Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/0aeda7-6d3a-418e-96d5-1ca2d55e2061/1/3RVVjMiprN4pxV8I2Usud-jprIU.roa
File: 3RVVjMiprN4pxV8I2Usud-jprIU.roa (raw, json)
Hash identifier: V2/ub/hXDzxh1gFW+H/WplH2sXwVfgcsaXzUIdZsAuw=
Subject key identifier: DD:15:55:8C:C8:A9:AC:DE:29:C5:5F:08:D9:4B:2E:77:E8:E9:AC:85
Certificate issuer: /CN=d4459dd6f7ccecfebeb434fc08db8e22d4569c23
Certificate serial: 018AE9960DEAE72B4A0BFC4A30B98238F85E
Authority key identifier: D4:45:9D:D6:F7:CC:EC:FE:BE:B4:34:FC:08:DB:8E:22:D4:56:9C:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EWd1vfM7P6-tDT8CNuOItRWnCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/0aeda7-6d3a-418e-96d5-1ca2d55e2061/1/3RVVjMiprN4pxV8I2Usud-jprIU.roa
Signing time: Sun 01 Oct 2023 04:53:59 +0000
ROA not before: Sun 01 Oct 2023 04:53:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.223.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Nov 2023 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e9:96:0d:ea:e7:2b:4a:0b:fc:4a:30:b9:82:38:f8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4459dd6f7ccecfebeb434fc08db8e22d4569c23
Validity
Not Before: Oct 1 04:53:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd15558cc8a9acde29c55f08d94b2e77e8e9ac85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3c:4a:01:00:e8:ab:63:09:76:46:1e:be:66:
25:5b:70:0a:68:85:3e:5f:25:e6:a8:ce:e3:fb:a9:
c2:0f:f6:4a:19:11:d6:6c:58:ec:11:1f:d5:ab:88:
2d:20:af:fc:0f:95:23:8a:9e:78:0b:eb:41:b7:7a:
08:84:31:71:ea:8b:33:5b:f0:c7:8e:4a:87:b4:63:
97:9a:de:c1:55:61:2c:42:e3:39:bd:dc:a0:95:6b:
b1:e5:ee:6b:35:10:52:92:f2:72:0b:99:3d:1d:e8:
a0:54:4b:d1:1c:18:3a:73:3a:fc:36:a8:7a:b8:b3:
3f:18:ad:ac:ca:a7:4a:fe:68:2b:cf:59:97:ca:e8:
ac:8a:a2:87:68:9a:34:ec:b9:3a:c1:57:84:7f:15:
43:69:44:79:1d:0c:d7:86:7d:70:d4:b3:80:5d:c8:
15:a9:12:79:77:7e:b0:31:b1:24:6d:41:c3:e9:cd:
0e:31:0d:0c:71:99:c0:27:29:1d:21:5d:2c:bc:7e:
94:06:ea:ef:4b:62:a7:b5:07:f7:6a:0c:d9:10:66:
5e:3b:4d:b5:8c:4b:25:8f:1b:e9:74:1f:81:0f:db:
02:f3:6a:00:e7:c4:fa:54:22:bf:3f:9c:91:0b:16:
36:df:2e:ab:41:83:df:b5:47:86:34:1a:d8:43:1f:
36:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:15:55:8C:C8:A9:AC:DE:29:C5:5F:08:D9:4B:2E:77:E8:E9:AC:85
X509v3 Authority Key Identifier:
keyid:D4:45:9D:D6:F7:CC:EC:FE:BE:B4:34:FC:08:DB:8E:22:D4:56:9C:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EWd1vfM7P6-tDT8CNuOItRWnCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/0aeda7-6d3a-418e-96d5-1ca2d55e2061/1/3RVVjMiprN4pxV8I2Usud-jprIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/0aeda7-6d3a-418e-96d5-1ca2d55e2061/1/1EWd1vfM7P6-tDT8CNuOItRWnCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.67.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f9:05:b0:ab:e3:53:c5:b3:cb:95:0c:0a:80:1b:a3:51:41:
91:0e:1c:d0:05:c1:e1:5f:72:c6:d7:cf:4d:ce:3b:a8:47:28:
47:62:7f:a6:8e:5d:6f:f9:fc:fa:ea:22:65:3b:0c:be:8f:47:
4d:7c:ff:f3:d8:91:01:94:e9:d7:7e:4f:d6:15:6c:6d:e3:d2:
2b:8a:95:cb:cf:6f:d8:93:b7:13:fc:06:0d:79:a2:0b:10:93:
ce:e3:39:ef:43:42:84:76:17:e2:75:4c:e9:0f:87:f8:b4:77:
66:60:2a:a9:74:cb:0c:bb:81:01:9d:51:ee:80:62:03:59:12:
67:e3:8c:5a:61:ef:19:44:7e:2c:1b:e7:27:78:50:ae:5f:92:
a4:fd:f1:e7:39:0b:0b:70:cc:b3:83:da:a5:c7:9a:24:6c:87:
88:a8:b9:28:1b:7d:7a:71:99:f4:b1:e3:be:61:c4:81:ac:70:
67:b4:b0:0d:7f:8a:d3:c8:e1:06:0c:27:25:98:31:02:5c:b5:
33:a2:9e:f0:ac:e1:50:bf:46:95:36:ab:aa:66:3f:a4:87:fb:
f8:b6:de:c7:fc:c8:6e:fe:ed:ee:a6:17:df:59:46:e6:8b:28:
3d:f3:69:d6:ae:cb:13:47:a5:37:e8:b5:4b:19:ba:8a:d4:28:
90:0f:b8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:03 2024 by rpki-client on console-ams.rpki-client.org