Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/e__KA7qnLvUxH9XIqFFuj0i_2iM.roa
File: e__KA7qnLvUxH9XIqFFuj0i_2iM.roa (raw, json)
Hash identifier: f+unayAfHTK8qsan2MLqTNVHEva5C1GWM4TcKrhl5N4=
Subject key identifier: 7B:FF:CA:03:BA:A7:2E:F5:31:1F:D5:C8:A8:51:6E:8F:48:BF:DA:23
Certificate issuer: /CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Certificate serial: 0185724C938E9E9C04F37ECB13E446A1D9E7
Authority key identifier: 56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/e__KA7qnLvUxH9XIqFFuj0i_2iM.roa
Signing time: Mon 02 Jan 2023 11:44:59 +0000
ROA not before: Mon 02 Jan 2023 11:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199103
IP address blocks: 91.105.200.0/22 maxlen: 22
185.220.92.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:93:8e:9e:9c:04:f3:7e:cb:13:e4:46:a1:d9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Validity
Not Before: Jan 2 11:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bffca03baa72ef5311fd5c8a8516e8f48bfda23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e1:37:6b:71:50:fd:c4:95:31:f1:48:f3:25:
ab:d3:22:2c:65:9c:df:fd:80:10:89:0a:63:5b:b9:
34:9e:8b:ad:3c:3f:0e:30:19:b6:98:3c:60:5a:36:
50:9c:54:e0:f6:88:50:d2:dc:aa:39:1b:bb:68:ac:
02:c8:69:96:39:de:4c:8c:18:9e:7a:0c:d5:75:4d:
be:22:ab:bd:1c:db:19:7e:4a:4d:fa:1a:89:82:05:
f1:88:a6:8e:68:2a:fb:2a:f5:34:02:df:c3:49:e7:
3f:11:b9:b4:ad:c4:b9:b2:6d:ed:98:83:08:15:21:
f7:ea:9f:2a:5c:41:29:6f:a8:a5:69:1a:93:b8:3b:
a6:88:f1:f1:79:1f:3f:6f:df:32:a7:ca:91:f5:a6:
3a:f1:e5:57:5c:a9:e7:c2:b1:70:9e:7c:87:4b:bd:
3e:6e:06:2b:d3:ed:c8:91:3e:5d:78:85:68:c2:8a:
56:72:9b:13:25:77:06:0b:ba:2c:e9:ef:fe:28:b0:
66:66:ec:bd:47:a3:71:13:27:c2:3e:9b:14:bf:52:
ad:78:02:14:20:32:04:d5:da:5e:34:9b:04:43:0b:
e8:ec:76:6e:99:da:55:f7:f4:9d:ab:90:02:bd:50:
1a:20:21:6b:c0:4d:f3:8e:4c:6b:d0:11:a0:1c:b8:
1c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FF:CA:03:BA:A7:2E:F5:31:1F:D5:C8:A8:51:6E:8F:48:BF:DA:23
X509v3 Authority Key Identifier:
keyid:56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/e__KA7qnLvUxH9XIqFFuj0i_2iM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.105.200.0/22
185.220.92.0/23
Signature Algorithm: sha256WithRSAEncryption
56:5c:2b:a4:44:4f:19:ca:32:4c:34:2f:94:d0:3d:4d:d1:a3:
d8:3b:57:05:7e:76:50:58:31:3f:0e:6c:ea:8e:76:05:4b:93:
08:39:74:2b:e3:7f:9d:a4:20:34:1a:90:ac:9c:b8:a5:35:f9:
45:12:88:4f:7b:13:13:f2:3d:08:8d:4b:7e:6c:6c:8a:7f:34:
85:c6:88:7a:5f:26:2f:5b:3f:ad:6d:d5:59:7f:7b:0e:e5:5e:
84:7d:1b:f8:ed:ca:ef:ea:d1:7e:c2:9c:05:b8:5f:77:9d:f0:
e8:ea:9e:4c:88:08:ff:06:fb:d0:e4:9e:c6:e9:5b:74:85:a8:
6a:3c:9a:29:74:14:0d:02:a5:2d:a9:5e:a5:3e:e1:5f:02:ea:
23:04:bd:35:9b:4a:32:33:2e:bd:28:2a:7d:a7:fb:4a:50:9f:
22:98:5a:5c:19:b3:74:07:13:a7:82:8f:48:ba:8f:29:19:b3:
32:94:10:82:bf:8a:8d:ad:6c:e2:bf:ee:23:4f:b2:4e:ed:c2:
96:25:63:7b:d8:64:5c:90:70:4e:e6:27:6a:8b:67:2b:26:a1:
65:e6:77:3e:94:ed:4a:03:64:de:1a:5e:f4:52:df:66:da:f5:
dd:96:de:88:8c:2b:4e:06:69:4d:28:dd:5d:4d:97:dc:51:39:
4e:3a:ae:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:22 2024 by rpki-client on console-ams.rpki-client.org