47C7y7cPk77lRn5j+PeSRUTOQJAO28s=
Subject key identifier: BE:F7:BB:ED:F7:48:E6:79:8B:27:C8:76:1A:26:19:43:7B:E0:7E:43
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 0188AFAFA9AC81FF557FFF3A525B95058412
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/vve77fdI5nmLJ8h2GiYZQ3vgfkM.roa
Signing time: Mon 12 Jun 2023 12:58:24 +0000
ROA not before: Mon 12 Jun 2023 12:58:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.221.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Jun 2023 17:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:af:a9:ac:81:ff:55:7f:ff:3a:52:5b:95:05:84:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jun 12 12:58:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bef7bbedf748e6798b27c8761a2619437be07e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c6:12:70:85:ff:3c:a1:5e:25:5a:99:44:7e:
dc:78:66:ce:86:f1:86:06:3d:f9:8a:13:57:0f:66:
9e:b6:8e:75:2d:91:7c:96:ea:16:8b:1a:75:41:66:
ee:40:3c:b1:85:42:17:e6:48:de:98:7d:e5:8d:02:
85:8f:d1:f2:11:7a:0f:69:9e:c1:72:67:f6:6c:8f:
56:c7:5c:49:1a:47:77:c2:c8:9d:eb:81:37:56:de:
7c:d0:cb:04:6e:1f:7a:6c:ff:b5:2e:94:3a:42:76:
1f:46:89:1f:27:bf:85:0a:17:9e:07:d3:76:d3:dc:
3c:58:f9:48:fd:3c:1b:b2:73:61:19:aa:39:ac:b7:
d8:23:97:f0:39:d8:fa:3e:f2:9d:01:8b:94:1f:93:
c3:be:2e:22:60:88:ae:6a:cb:a8:da:83:cd:d5:5c:
c9:f1:6f:19:ab:7e:d7:7f:f2:5a:9c:39:38:14:69:
78:b3:e6:7c:21:b1:52:6b:2d:49:dd:51:4d:a7:1e:
ae:c4:2f:7a:0e:8e:99:f5:e4:3b:f4:72:3b:f6:b9:
04:20:9b:1a:c2:9f:76:8e:d0:56:9a:cc:51:b3:2e:
26:36:6a:65:f8:20:52:df:1c:98:64:d2:9b:d5:a6:
88:66:f3:74:3b:1d:af:eb:17:4c:3f:c1:a2:9a:e8:
17:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F7:BB:ED:F7:48:E6:79:8B:27:C8:76:1A:26:19:43:7B:E0:7E:43
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/vve77fdI5nmLJ8h2GiYZQ3vgfkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.233.0/24
Signature Algorithm: sha256WithRSAEncryption
96:be:b1:5c:89:db:b7:fd:20:a6:8a:c8:70:6c:cb:b2:c0:b3:
3a:d3:0d:1e:af:a1:b5:91:2b:18:bc:97:32:d9:4c:d2:c5:16:
a5:d0:b2:07:d0:a7:70:c6:01:1d:6a:8c:85:33:3d:ac:51:dc:
7f:89:01:87:05:b1:36:01:ae:97:35:34:9d:f0:8b:bc:df:dc:
1f:36:4c:43:60:4a:5c:62:2f:8f:2d:d7:17:a8:91:e2:11:ba:
26:f3:1c:88:46:19:3d:aa:e3:58:fd:5d:d8:e7:1a:77:d8:d6:
96:4e:72:60:79:65:70:82:91:02:dc:37:ba:42:35:cb:a8:da:
80:14:f8:12:0f:3e:1a:d8:4e:92:da:0f:63:45:d5:5d:89:87:
e0:8e:4c:29:38:82:04:5c:23:4c:cd:a2:f2:b9:2e:77:a4:32:
45:57:75:28:14:00:62:7d:03:10:60:56:72:1f:19:7e:c4:28:
94:51:19:03:20:c1:67:7e:cf:1c:b2:41:8d:3b:4f:0a:b4:67:
c2:5d:16:a8:b6:22:c9:c1:b1:02:65:60:25:2d:a6:a4:fe:95:
ea:1c:76:86:33:8d:06:ba:65:7d:ef:42:de:9a:53:db:d4:75:
f6:68:3f:dc:81:a1:47:ce:6a:1c:41:23:9b:4f:fa:3c:3f:c9:
03:42:19:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:48 2024 by rpki-client on console-fra.rpki-client.org