Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/1-X4iD7o4RsulS8hRQhn1hYNWUxw.roa
File: 1-X4iD7o4RsulS8hRQhn1hYNWUxw.roa (raw, json)
Hash identifier: WPyqXhBX/qglgi3h8CWVSFm2nBwKOMZp99x4LZYw45U=
Subject key identifier: F9:7E:22:0F:BA:38:46:CB:A5:4B:C8:51:42:19:F5:85:83:56:53:1C
Certificate issuer: /CN=7982802ce71830590b26aba9971e12f6ae18dcee
Certificate serial: 01856FF94F0652818FE3ACB3789CE1DBDE85
Authority key identifier: 79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/1-X4iD7o4RsulS8hRQhn1hYNWUxw.roa
Signing time: Mon 02 Jan 2023 00:54:47 +0000
ROA not before: Mon 02 Jan 2023 00:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197357
IP address blocks: 91.220.63.0/24 maxlen: 24
2001:67c:a70::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:4f:06:52:81:8f:e3:ac:b3:78:9c:e1:db:de:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7982802ce71830590b26aba9971e12f6ae18dcee
Validity
Not Before: Jan 2 00:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f97e220fba3846cba54bc8514219f5858356531c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fc:fa:ee:48:55:bd:c9:88:19:4d:41:22:b6:
fb:86:da:5d:2f:6d:df:5c:37:ec:74:e2:65:4b:42:
ee:80:b0:4a:b5:55:95:03:5f:f9:f5:c2:80:b5:66:
3d:f4:19:94:df:bf:9c:ff:86:6b:70:d6:37:fd:a9:
b2:ba:af:5e:93:84:85:bd:55:b3:4c:23:cc:19:dc:
0e:f8:4f:20:41:b9:1e:d3:64:fd:5d:96:ae:4d:1c:
00:a3:6a:f0:f5:43:fc:42:37:fa:fc:b8:91:15:5a:
b6:b7:f8:78:f0:19:94:10:34:e8:e9:fe:2e:aa:bf:
4e:9e:da:85:0b:49:8c:a5:67:b6:13:c8:7b:fc:30:
63:5d:4c:7f:06:26:4e:a2:46:73:e5:b0:fe:3f:58:
27:b6:c2:39:a5:55:e7:0a:e7:76:45:bc:17:2a:a9:
11:c5:ef:7a:38:eb:7e:45:2b:d5:00:25:a2:54:86:
a4:b6:4a:1a:cf:31:2d:bd:02:44:a7:ee:ad:0c:cd:
53:21:e2:5e:49:82:52:01:f6:75:da:3d:2b:be:a8:
52:0b:69:36:fe:e3:5b:bb:48:98:89:d7:84:86:58:
36:93:37:e7:41:51:fa:c1:b7:34:8b:64:84:be:1b:
90:99:7d:c7:28:4c:eb:d3:2d:0c:b7:e0:e0:d3:1e:
50:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7E:22:0F:BA:38:46:CB:A5:4B:C8:51:42:19:F5:85:83:56:53:1C
X509v3 Authority Key Identifier:
keyid:79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/1-X4iD7o4RsulS8hRQhn1hYNWUxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.63.0/24
IPv6:
2001:67c:a70::/48
Signature Algorithm: sha256WithRSAEncryption
06:e0:4e:4c:56:93:52:e0:13:d6:34:91:f0:8b:28:1f:c4:dc:
0d:81:b7:64:03:0f:ed:ee:51:25:96:2c:e8:7d:8b:f1:98:59:
fc:b2:24:9d:f1:34:66:aa:37:85:9a:f4:73:a4:de:b6:5e:22:
ff:f4:48:d4:01:ba:09:0a:ef:6e:5e:0e:ad:c9:3b:fd:09:a8:
3b:b3:c0:1d:cd:69:a6:53:67:54:62:29:6a:81:16:21:b5:c0:
b3:c0:c7:d7:02:d2:21:c5:ca:88:16:ca:e3:c8:21:20:96:72:
fd:93:26:5f:75:14:03:31:e9:64:6c:17:bd:ea:fc:b0:35:df:
b5:ae:8e:46:ab:bb:14:70:e0:05:a7:fc:ed:03:44:bf:c9:6a:
b8:ca:5c:4e:69:3e:89:78:f9:1c:c9:58:00:e7:c2:e0:9a:28:
99:f8:a8:e7:94:c2:9d:d6:9e:23:d4:76:63:30:5e:3f:d3:d3:
b9:af:1e:30:e4:9c:f9:c8:6d:a6:ad:43:f8:5e:59:f7:68:92:
69:ec:d0:0b:1e:1d:51:37:05:2e:56:c7:9d:77:e0:65:ee:6a:
87:30:18:26:80:b0:0d:e2:5d:df:cc:9b:52:dd:eb:5a:2f:a2:
26:2d:58:0a:be:98:a4:0e:8f:56:a4:d0:f9:6a:ff:c5:77:51:
4d:54:b5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:46 2024 by rpki-client on console-fra.rpki-client.org