Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/Y_wgIhTWktcKE1ojdcRelVbFJyk.roa
File: Y_wgIhTWktcKE1ojdcRelVbFJyk.roa (raw, json)
Hash identifier: FZm+lqvcIuFn14Wl2fG2b66QfnPT3OKlQ6l/dcDvvfE=
Subject key identifier: 63:FC:20:22:14:D6:92:D7:0A:13:5A:23:75:C4:5E:95:56:C5:27:29
Certificate issuer: /CN=78ac31635d091be6155743311fe1db7c7af3477b
Certificate serial: 01856E01E85A1C2CE44683E70A8CD23F9AC6
Authority key identifier: 78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/Y_wgIhTWktcKE1ojdcRelVbFJyk.roa
Signing time: Sun 01 Jan 2023 15:44:56 +0000
ROA not before: Sun 01 Jan 2023 15:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208901
IP address blocks: 91.198.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:e8:5a:1c:2c:e4:46:83:e7:0a:8c:d2:3f:9a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ac31635d091be6155743311fe1db7c7af3477b
Validity
Not Before: Jan 1 15:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63fc202214d692d70a135a2375c45e9556c52729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:65:c3:de:22:72:fd:91:9c:12:ef:25:16:bd:
03:03:58:57:83:65:6c:46:c4:3f:d0:18:b0:46:60:
d6:4a:ac:62:19:f0:fc:c8:e9:04:e8:c0:69:79:fa:
d4:7f:98:c1:44:dc:43:8e:64:da:71:13:d9:de:b2:
1d:fa:9b:94:6e:7d:01:34:29:16:8b:70:a9:24:e6:
63:ba:b7:99:3a:ae:18:7b:b6:d8:86:20:9d:cc:5d:
bd:3d:63:e0:16:37:bc:85:7b:da:96:d7:0d:b7:8b:
24:d6:db:50:91:12:2b:95:71:c4:90:32:df:6e:75:
7d:40:40:69:36:ce:d5:11:8f:c3:e5:b7:44:ef:b9:
22:ae:ec:50:e9:fc:80:38:9f:bc:11:30:07:f1:17:
79:47:62:98:92:0b:eb:44:7e:03:d3:51:f0:ec:4c:
62:79:54:96:84:1c:37:f6:fd:b7:a8:cf:66:2a:20:
1d:b0:bc:0f:09:5a:2b:8f:93:74:88:5d:2e:e7:58:
ed:d7:3e:6a:9d:c5:57:e2:78:3b:29:e8:c0:4a:7b:
44:39:6f:b3:e9:fb:fb:83:36:01:99:03:17:f9:e8:
dc:36:e3:21:24:3e:b3:47:3d:c0:32:04:6e:9f:ba:
f3:36:83:d7:a5:4f:42:ce:50:d7:4f:26:2f:f6:ec:
ae:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FC:20:22:14:D6:92:D7:0A:13:5A:23:75:C4:5E:95:56:C5:27:29
X509v3 Authority Key Identifier:
keyid:78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/Y_wgIhTWktcKE1ojdcRelVbFJyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.64.0/24
Signature Algorithm: sha256WithRSAEncryption
10:2c:4f:18:5b:48:95:ab:76:f0:a8:45:07:65:19:eb:e0:fb:
d1:80:61:91:45:b1:99:38:ec:d9:28:66:53:f4:c3:73:6e:2f:
b1:f2:70:1d:6e:ff:e4:db:17:e2:e6:ff:a8:c3:b2:ee:84:9e:
24:15:e9:4b:11:fe:dc:80:27:c6:fc:79:28:bb:92:9d:70:c0:
09:b3:6d:40:50:21:5a:a8:8e:35:0d:a3:8c:50:4e:4f:d4:74:
a8:af:c2:39:2e:d6:b1:b3:ea:d4:33:33:af:8f:6b:7c:cc:11:
10:f9:a8:b6:46:d6:bf:16:68:3e:50:4b:18:3c:fd:24:7b:43:
55:09:df:e5:cf:83:a2:19:44:7e:56:ac:68:5c:c8:4d:40:c4:
0d:46:4e:9b:67:3d:1d:3a:1c:fe:23:48:77:73:35:2f:7c:62:
71:43:f1:b4:dc:ee:b5:e9:4d:62:3f:1a:27:46:5e:d6:38:16:
68:83:40:4b:5c:81:23:db:0b:31:ea:e5:20:0b:da:72:93:f0:
e1:58:71:a9:97:89:55:53:63:21:d2:22:d2:9c:fc:65:1a:f1:
9a:57:89:94:e9:f5:65:28:af:0c:7b:b1:ce:3e:38:cb:b3:62:
54:84:f1:2e:4c:6e:20:0c:80:f7:8c:ac:f7:f8:d2:91:26:80:
de:5d:bd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:53 2024 by rpki-client on console-ams.rpki-client.org