Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/V4pk-ju2RTNGTu1GuAC0DtqC37s.roa
File: V4pk-ju2RTNGTu1GuAC0DtqC37s.roa (raw, json)
Hash identifier: O2iYrC+vFV2e/TRZjlSeme8jWOVtd9ERFHFcKDcu2Nc=
Subject key identifier: 57:8A:64:FA:3B:B6:45:33:46:4E:ED:46:B8:00:B4:0E:DA:82:DF:BB
Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial: 018727EB7A654FC3BDA8FCAC0AA8F9C91564
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/V4pk-ju2RTNGTu1GuAC0DtqC37s.roa
Signing time: Tue 28 Mar 2023 11:12:36 +0000
ROA not before: Tue 28 Mar 2023 11:12:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210756
IP address blocks: 91.202.245.0/24 maxlen: 24
91.202.246.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:27:eb:7a:65:4f:c3:bd:a8:fc:ac:0a:a8:f9:c9:15:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Validity
Not Before: Mar 28 11:12:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=578a64fa3bb64533464eed46b800b40eda82dfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:48:91:50:50:8a:0d:89:46:17:77:a1:cc:c5:
e6:c9:cb:17:56:9c:33:dd:01:8b:46:24:6f:e1:87:
c0:2e:17:76:93:6f:4a:c8:f9:cc:e3:fc:39:ec:df:
2a:c3:d1:d2:99:7e:b9:94:b6:34:9d:48:77:a8:eb:
6e:b2:e1:e7:81:1d:c6:c5:6e:8e:70:99:1e:0f:f3:
9d:4a:7f:3d:41:11:d4:78:f1:51:87:5c:fd:55:e7:
f3:33:fd:9c:5d:b7:c0:6e:21:07:9c:14:e1:18:95:
99:39:0e:3d:7a:39:aa:8e:5a:64:58:94:43:d1:2f:
4f:88:50:37:8d:ec:2f:d8:60:58:0e:9f:07:72:07:
52:5d:8f:84:0a:d0:ca:8a:b5:34:3a:bf:70:ae:b8:
30:49:61:95:cb:9e:e0:ac:f4:5d:28:26:c6:2b:44:
8d:76:25:8b:1f:95:fd:02:d5:04:c6:6d:da:08:d2:
35:5f:7e:5d:5f:fa:e2:46:5e:fd:dd:f1:54:83:70:
d4:08:2d:6f:e0:21:c3:a8:11:d6:96:a5:a2:b6:5b:
24:9b:53:fb:b8:ad:94:2d:4a:56:32:74:a0:5d:c2:
99:63:42:41:8e:a9:89:b9:b3:40:2f:d3:4c:88:ca:
bd:c8:2c:e2:ce:d2:84:a9:d2:e2:26:fc:ea:30:7c:
06:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8A:64:FA:3B:B6:45:33:46:4E:ED:46:B8:00:B4:0E:DA:82:DF:BB
X509v3 Authority Key Identifier:
keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/V4pk-ju2RTNGTu1GuAC0DtqC37s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.245.0-91.202.247.255
Signature Algorithm: sha256WithRSAEncryption
7b:f5:70:fb:c3:ce:73:cb:72:76:c4:53:e6:28:d9:91:c6:15:
4b:83:b0:7c:e1:1b:41:86:2b:8f:27:11:1a:c4:82:eb:3e:93:
80:04:0b:c3:51:47:e8:f8:32:ce:27:43:7c:31:a0:c6:14:bb:
3e:19:15:86:7c:ad:bf:a4:d0:39:74:74:c6:a0:c7:e3:a2:9c:
de:f3:3b:21:1f:bc:46:ad:5b:41:62:58:8d:36:40:96:b7:bd:
57:98:3f:af:64:f2:18:2d:eb:3e:b9:85:33:48:8c:0d:64:e0:
d8:f5:ed:90:50:77:fb:73:73:8b:34:61:21:46:bf:fc:33:36:
66:61:7a:f2:ef:77:8b:e9:25:a7:dc:81:aa:d0:21:ac:e8:34:
d6:77:fd:68:ed:74:da:21:a3:85:db:59:f5:39:8a:c9:bf:e1:
a0:76:49:1f:ce:e8:53:1a:f3:f9:36:9f:1e:54:11:c0:34:b3:
69:4d:6f:4a:06:c4:7d:e6:23:09:05:7f:a3:f3:0f:2f:da:7e:
e7:26:4f:ba:cf:df:ba:59:dd:20:93:7b:b1:1a:4b:d6:12:02:
9c:64:95:4a:7b:53:57:d0:24:79:26:db:38:c4:f0:27:68:3f:
3b:d1:a2:57:a4:66:e6:c0:21:2a:ca:e4:d1:88:4f:5f:a0:53:
17:d1:86:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:46 2024 by rpki-client on console-fra.rpki-client.org