Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/42DAvlvhACd0MQHSedeoJqe1vZg.roa
File: 42DAvlvhACd0MQHSedeoJqe1vZg.roa (raw, json)
Hash identifier: l1AJKt7q0TGQWiGx7ZG0yM8p8xt90sE4XLJHJ79Pl+U=
Subject key identifier: E3:60:C0:BE:5B:E1:00:27:74:31:01:D2:79:D7:A8:26:A7:B5:BD:98
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 0189CC5D10211781D08C0BBEFDAE67CEF278
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/42DAvlvhACd0MQHSedeoJqe1vZg.roa
Signing time: Sun 06 Aug 2023 19:39:58 +0000
ROA not before: Sun 06 Aug 2023 19:39:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57512
IP address blocks: 91.108.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cc:5d:10:21:17:81:d0:8c:0b:be:fd:ae:67:ce:f2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Aug 6 19:39:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e360c0be5be10027743101d279d7a826a7b5bd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:76:61:f2:0e:56:5e:44:e3:ab:ac:70:2c:23:
6f:76:a9:b6:d2:dc:48:fa:22:94:07:be:4a:44:69:
16:03:ce:9e:bc:03:a7:dc:fb:3a:42:40:10:70:02:
c4:f1:a1:f9:66:11:22:02:fd:0c:76:e4:c5:e3:c2:
b6:00:d4:5b:a9:ef:0d:49:08:1a:a1:46:14:9a:40:
20:a0:d2:11:1e:5e:11:97:9d:72:45:e9:19:bc:cf:
c1:ec:2c:ee:63:99:d5:bf:40:8e:d7:8f:06:9d:a3:
be:e1:0b:b6:32:72:62:40:9e:e3:da:51:3b:01:59:
f4:0b:5f:dd:b7:08:30:16:b2:7a:a2:e4:e3:b1:b1:
5e:a4:f8:e5:30:94:c2:97:df:c6:c5:a0:cb:86:03:
ae:22:6c:68:07:0e:b0:44:58:4d:4d:f6:26:de:b3:
dd:1a:fc:cf:ba:64:5c:2d:da:81:76:5c:be:69:b6:
8f:a1:03:58:32:d1:4c:f2:a4:98:20:4c:bd:ec:74:
4c:59:3f:9a:21:3d:97:7c:eb:f0:e4:f0:61:98:c0:
a9:82:ea:aa:5e:50:71:28:26:9e:c4:2a:1f:99:7a:
98:3b:69:41:06:0d:e6:2f:c7:e4:f1:56:dc:d3:cc:
fc:ab:4b:20:14:9f:05:e1:9f:d7:66:91:d6:5c:29:
34:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:60:C0:BE:5B:E1:00:27:74:31:01:D2:79:D7:A8:26:A7:B5:BD:98
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/42DAvlvhACd0MQHSedeoJqe1vZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.54.0/24
Signature Algorithm: sha256WithRSAEncryption
44:35:b1:fa:db:44:cb:d7:46:41:ec:9c:38:58:fc:8b:61:a4:
1a:b7:1e:45:ee:1f:82:16:4c:50:53:d7:86:df:e6:b7:96:9c:
c0:fd:6d:e1:3d:69:69:2c:dc:99:8f:98:6d:92:b3:1c:1b:f8:
d4:bc:8d:43:d8:c2:81:5e:46:05:7b:3f:0a:85:66:16:64:97:
61:0f:07:a9:37:32:6e:43:23:63:28:44:3d:2f:63:2f:a0:6d:
c9:4f:f8:0d:87:d0:2d:98:c6:2d:31:70:bc:27:ee:b5:e2:83:
ff:5e:8b:c2:28:9b:30:9b:35:b2:c5:bd:52:85:0a:dc:ad:b1:
3c:9a:d7:d1:5a:d0:43:0b:e4:d5:33:88:a3:14:e8:c8:d6:3a:
f1:2f:53:d1:95:b9:a7:45:f5:a9:54:74:40:bb:92:c0:d3:d4:
eb:33:52:84:37:03:10:e8:a7:9e:eb:ff:9e:89:19:ea:a5:1c:
49:6f:0a:41:66:c4:dc:9f:10:a8:c3:e7:f9:22:70:4f:25:ef:
51:73:74:dc:11:da:4d:06:73:a4:54:df:69:9d:3c:ac:ef:ad:
33:86:f4:f4:9d:8d:c6:70:66:57:3d:ce:80:e6:32:8e:ae:9d:
ab:79:78:56:15:2e:ef:18:dc:49:e4:bc:5d:cb:a2:cb:9f:18:
0e:7e:62:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:29 2024 by rpki-client on console-ams.rpki-client.org