Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/viPF7S5sbiprbbjL0KFsSrfIO6M.roa
File: viPF7S5sbiprbbjL0KFsSrfIO6M.roa (raw, json)
Hash identifier: 7Nxe5EDvOWgOiFkuYFFCwSoxG8dPsOt8AMfz6pUa6Ow=
Subject key identifier: BE:23:C5:ED:2E:6C:6E:2A:6B:6D:B8:CB:D0:A1:6C:4A:B7:C8:3B:A3
Certificate issuer: /CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9
Certificate serial: 018570D5024D87F15A265DFBA29E925A3392
Authority key identifier: 90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/viPF7S5sbiprbbjL0KFsSrfIO6M.roa
Signing time: Mon 02 Jan 2023 04:54:45 +0000
ROA not before: Mon 02 Jan 2023 04:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48480
IP address blocks: 91.211.48.0/22 maxlen: 32
193.107.96.0/22 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:02:4d:87:f1:5a:26:5d:fb:a2:9e:92:5a:33:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9
Validity
Not Before: Jan 2 04:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be23c5ed2e6c6e2a6b6db8cbd0a16c4ab7c83ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c1:aa:28:d9:80:c4:70:de:59:cf:ed:28:cd:
91:cf:76:b7:57:8b:68:75:d9:74:e6:bf:5f:ed:f7:
b2:72:04:78:20:d4:fb:ca:b5:fb:7e:9c:05:ac:df:
b6:b6:0a:a2:ab:9b:76:c6:80:b3:de:e1:d7:1c:75:
ae:89:a1:ce:4e:7d:d3:a4:54:bb:b7:f1:a7:8e:7c:
5d:33:df:79:5b:9b:54:00:d7:6b:3a:35:d0:c5:7c:
be:6e:e8:ec:6f:c5:12:30:2f:81:53:42:96:0f:3d:
83:cb:6f:86:52:ac:83:8a:b4:9b:0f:31:2d:03:8b:
a2:c1:ee:20:95:17:1c:d2:93:f3:34:d5:00:97:55:
f6:53:63:3e:4e:87:22:25:d2:5a:22:f8:ec:08:13:
32:c3:91:80:ed:af:98:dd:cb:a6:84:df:1f:68:02:
e9:12:43:67:19:5b:93:b7:c5:69:97:1f:54:2f:70:
d7:49:34:5a:b1:7a:fa:f3:d9:25:2a:23:55:c2:a2:
e1:27:98:b5:de:41:7f:54:36:a3:2c:c1:9f:fd:c7:
da:08:c7:b3:66:47:e2:46:28:3c:c1:b4:b5:0e:2f:
3d:bd:2b:94:be:f5:19:71:87:24:f0:2a:e7:74:ae:
fb:ab:5e:83:a0:26:c7:b4:55:a6:d2:ba:0a:c1:04:
fd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:23:C5:ED:2E:6C:6E:2A:6B:6D:B8:CB:D0:A1:6C:4A:B7:C8:3B:A3
X509v3 Authority Key Identifier:
keyid:90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/viPF7S5sbiprbbjL0KFsSrfIO6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.48.0/22
193.107.96.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:23:30:e1:be:1a:14:67:44:76:ab:90:29:3e:24:f0:77:7b:
64:92:83:24:55:46:0b:a7:10:c0:0a:9d:48:fa:4c:07:4f:19:
38:85:6c:c2:1b:a8:d3:92:80:70:23:1c:11:03:d9:e4:ac:27:
d3:a0:3d:57:b2:8f:79:44:66:ff:88:70:ac:5c:cf:12:61:e2:
fc:6d:dd:ec:a0:52:8f:d4:44:8c:ae:4f:fb:0e:9d:22:3c:0d:
12:7c:a8:32:3d:8e:d8:6f:10:f8:ab:10:ab:ce:8a:5e:2b:39:
8b:9b:e8:b2:7d:fd:5c:68:fb:b6:40:60:ac:29:cf:36:18:5c:
f5:f2:6b:aa:99:7c:14:83:75:4c:e1:f1:41:89:3a:ae:b4:65:
98:5d:f4:a7:53:8b:27:8f:24:45:32:fd:6b:07:fc:0c:8b:42:
5c:41:bc:22:f1:b0:cd:43:fb:27:47:44:f3:0e:a4:27:96:27:
b5:57:17:88:94:17:8f:c1:e3:f1:0c:08:03:ad:8c:f9:b7:0e:
f1:9a:2e:c1:82:4a:69:5f:02:f1:c2:38:e1:3f:2e:1c:d5:fd:
ff:8a:5c:ee:c7:93:b8:1d:58:78:4e:42:21:d6:34:89:cc:97:
b2:75:43:4f:fa:b7:94:d6:29:72:2a:f2:19:66:c2:81:fe:73:
75:f2:de:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:02 2024 by rpki-client on console-fra.rpki-client.org