Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/7yjLVsJqN4wBBa3fZbkfMBjsZik.roa
File: 7yjLVsJqN4wBBa3fZbkfMBjsZik.roa (raw, json)
Hash identifier: NiIfFwjTZ6Kvpja7A0NQkiut/+mY7MH5iEZ/IzMOmt4=
Subject key identifier: EF:28:CB:56:C2:6A:37:8C:01:05:AD:DF:65:B9:1F:30:18:EC:66:29
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 018C7E6AEE80A5ED6675E3E6486CE43A4355
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/7yjLVsJqN4wBBa3fZbkfMBjsZik.roa
Signing time: Mon 18 Dec 2023 19:33:06 +0000
ROA not before: Mon 18 Dec 2023 19:33:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 91.235.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7e:6a:ee:80:a5:ed:66:75:e3:e6:48:6c:e4:3a:43:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Dec 18 19:33:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef28cb56c26a378c0105addf65b91f3018ec6629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1e:31:ef:70:af:8a:9e:b7:68:0d:26:8b:23:
ea:49:2f:bc:dc:41:21:67:03:2b:98:94:16:47:53:
66:88:7f:22:38:06:75:f1:be:61:b9:dd:07:84:52:
0c:a5:66:4d:1b:fc:f8:6a:b0:b1:b1:bc:65:22:d8:
0a:00:2c:98:b8:50:64:1c:37:8e:af:03:6c:6d:32:
ed:e2:ba:40:bc:f2:7d:6d:f7:93:d6:82:b4:25:5f:
06:50:67:22:e7:81:c7:b2:5f:6b:7a:ca:80:36:b8:
c9:ac:be:ac:77:33:76:89:e9:e6:4e:69:58:d6:a2:
3a:66:f8:00:77:8c:3b:44:9e:14:29:e9:60:04:54:
5a:6f:87:9c:bb:38:10:e5:8b:7d:01:1f:2b:e4:76:
62:7d:c5:20:32:a0:14:a5:4a:83:57:56:99:9f:16:
b9:f7:ae:6f:df:22:c5:2a:6c:b5:67:e0:0c:e6:83:
8e:d6:42:e6:c7:fa:1e:ed:8a:81:1f:4d:ae:35:36:
f7:95:83:01:26:7b:ce:5c:59:2d:11:21:27:f9:26:
f3:26:5d:b7:c1:52:50:1e:fc:0d:ee:58:7e:a4:eb:
6d:2e:95:5f:13:38:ac:30:f2:99:30:d7:cb:91:e7:
1f:bc:26:de:76:47:e5:27:0e:06:bf:85:70:12:c4:
9a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:28:CB:56:C2:6A:37:8C:01:05:AD:DF:65:B9:1F:30:18:EC:66:29
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/7yjLVsJqN4wBBa3fZbkfMBjsZik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.2.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:98:be:ce:03:a2:fb:4b:f9:d4:0b:33:f1:46:de:40:a4:b5:
a0:fe:3e:fd:48:58:f4:51:6f:2e:f6:59:35:47:7b:c0:07:69:
96:7d:6f:84:80:2f:8a:45:90:83:d7:29:09:1a:d0:37:da:b2:
ce:8f:82:24:1f:57:7c:42:a4:e3:a1:55:13:1f:f8:74:77:9c:
bf:05:e9:b5:40:76:30:bc:1b:03:5b:40:e2:ff:52:38:20:46:
3b:97:8c:0e:d6:a7:4c:0b:72:6d:9b:4f:f9:26:49:9b:c8:82:
21:35:88:3c:43:85:db:f8:6d:76:df:a7:a4:ff:df:c4:27:11:
46:42:ea:ee:bd:88:67:e1:72:ed:db:28:6f:47:ee:00:57:df:
f1:3b:c3:9c:43:7e:c9:d6:6f:f8:61:39:a1:ae:6f:8d:82:65:
6c:cd:bf:8b:b4:be:c6:b2:cc:5e:b8:3e:d9:d8:f5:b2:f9:e2:
18:bd:df:f6:d0:1c:79:67:97:5d:1c:13:ee:51:52:61:04:b5:
c9:0d:7e:73:c7:50:e7:90:2e:c1:4f:89:fa:df:a1:83:2d:d9:
f6:a1:94:ae:83:56:e9:fd:fb:a2:c7:9c:d3:96:5f:6e:a8:64:
af:ac:f7:8d:dd:08:e9:1f:db:7e:9d:9e:cf:be:a9:67:1f:50:
99:13:83:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:56 2024 by rpki-client on console-fra.rpki-client.org