Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/_e7vntUdOOP00WtjX3L8YGVdRoI.roa
File: _e7vntUdOOP00WtjX3L8YGVdRoI.roa (raw, json)
Hash identifier: RMeK/CyJaJ3DJqPUh6xNXB2I1UStWCzvTln1zQPusBU=
Subject key identifier: FD:EE:EF:9E:D5:1D:38:E3:F4:D1:6B:63:5F:72:FC:60:65:5D:46:82
Certificate issuer: /CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Certificate serial: 01857383A819FA5C96825B6D7297408BD4BD
Authority key identifier: 7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/_e7vntUdOOP00WtjX3L8YGVdRoI.roa
Signing time: Mon 02 Jan 2023 17:24:46 +0000
ROA not before: Mon 02 Jan 2023 17:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.209.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 May 2023 07:51:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:83:a8:19:fa:5c:96:82:5b:6d:72:97:40:8b:d4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Validity
Not Before: Jan 2 17:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdeeef9ed51d38e3f4d16b635f72fc60655d4682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:ab:f6:75:18:ee:48:e9:c3:05:e5:a8:98:
1a:b4:dd:ec:48:bf:85:5f:21:af:c4:58:64:08:38:
da:9b:93:99:27:11:d2:f6:f7:30:72:3a:47:4e:75:
05:43:cf:59:47:c9:ae:2f:f0:14:70:48:ae:72:51:
8f:ea:fc:a0:e5:e1:08:d6:e1:6b:9f:cd:7c:98:b1:
9c:d9:33:85:55:83:7b:47:87:cb:3a:03:1d:25:c2:
fd:fc:1f:54:0e:bd:a7:58:66:22:0a:53:59:c7:27:
50:45:60:f9:64:49:52:15:fd:10:23:ee:f9:f5:10:
c4:46:aa:11:13:aa:41:f3:f5:42:f7:72:a4:1c:fd:
4d:65:53:d9:02:3a:b9:a6:96:ed:cd:df:d9:39:27:
c5:f8:63:e2:67:4a:3e:f6:59:03:2f:fe:a4:14:0b:
82:4d:9e:05:4c:b8:d5:be:60:2a:35:bd:d2:a2:4e:
04:db:c4:ad:44:44:c1:82:7d:e6:7b:5f:18:18:8e:
d8:f3:cb:ee:48:33:af:c5:cc:7a:8b:05:2b:a5:3d:
82:c3:8b:a2:fd:81:ba:c5:00:be:7c:c7:38:f0:9e:
52:dd:90:30:a8:21:9f:79:72:6b:f0:13:ae:2c:b9:
88:dd:34:4d:5c:b6:56:0b:3c:87:8c:56:31:bf:b4:
d1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EE:EF:9E:D5:1D:38:E3:F4:D1:6B:63:5F:72:FC:60:65:5D:46:82
X509v3 Authority Key Identifier:
keyid:7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/_e7vntUdOOP00WtjX3L8YGVdRoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.228.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:84:06:1a:fa:a0:f7:23:ef:4f:2a:ee:ec:4c:49:97:1e:be:
59:b5:4f:b2:04:73:0c:32:64:52:77:7c:61:18:83:20:25:ea:
6e:ab:c5:2c:c8:91:a1:ce:4e:02:b3:3e:ff:5e:c2:a5:9e:45:
80:d5:46:e5:72:d2:9a:88:c8:24:d2:39:3a:5b:c2:2b:33:49:
82:1a:4a:84:94:e9:b5:dd:f3:a8:8c:7a:85:bd:ff:1a:c9:cc:
e2:b6:65:24:a7:a0:f7:3e:e5:a3:2c:84:ae:98:74:5b:26:0e:
ca:bc:5d:3c:1c:c4:cc:35:e5:0e:53:2e:83:4d:3d:bf:69:5f:
b2:61:4b:4f:83:e6:32:22:e8:18:19:e9:ec:2b:ab:cf:f4:81:
62:02:86:2b:5a:de:3b:51:72:02:ad:c7:ae:0a:58:c7:7b:ee:
34:dd:dc:68:b4:92:55:0d:e9:82:ae:01:dd:a0:a5:47:e9:82:
35:fb:18:e7:7c:d7:4d:81:9f:95:25:46:d6:b0:97:e9:c3:1e:
ed:2f:d2:09:a3:3f:27:0f:4c:ef:a1:cd:4b:0d:87:13:e1:20:
ec:a2:bd:dd:74:9e:97:77:73:22:94:b0:c8:14:92:55:3a:93:
ef:55:b5:f6:88:22:89:b9:6f:b5:ad:1e:37:c0:3f:db:f5:b9:
17:9b:ac:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:21 2024 by rpki-client on console-fra.rpki-client.org