Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/g80zKQN7EuxotIw_l4WKFVEz5aM.roa
File: g80zKQN7EuxotIw_l4WKFVEz5aM.roa (raw, json)
Hash identifier: PiAhex6fFGz4vD3J2NQByUZZkv5Njyv14FhaPrll8zI=
Subject key identifier: 83:CD:33:29:03:7B:12:EC:68:B4:8C:3F:97:85:8A:15:51:33:E5:A3
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 018C6C9686613A6536738227A2938DCD34F3
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/g80zKQN7EuxotIw_l4WKFVEz5aM.roa
Signing time: Fri 15 Dec 2023 08:27:33 +0000
ROA not before: Fri 15 Dec 2023 08:27:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3223
IP address blocks: 91.221.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:96:86:61:3a:65:36:73:82:27:a2:93:8d:cd:34:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Dec 15 08:27:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83cd3329037b12ec68b48c3f97858a155133e5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fd:84:29:63:8a:71:25:fe:f2:1c:0c:53:a7:
2e:aa:9b:a5:df:f4:c3:cf:c0:0f:93:3f:a5:aa:45:
be:03:f9:91:40:9a:3b:a8:ee:9e:7b:58:d9:10:db:
d5:b2:e0:0c:05:be:6d:c9:2f:b1:7d:57:3f:bd:f8:
76:b3:48:ae:a1:bc:70:09:34:c0:d2:06:92:c9:0f:
77:94:88:49:b3:6a:2c:b7:9b:ca:0f:d0:70:9d:3f:
39:b5:bc:bd:b8:e3:f5:8d:94:2b:e5:b5:81:b0:80:
7b:00:d5:28:1b:7c:2f:a5:63:3e:b0:10:6a:3e:ca:
f3:8d:e4:68:69:92:1f:60:dd:48:c3:53:77:e0:53:
95:d1:67:a3:35:4a:32:9b:72:44:9e:31:56:5c:66:
a3:42:ae:ff:ad:ec:04:95:99:f8:4b:75:86:bc:9a:
18:ed:8e:26:74:fc:84:4d:e8:9e:6e:e9:5b:67:80:
9a:3d:b6:4d:48:93:71:49:e6:6f:ae:51:56:74:49:
e9:5b:70:32:13:b6:dd:2a:4e:1e:d5:85:27:ea:ae:
4a:37:0e:78:d0:f4:fa:a4:0b:5c:2d:0c:99:7f:f4:
5b:c5:20:d8:3c:ce:3d:18:be:86:82:72:bc:f0:98:
e5:f5:71:99:59:ab:f3:2c:67:e7:bf:c0:12:e6:1d:
be:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CD:33:29:03:7B:12:EC:68:B4:8C:3F:97:85:8A:15:51:33:E5:A3
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/g80zKQN7EuxotIw_l4WKFVEz5aM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.116.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:02:a4:94:00:ee:0c:57:60:b3:fe:41:66:86:1b:6b:70:fd:
93:31:2c:13:83:54:ec:31:7f:22:f2:3c:68:72:62:0f:65:88:
c5:6c:43:6d:60:8a:be:a7:53:52:57:2e:99:f5:e2:9f:b3:db:
58:39:12:75:e2:fb:dd:2c:32:98:88:be:44:50:85:ac:f5:d0:
46:08:ce:e6:9e:86:47:15:90:4b:7f:ca:89:80:81:28:7e:28:
b1:ac:e2:62:ca:1a:ad:2a:1e:d9:9d:25:6e:98:22:42:ab:e1:
1b:1a:76:c1:d9:df:a8:e5:75:e7:44:4e:03:42:b0:13:4d:bb:
83:f1:4b:af:61:ea:35:8b:b4:51:f0:2c:bb:3b:55:15:48:8e:
5f:ce:24:99:d5:02:9e:bc:4c:96:3d:a8:3d:07:75:ee:6c:d9:
c2:8f:ea:a9:53:f0:af:e8:d9:88:41:10:20:5c:d4:7f:2b:26:
db:2f:b9:ed:0b:0f:d5:b1:ab:9f:88:5a:81:db:4a:cf:75:d5:
9f:65:dd:71:19:e8:eb:aa:c3:cf:b3:eb:f6:d3:31:4a:87:3e:
0b:6f:22:88:d6:83:76:10:7a:be:3b:8a:62:02:67:99:d6:fc:
0b:ce:d9:03:6e:90:ff:a6:b9:2c:70:59:1d:a2:94:fd:2a:fc:
22:d6:c2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:38 2024 by rpki-client on console-ams.rpki-client.org