Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/lIVWzBk3b1tlY9zLOqfJCH5P9yc.roa
File: lIVWzBk3b1tlY9zLOqfJCH5P9yc.roa (raw, json)
Hash identifier: h1Sy3SeE/eMZyF1JzWNeyCG/qLRJEdgFAFCykjfORxo=
Subject key identifier: 94:85:56:CC:19:37:6F:5B:65:63:DC:CB:3A:A7:C9:08:7E:4F:F7:27
Certificate issuer: /CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Certificate serial: 01856B37D8FA4D04C65C918C1E4238263A56
Authority key identifier: 25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/lIVWzBk3b1tlY9zLOqfJCH5P9yc.roa
Signing time: Sun 01 Jan 2023 02:45:00 +0000
ROA not before: Sun 01 Jan 2023 02:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56622
IP address blocks: 91.226.35.0/24 maxlen: 24
91.226.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:37:d8:fa:4d:04:c6:5c:91:8c:1e:42:38:26:3a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Validity
Not Before: Jan 1 02:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=948556cc19376f5b6563dccb3aa7c9087e4ff727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:72:b4:87:91:b1:73:e3:67:5a:5a:ea:88:b7:
ff:6f:1f:11:7f:fa:ed:3a:58:a1:1e:ce:6b:94:10:
b2:ed:13:c9:79:6d:99:77:84:a7:9c:e1:05:b7:0d:
9f:31:13:2d:87:2e:0f:4a:e5:df:8c:9b:70:87:31:
1d:09:b3:bb:7f:81:44:2e:dc:a5:f2:f2:2b:21:19:
92:dc:2b:ed:6a:68:f2:16:15:7b:6c:f2:57:78:67:
c1:e3:8b:1d:9e:54:78:ed:51:29:e7:d6:3a:4f:62:
f1:3f:e3:b1:11:45:9d:ba:4f:1a:ef:7e:d9:c8:04:
84:04:63:c5:5f:90:04:23:c4:49:dd:1d:70:6f:2d:
5e:07:53:e1:12:f9:dd:b4:22:10:54:84:93:62:58:
71:4d:5e:78:b4:52:d6:c1:27:61:7e:7b:52:fe:5f:
ed:19:f4:c2:71:e0:1a:e3:1e:ec:26:98:1f:5e:8e:
83:3d:4c:a7:da:05:85:84:c1:8e:6d:53:75:1e:30:
2c:28:9a:b5:ea:ff:03:c8:fc:64:13:56:18:2d:4e:
df:a6:7b:ca:1b:64:4a:4e:1c:46:b6:cc:d2:0f:4d:
0d:c2:83:7c:67:26:45:86:b4:86:72:7c:02:82:9f:
d5:d4:84:fa:94:73:45:ff:9f:7b:ff:e0:44:76:13:
70:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:85:56:CC:19:37:6F:5B:65:63:DC:CB:3A:A7:C9:08:7E:4F:F7:27
X509v3 Authority Key Identifier:
keyid:25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/lIVWzBk3b1tlY9zLOqfJCH5P9yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.34.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:ea:74:01:88:76:78:8d:e1:1e:b6:84:3e:a9:18:cf:94:6f:
a6:a6:17:0d:bd:18:86:eb:df:29:e1:f6:42:af:5b:8a:eb:3e:
a0:b0:cd:0d:10:99:82:37:ba:58:21:7a:9a:b5:81:72:6b:a7:
ed:fa:16:80:5f:4d:41:99:d8:39:02:43:6a:94:d6:5a:e5:b5:
43:53:00:32:d5:1b:4f:02:ac:c6:23:b2:7f:48:02:19:28:ef:
4a:5d:98:0c:b5:dd:e5:7f:18:b7:2a:fb:71:a0:eb:b7:5f:c0:
1b:4f:ad:c1:d8:f7:34:f7:51:35:4a:d3:b9:48:ad:3f:7f:e0:
22:05:1a:a0:c1:b1:5e:47:b5:6a:e9:fd:12:92:f0:e0:bc:2d:
12:3d:b3:b8:32:58:fa:b6:04:f2:13:45:0a:2f:fe:19:63:7d:
eb:2e:2b:73:2d:cc:b7:08:73:e8:7c:ce:31:ba:7a:fc:6d:90:
f4:bd:7f:6e:8e:7e:ac:f4:84:fd:be:12:47:9f:e3:6f:a8:52:
e8:3b:45:67:1e:ba:ba:b6:2a:df:57:fc:a7:bc:2f:49:69:63:
84:99:e5:d1:5c:a3:bc:ee:c2:9b:36:e4:ab:91:0c:a1:da:c2:
15:27:bd:5c:aa:41:a5:f3:99:b5:1f:04:b0:02:3b:6a:d0:76:
3d:e8:1b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:57 2024 by rpki-client on console-fra.rpki-client.org