Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/EQPyQadLh1uv1YleAleBmWPD8ew.roa
File: EQPyQadLh1uv1YleAleBmWPD8ew.roa (raw, json)
Hash identifier: 0d+qpYj1dW5v7lwCWgsfcvCXW3gLkMKcKEkrwu3QL14=
Subject key identifier: 11:03:F2:41:A7:4B:87:5B:AF:D5:89:5E:02:57:81:99:63:C3:F1:EC
Certificate issuer: /CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Certificate serial: 018B814EA2A0816E45371558EDFB82E28840
Authority key identifier: F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/EQPyQadLh1uv1YleAleBmWPD8ew.roa
Signing time: Mon 30 Oct 2023 15:58:16 +0000
ROA not before: Mon 30 Oct 2023 15:58:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207829
IP address blocks: 91.198.170.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Nov 2023 08:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:81:4e:a2:a0:81:6e:45:37:15:58:ed:fb:82:e2:88:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Validity
Not Before: Oct 30 15:58:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1103f241a74b875bafd5895e0257819963c3f1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:f4:7b:dd:a9:0f:cf:02:52:7f:40:a0:3b:
20:70:ca:ce:e3:7b:aa:aa:1d:f3:39:25:a0:b5:96:
09:22:80:87:e4:23:b8:36:de:01:89:f5:45:c6:bf:
b5:4d:04:a8:b1:d2:9e:e5:43:f4:d7:65:bb:03:75:
2f:68:66:1d:ac:f8:48:66:2c:17:8c:a4:6f:07:91:
21:b4:f9:c2:ca:c8:97:eb:dd:bc:2f:48:62:6c:e6:
0c:32:a7:01:ad:b4:a0:07:7b:fd:84:a4:da:6e:03:
e5:ef:23:65:3f:e5:93:97:e5:5c:91:c3:df:21:5f:
b2:33:77:42:53:af:03:6e:0e:62:6e:7c:1e:b9:e0:
af:d1:79:a9:92:58:c7:4e:e1:0a:92:7c:bd:2c:aa:
15:58:02:53:a0:99:20:08:41:91:c7:1e:97:99:5a:
69:69:97:8b:2c:de:63:d8:18:a7:25:ea:07:1c:56:
88:3a:ff:e3:24:79:bf:76:cd:7f:3e:cd:97:5a:df:
8c:a1:7b:f8:f5:fc:56:7a:a4:44:02:40:d9:40:21:
d2:99:cc:64:a7:38:b8:44:dc:fa:12:30:11:da:f7:
13:ee:59:20:27:1e:f0:7f:37:af:42:05:3b:d4:11:
5d:ca:1b:63:a6:6f:43:b9:ef:38:dc:e4:00:75:cd:
81:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:03:F2:41:A7:4B:87:5B:AF:D5:89:5E:02:57:81:99:63:C3:F1:EC
X509v3 Authority Key Identifier:
keyid:F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/EQPyQadLh1uv1YleAleBmWPD8ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.170.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:c3:91:3c:b2:5d:30:1d:10:79:d0:d5:9c:14:ed:49:2a:18:
68:d3:fa:d5:ee:3f:8b:5c:fd:1e:3c:ab:9a:d7:16:52:ed:8a:
a6:be:f5:2e:ff:0b:1c:cb:92:20:1d:71:04:12:06:f9:10:0a:
0e:ca:69:85:94:d9:55:ce:5f:8b:9d:76:20:10:46:e7:01:00:
33:03:84:f9:33:0c:f3:48:0b:92:54:c9:60:6d:55:4c:3e:22:
bb:0c:41:5b:66:ed:09:58:ff:e7:07:eb:7a:ec:2e:8a:95:09:
68:f5:ac:72:b8:a3:69:fa:b0:f9:6d:d1:31:fc:a6:e4:16:d6:
fd:18:db:68:01:e6:b1:31:d3:88:8e:fa:8d:36:c3:d2:2d:93:
64:31:e8:80:80:a0:96:bb:76:91:d8:ec:22:5f:53:ef:4f:26:
54:5a:ef:74:fd:6d:56:79:7a:1c:24:46:86:22:6a:9d:25:3e:
b0:40:93:2e:18:b0:b3:71:55:32:a8:14:14:dc:91:df:69:61:
46:c1:9e:c6:fe:c7:fc:2d:6a:10:3f:78:00:1c:36:fe:d2:ce:
a7:53:59:57:8b:5b:31:5f:29:54:87:c0:72:d9:d5:cc:26:b3:
79:38:ce:cc:e8:16:3d:ac:dd:12:44:a7:4f:64:1c:6a:1e:92:
bf:5a:cc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:49 2024 by rpki-client on console-fra.rpki-client.org