Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/EWf2VoM1FEt-L-7TyOrNHIOfOQY.roa
File: EWf2VoM1FEt-L-7TyOrNHIOfOQY.roa (raw, json)
Hash identifier: ZFZPKdwb3QwJZlnCpxHPn6GqV+NN9gfU9ZQXjlaX560=
Subject key identifier: 11:67:F6:56:83:35:14:4B:7E:2F:EE:D3:C8:EA:CD:1C:83:9F:39:06
Certificate issuer: /CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Certificate serial: 0185734CDDE4D9B1762CB51F8E6A25E6463C
Authority key identifier: D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/EWf2VoM1FEt-L-7TyOrNHIOfOQY.roa
Signing time: Mon 02 Jan 2023 16:24:55 +0000
ROA not before: Mon 02 Jan 2023 16:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197043
IP address blocks: 91.216.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Dec 2023 10:57:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:4c:dd:e4:d9:b1:76:2c:b5:1f:8e:6a:25:e6:46:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Validity
Not Before: Jan 2 16:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1167f6568335144b7e2feed3c8eacd1c839f3906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:48:fb:de:29:33:76:14:0c:4d:ba:aa:d4:30:
ee:12:82:79:09:f3:7b:0f:63:83:56:a8:a5:ca:a7:
3c:e4:09:e7:60:bf:14:38:87:c5:4c:91:8e:c1:a7:
fa:e8:7a:e7:3d:41:b8:ba:1f:16:de:cb:74:4e:fa:
31:e1:e5:fb:a5:de:25:49:86:0e:4c:6d:59:47:71:
8f:23:e3:e8:8f:42:70:ad:de:5f:eb:f8:66:98:71:
ee:ec:84:a9:92:4d:87:c0:d6:25:df:86:21:f3:81:
27:8e:41:85:42:14:5b:f6:f2:36:2e:b9:7b:94:5c:
9b:81:0c:83:54:6d:22:d4:4d:3f:77:0d:bb:db:bd:
45:89:4a:16:20:a8:86:5e:2c:bb:18:09:1c:37:d4:
d6:a2:a9:cd:8a:74:68:fa:e5:af:6a:cf:85:a6:55:
b1:53:d5:91:f6:09:3a:2b:ed:df:b3:b9:a2:23:ac:
97:e6:be:2d:06:3d:be:af:05:2d:6f:73:79:e8:3d:
bf:8d:90:89:55:47:48:dc:e4:08:0f:3d:db:34:88:
9a:a0:9b:07:4d:28:7d:78:01:3b:2c:d0:72:5f:4f:
7e:59:e8:45:0a:a1:4d:29:36:70:fe:2e:1f:2a:51:
33:eb:65:07:bc:05:3b:90:bc:91:5c:9e:30:17:de:
f2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:67:F6:56:83:35:14:4B:7E:2F:EE:D3:C8:EA:CD:1C:83:9F:39:06
X509v3 Authority Key Identifier:
keyid:D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/EWf2VoM1FEt-L-7TyOrNHIOfOQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.35.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f9:d3:cd:ba:f1:79:01:bc:dc:81:4d:e2:0b:28:c2:d3:78:
10:31:90:4e:49:28:4c:02:99:3b:50:c7:7f:0a:32:c2:41:32:
17:e3:17:75:e9:a1:97:6f:94:0f:cc:6e:bb:99:fa:a2:05:2e:
f5:bb:fd:89:26:d5:bf:2b:80:92:2b:b8:22:c7:67:32:a6:d4:
bf:4e:68:2a:f4:1f:5d:9d:27:2a:4d:ea:e8:61:12:09:31:c6:
61:f2:45:f0:ef:4b:92:3e:aa:d0:88:4a:6b:d6:2c:71:ce:b7:
e7:d7:e8:d8:a0:75:71:19:0f:8b:01:ea:08:b5:25:5a:ae:6e:
3e:8d:cf:24:53:50:19:79:c6:e7:6e:bf:04:44:42:02:cd:0a:
4f:7d:ef:38:b6:39:81:d8:8f:4d:05:5b:20:b4:c6:af:88:3e:
ed:38:4b:82:2e:ab:3a:7a:5d:fc:cf:86:8d:c8:5d:64:ae:e4:
fb:55:3e:d2:f1:eb:b2:5a:7a:1b:d8:0f:df:4c:9e:94:f1:41:
eb:08:97:64:40:d5:1d:49:f8:94:28:4c:62:9e:36:88:21:73:
05:64:51:74:ed:0f:a7:e5:c7:48:58:c4:c8:4c:2f:ae:2c:6d:
64:ea:bd:11:7f:3f:22:eb:cc:b2:77:08:51:74:28:f5:c6:c0:
fb:a4:89:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:26 2024 by rpki-client on console-ams.rpki-client.org