Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/5wIi-708U6Nr7GD6eek7pC50vCg.roa
File: 5wIi-708U6Nr7GD6eek7pC50vCg.roa (raw, json)
Hash identifier: I/dYYttjSqYpzZncJGs/uyaeBAHL8egPzYjfIj3O6+4=
Subject key identifier: E7:02:22:FB:BD:3C:53:A3:6B:EC:60:FA:79:E9:3B:A4:2E:74:BC:28
Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial: 018617B8B82D78E3C97C0ED465A31B68C347
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/5wIi-708U6Nr7GD6eek7pC50vCg.roa
Signing time: Fri 03 Feb 2023 14:40:27 +0000
ROA not before: Fri 03 Feb 2023 14:40:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6762
IP address blocks: 91.194.236.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 11 Aug 2023 14:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:17:b8:b8:2d:78:e3:c9:7c:0e:d4:65:a3:1b:68:c3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
Validity
Not Before: Feb 3 14:40:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e70222fbbd3c53a36bec60fa79e93ba42e74bc28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e4:17:54:f2:b2:c6:2e:a7:ab:57:01:4f:d2:
3a:e0:b3:f6:03:01:54:56:33:67:02:87:4e:f1:aa:
f6:5b:67:26:e5:99:a5:2c:27:d0:87:00:53:0f:a1:
c6:4b:86:f4:20:a2:a4:f6:42:de:f9:80:a9:9c:51:
fa:3f:78:e1:b9:91:6d:32:29:49:77:41:ae:44:e7:
5d:2d:a9:27:72:5a:ea:69:b8:6f:f5:a7:da:e5:4f:
31:c1:a3:94:6e:1a:c4:d3:d2:88:91:2a:98:47:69:
ae:75:1f:69:ab:b8:6a:1b:2a:01:02:88:07:d8:28:
24:f0:3b:b3:6b:c1:37:9c:57:ed:ce:e3:d4:85:3b:
dc:23:82:4b:13:67:8c:5b:62:41:d6:65:85:05:65:
85:0f:5b:a1:a3:10:8b:57:a4:20:93:a4:a0:ea:b0:
b7:1c:67:8a:f8:08:7b:cf:47:39:73:42:a2:18:23:
b1:d9:6b:72:13:b9:2a:a2:86:e0:e5:5c:10:c5:96:
62:68:c0:a7:6a:60:c3:6f:ce:dd:ca:39:36:04:cd:
07:4d:ef:2b:f6:f1:5e:0b:91:3c:d3:b1:fa:ea:4a:
2b:ac:9e:c4:07:75:9f:61:9e:47:a2:72:b6:90:df:
15:5d:ed:99:23:79:05:f3:24:10:da:21:09:6f:10:
e6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:02:22:FB:BD:3C:53:A3:6B:EC:60:FA:79:E9:3B:A4:2E:74:BC:28
X509v3 Authority Key Identifier:
keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/5wIi-708U6Nr7GD6eek7pC50vCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.236.0/23
Signature Algorithm: sha256WithRSAEncryption
43:dc:d0:d9:36:67:fe:10:30:62:2c:0e:bc:27:6b:c8:f8:1e:
cf:e4:30:1c:6b:5f:d7:3c:f0:ea:b3:52:e0:3e:3f:7f:88:7a:
43:a4:9a:40:6b:5a:ec:0e:77:bf:47:9b:b3:ea:1c:29:a7:9d:
63:8e:24:68:e1:7f:6f:14:ef:99:e1:c0:fb:94:36:4b:85:6e:
c3:37:b6:00:18:55:b5:3f:fa:f4:d4:1a:fd:e8:7b:c8:0a:30:
50:c5:67:21:e2:59:86:11:a3:d1:73:64:30:eb:e4:01:27:3f:
32:6e:1a:ac:fa:92:c1:3a:7d:e4:93:e4:b5:92:e8:ff:24:14:
c8:c7:3a:87:73:2e:8b:a1:82:23:79:86:10:1e:e9:9f:34:6d:
dc:65:97:23:d9:77:af:e4:3e:15:a7:d8:68:84:7c:8b:e8:85:
23:6e:9e:a8:ff:16:69:3b:fa:00:5c:fa:8d:c1:22:f0:4e:82:
67:c1:41:44:7b:2a:d4:ce:76:17:03:eb:e5:f2:d4:99:56:ff:
85:81:9e:9f:ac:bb:10:65:ed:1c:6b:12:de:63:11:ba:7d:e4:
f6:9c:9d:de:19:0f:c7:b3:55:5a:c1:27:fe:49:54:3d:df:29:
27:5d:84:bc:29:6e:f2:2b:1d:ee:4b:97:2c:d0:7d:6f:d0:35:
86:8b:e6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:22 2024 by rpki-client on console-ams.rpki-client.org