Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/9OswUr9GX39Pzae5baKMCYf9OFU.roa
File: 9OswUr9GX39Pzae5baKMCYf9OFU.roa (raw, json)
Hash identifier: kR6N+5+T2sWrXSXou445216XuYNTPRlyQuisc5LcWkw=
Subject key identifier: F4:EB:30:52:BF:46:5F:7F:4F:CD:A7:B9:6D:A2:8C:09:87:FD:38:55
Certificate issuer: /CN=27f83e56b6af760083eb54bb5b6e19ddb41dd88a
Certificate serial: 018570C2AE1B1C44C2C9E1F5566B52C85B0B
Authority key identifier: 27:F8:3E:56:B6:AF:76:00:83:EB:54:BB:5B:6E:19:DD:B4:1D:D8:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_g-VravdgCD61S7W24Z3bQd2Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/9OswUr9GX39Pzae5baKMCYf9OFU.roa
Signing time: Mon 02 Jan 2023 04:34:44 +0000
ROA not before: Mon 02 Jan 2023 04:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57577
IP address blocks: 91.233.57.0/24 maxlen: 24
91.233.58.0/24 maxlen: 24
91.233.56.0/22 maxlen: 22
91.233.56.0/24 maxlen: 24
91.233.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:ae:1b:1c:44:c2:c9:e1:f5:56:6b:52:c8:5b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f83e56b6af760083eb54bb5b6e19ddb41dd88a
Validity
Not Before: Jan 2 04:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4eb3052bf465f7f4fcda7b96da28c0987fd3855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:41:b2:88:bc:4f:13:28:bf:9f:74:f5:cc:
61:b5:71:b8:c8:17:a5:2c:da:d7:55:ac:ae:69:81:
e9:0f:18:92:bb:c1:7b:c0:02:8b:4e:f6:97:a5:db:
3a:dd:72:32:8d:9d:65:16:82:7a:50:60:bf:98:8d:
76:34:ca:e0:01:7e:43:50:bd:7f:f1:73:70:14:3c:
04:68:05:11:c4:a0:cd:c7:2d:f5:c5:ec:1c:aa:69:
45:63:6d:30:b7:0b:2a:83:2e:df:01:6a:77:aa:5d:
f0:d7:d8:ee:4d:94:ab:fd:ef:88:58:d4:b0:58:25:
46:97:fd:49:97:23:ac:66:86:60:b5:82:54:30:6e:
b9:ee:a4:3f:e9:d1:c4:5b:dd:07:95:37:78:05:5f:
fa:c9:ed:a6:22:78:d9:91:a8:97:e5:e3:96:0b:fa:
26:6c:88:42:b1:f9:73:35:e1:50:88:19:7e:44:fe:
d8:2f:9a:25:4e:31:43:d9:c2:f7:dd:38:b1:32:99:
cc:45:55:16:4d:d4:94:83:b3:d8:82:c6:e9:24:55:
69:77:35:d4:e5:69:61:3b:46:20:c7:19:de:e8:a7:
ea:44:6f:0d:12:d0:a1:ee:5a:ea:e5:a0:d0:6e:1b:
e2:f9:c9:1c:38:b8:49:45:d7:86:a4:27:cb:d6:33:
0f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EB:30:52:BF:46:5F:7F:4F:CD:A7:B9:6D:A2:8C:09:87:FD:38:55
X509v3 Authority Key Identifier:
keyid:27:F8:3E:56:B6:AF:76:00:83:EB:54:BB:5B:6E:19:DD:B4:1D:D8:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_g-VravdgCD61S7W24Z3bQd2Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/9OswUr9GX39Pzae5baKMCYf9OFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.56.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:79:f8:8b:f6:c9:bf:b0:98:14:0c:e2:61:bd:7c:1a:03:02:
83:98:9d:8e:d7:13:26:41:89:f5:de:3a:ba:64:ee:f7:06:1a:
79:3a:c2:0a:aa:f9:d2:fe:4c:cf:18:ed:18:97:7e:40:5d:bb:
cb:1d:7a:52:69:79:e8:d3:2e:1f:ad:42:f6:cb:80:ba:23:9a:
ee:1f:0a:0d:d7:69:b6:29:94:cb:1c:a8:50:2e:4a:db:c5:1d:
db:d5:1e:d3:4c:dc:30:98:b9:85:83:b4:a4:0b:21:a9:78:b2:
3a:64:60:c3:da:de:2d:0a:8a:fd:5b:25:0b:2e:9d:a5:bf:2f:
62:c2:81:99:08:aa:ca:d1:25:f2:4e:7a:5a:79:1c:c0:19:e2:
8e:a0:6d:c8:3a:98:58:8a:43:92:20:2e:e5:2f:b4:7f:2d:00:
94:03:06:4e:21:e5:dc:ae:18:58:d8:02:3d:7a:58:ec:f9:a4:
80:28:33:03:32:1a:15:8c:4e:c4:de:3f:5c:44:84:10:49:0c:
58:79:ff:af:53:26:04:05:a5:48:db:5d:19:29:79:e3:22:b3:
db:95:f9:1e:ba:b8:87:b7:19:b4:cb:8f:0b:4e:b0:64:1b:71:
c9:c7:7a:28:a5:c0:3d:8e:1e:5b:7b:05:36:12:bf:8d:1e:4e:
4d:5a:f0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:04 2024 by rpki-client on console-fra.rpki-client.org