Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/4FaKqGfaiIOlhU6tsTyFeNPN0A4.roa
File: 4FaKqGfaiIOlhU6tsTyFeNPN0A4.roa (raw, json)
Hash identifier: d+9zIVELT8E6IyufMqL/CnYGJh743TkG0bQgMbzR8s4=
Subject key identifier: E0:56:8A:A8:67:DA:88:83:A5:85:4E:AD:B1:3C:85:78:D3:CD:D0:0E
Certificate issuer: /CN=a4f8436003d37602026b65531755ca8fcd31bed2
Certificate serial: 018572311BFE63A8D2256C7BC666AEBC374D
Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/4FaKqGfaiIOlhU6tsTyFeNPN0A4.roa
Signing time: Mon 02 Jan 2023 11:14:59 +0000
ROA not before: Mon 02 Jan 2023 11:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44508
IP address blocks: 91.198.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:31:1b:fe:63:a8:d2:25:6c:7b:c6:66:ae:bc:37:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2
Validity
Not Before: Jan 2 11:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0568aa867da8883a5854eadb13c8578d3cdd00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:25:0b:0c:9b:2a:fc:57:a6:7f:6f:bb:38:17:
37:78:8a:7c:e7:8b:c7:af:85:a3:1c:1f:42:23:51:
15:78:f1:6b:7b:9a:5c:37:d8:6c:62:c3:1f:7f:4c:
25:a2:38:69:5e:20:0e:b2:a3:a4:31:92:42:04:98:
2c:69:05:8a:dc:19:94:28:06:06:53:44:c8:86:a2:
be:c9:53:85:29:48:a4:24:f7:83:a5:55:ee:d6:b2:
9e:6e:91:7e:7c:d4:9b:17:93:c1:5f:50:47:57:74:
df:8d:96:3b:49:94:99:7a:3a:cc:d1:88:67:5f:c7:
f3:6d:3c:6d:cf:1e:2a:64:83:7f:c2:bd:ed:50:61:
38:66:2a:3b:70:60:60:2a:c0:2d:94:88:54:a1:50:
a0:d3:20:1b:32:f6:4d:cb:4e:83:78:31:94:1d:a5:
27:5d:e5:bb:e8:c0:70:4a:da:5b:95:59:09:34:0e:
8e:7e:5d:4f:03:b1:d5:50:a6:d1:3e:77:f4:b8:aa:
4d:b4:c6:a2:69:c7:1a:70:6d:80:e7:36:11:2a:e4:
72:e8:89:9a:80:5a:be:c7:f1:87:61:96:0e:07:14:
f5:e7:79:78:60:7a:53:50:f4:36:a5:01:be:18:4e:
7d:c7:ca:98:5e:59:b0:66:ee:6c:20:21:2e:ec:31:
1a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:56:8A:A8:67:DA:88:83:A5:85:4E:AD:B1:3C:85:78:D3:CD:D0:0E
X509v3 Authority Key Identifier:
keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/4FaKqGfaiIOlhU6tsTyFeNPN0A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.227.0/24
Signature Algorithm: sha256WithRSAEncryption
10:06:e7:fa:af:37:3d:8b:ff:8e:25:53:05:01:bd:69:08:52:
43:55:f1:91:40:50:b6:ba:2d:fd:d3:35:4e:88:c5:0a:16:2f:
88:c1:9d:42:7c:a4:e1:5e:d7:80:d1:de:f0:32:69:f0:3c:7c:
d7:4e:0a:ae:15:3f:ed:cd:fd:87:0d:31:a0:d5:1e:24:19:3a:
e3:00:d8:7b:00:26:86:04:4c:95:d1:6f:2d:62:d3:6f:4b:7b:
4e:12:9b:39:d7:74:43:08:f8:50:4c:65:4f:91:3e:5f:7d:44:
4d:2f:76:78:14:29:79:7b:41:f7:8e:fa:0c:fd:e9:0a:d4:ec:
31:3d:ae:0f:b4:af:41:6c:18:07:66:42:b5:f1:7e:73:28:a3:
a3:09:44:be:8c:8b:98:2f:c2:6f:53:3b:77:fc:a0:62:45:79:
c8:9e:34:31:51:3a:8c:c5:9a:d8:3b:de:9d:81:2e:d4:f5:10:
3c:10:f3:b0:cf:6d:5d:3d:e6:59:bd:30:35:64:71:28:66:8e:
97:45:62:5f:6d:d3:cb:ad:18:6e:bb:48:28:44:53:2d:4f:06:
d1:5c:3d:22:6a:4e:69:34:4c:3c:87:86:1c:b7:5f:9c:8d:a6:
69:6e:2e:87:25:f1:9c:fe:34:2a:04:f3:a0:5f:5d:ae:33:c3:
5f:1a:42:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:51 2024 by rpki-client on console-fra.rpki-client.org