Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/YV0kmiI3T2oMAMzxnW1rf7aNZks.roa
File: YV0kmiI3T2oMAMzxnW1rf7aNZks.roa (raw, json)
Hash identifier: Jw8lTXALzWaB4Weriaht9e77u1AjqkSZtZPBSaLQIzU=
Subject key identifier: 61:5D:24:9A:22:37:4F:6A:0C:00:CC:F1:9D:6D:6B:7F:B6:8D:66:4B
Certificate issuer: /CN=79bc498edc4189584874b7cb45025ef542481b6a
Certificate serial: 01856F0234590B5D3CBD2EF234915D791EBE
Authority key identifier: 79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/YV0kmiI3T2oMAMzxnW1rf7aNZks.roa
Signing time: Sun 01 Jan 2023 20:24:53 +0000
ROA not before: Sun 01 Jan 2023 20:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198163
IP address blocks: 91.206.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:34:59:0b:5d:3c:bd:2e:f2:34:91:5d:79:1e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bc498edc4189584874b7cb45025ef542481b6a
Validity
Not Before: Jan 1 20:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=615d249a22374f6a0c00ccf19d6d6b7fb68d664b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8c:09:e5:11:8b:f5:86:bb:a0:76:49:06:dc:
28:42:35:cc:a1:b0:92:a8:f9:82:44:58:7d:11:2d:
8e:57:4f:45:a9:e1:6e:46:0d:ed:e7:67:27:01:d8:
7c:bf:63:12:11:73:4c:25:e1:c6:68:42:2e:ae:73:
39:e0:11:e4:10:e3:7a:05:ad:55:f1:6b:d6:32:ac:
03:98:71:07:bf:a2:91:3e:8d:17:51:66:6c:6c:7c:
d1:c5:02:f6:b5:b6:6f:03:24:51:12:25:db:dd:65:
87:8f:8e:7f:0e:d5:c2:cc:db:80:fd:57:92:0b:6b:
19:da:9c:69:ed:d9:ce:73:07:00:67:5f:1f:7b:94:
1d:a0:32:d0:b1:b7:86:0a:6b:a1:28:62:b7:ae:da:
db:67:f4:6b:a5:ca:f0:7d:59:88:57:47:03:03:4b:
69:7a:c4:ae:ee:a3:d5:55:8a:05:09:01:68:8e:09:
f4:65:ab:43:0c:b9:88:9b:da:87:36:ff:4b:a3:bc:
d7:57:ef:d7:66:05:2b:77:bd:52:57:4b:e7:02:70:
1b:df:59:30:f9:dd:a7:37:e9:63:b2:75:7d:a3:ec:
85:82:ac:8a:b1:22:96:19:73:78:0d:37:3b:35:6b:
dd:7b:54:ae:df:1a:57:c6:88:6e:6e:64:9b:14:a8:
98:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5D:24:9A:22:37:4F:6A:0C:00:CC:F1:9D:6D:6B:7F:B6:8D:66:4B
X509v3 Authority Key Identifier:
keyid:79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/YV0kmiI3T2oMAMzxnW1rf7aNZks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.90.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:fa:c6:9a:e1:bc:4c:ad:c4:96:78:e3:d3:83:5e:d5:7a:76:
13:d7:26:60:05:b7:6d:44:9a:16:b2:de:67:c8:06:d4:d9:6a:
01:bb:1b:74:be:08:04:9a:41:b6:01:2f:c9:67:17:5c:dc:ca:
5c:21:a6:91:4f:5e:77:9b:f1:33:aa:f6:fe:70:41:d5:23:81:
98:ae:91:85:13:a0:ad:c9:d6:f1:34:12:04:d4:16:3b:b2:e0:
bc:5c:40:5e:7b:55:f0:32:3d:0d:e7:c1:67:48:6c:67:31:b2:
9d:82:89:29:e0:ef:04:33:fe:6d:b7:aa:7f:7b:30:7a:cf:d8:
31:c7:bf:fb:08:07:3f:17:c3:33:f4:e4:ce:45:15:06:cc:fd:
a7:73:be:17:6f:fa:3f:07:34:f6:4a:63:7c:11:54:85:6b:7c:
3d:b5:94:b7:18:43:1c:0f:e2:02:bc:87:df:76:b7:a4:dd:d5:
63:c1:ee:1f:54:af:88:e8:c6:88:9a:50:57:6b:b5:ed:e6:87:
d2:42:4b:89:df:71:80:69:f1:48:3a:40:7f:0e:e7:65:54:1d:
01:83:64:d9:72:ee:4a:e6:07:56:eb:cd:9c:1f:9d:c4:21:cd:
18:64:28:09:d1:61:b6:bb:99:35:54:7f:39:72:e5:ef:dc:99:
bd:d7:fa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:09 2024 by rpki-client on console-ams.rpki-client.org