Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/07NAC5GKemEsKMW1YnfDWBGK3qk.roa
File: 07NAC5GKemEsKMW1YnfDWBGK3qk.roa (raw, json)
Hash identifier: GSzWbzmg7PHxaNAXXf5tJf/W0D6QA2jbUVCr6ZcHs+c=
Subject key identifier: D3:B3:40:0B:91:8A:7A:61:2C:28:C5:B5:62:77:C3:58:11:8A:DE:A9
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018827C31D8B9272B90A22F75DA6B47BFF61
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/07NAC5GKemEsKMW1YnfDWBGK3qk.roa
Signing time: Wed 17 May 2023 03:31:18 +0000
ROA not before: Wed 17 May 2023 03:31:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 91.200.223.0/24 maxlen: 24
91.226.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Jun 2023 09:38:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:27:c3:1d:8b:92:72:b9:0a:22:f7:5d:a6:b4:7b:ff:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: May 17 03:31:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3b3400b918a7a612c28c5b56277c358118adea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:25:6b:88:70:0a:09:ec:bd:76:f6:7d:05:cd:
ff:ce:8f:89:cf:7a:a0:7a:06:98:43:36:2b:cf:99:
3c:d3:8d:95:da:62:79:d8:13:68:91:a6:a2:1f:5a:
11:ab:c6:db:07:11:9a:bf:8b:d5:86:9b:1c:a1:18:
b2:7f:4b:86:db:33:39:60:a7:47:29:c7:d1:09:19:
f0:30:66:ae:ee:3a:f4:5e:e7:e8:9a:86:de:2c:2b:
70:ed:85:29:d4:eb:bd:ee:c0:cd:13:b0:4b:c3:47:
8a:b4:fa:32:62:c9:8c:e6:06:f2:50:ab:e8:bc:75:
cd:60:1e:86:7a:29:1d:87:30:12:1a:63:e1:d4:97:
1f:52:f5:37:9f:fc:8e:b6:e1:9e:c2:be:cb:73:e4:
2b:3e:5a:4a:c8:21:45:0f:ca:bb:b3:fe:c1:62:e0:
27:01:1d:3a:90:42:fe:b2:e2:05:a7:d3:10:31:37:
e9:4f:a3:a4:b2:23:93:b9:30:aa:87:38:ac:22:ef:
fa:9b:04:6b:96:2a:48:12:b2:e6:5e:7b:45:6a:88:
fc:2b:e7:65:e4:98:10:ad:28:b7:fa:d5:57:40:4a:
5d:c9:0a:b8:73:03:3f:9b:ad:82:cc:34:6e:17:e2:
1d:b3:78:5a:af:e7:50:08:de:75:d6:2f:fd:80:a5:
26:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B3:40:0B:91:8A:7A:61:2C:28:C5:B5:62:77:C3:58:11:8A:DE:A9
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/07NAC5GKemEsKMW1YnfDWBGK3qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.223.0/24
91.226.57.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:73:6f:4c:9e:d7:0f:ef:f7:45:9d:10:db:b6:40:97:19:83:
91:b5:9a:41:af:18:d1:8a:8b:c9:ce:b6:4f:fd:00:6c:8c:fc:
50:80:28:ea:8e:30:51:79:13:0a:64:c5:23:00:61:22:b8:b1:
21:2c:14:56:cc:e3:36:cf:1f:76:3b:66:23:d6:79:13:73:0e:
92:79:20:ec:c3:cd:65:29:30:2b:7f:d4:42:a4:3e:cb:84:bd:
41:11:a4:4b:e9:7d:c0:5b:21:fb:c7:1e:d0:0c:81:08:1e:ae:
aa:1a:d3:29:ad:32:eb:b4:4c:c0:65:87:bf:12:f9:47:a5:47:
dd:4c:42:52:3f:86:99:cc:58:da:14:23:0e:99:3c:a0:18:d1:
cf:d6:bf:6a:b7:a1:58:20:3d:e6:bb:53:be:02:3c:20:e9:f7:
8e:d6:3d:38:11:7e:96:f8:03:4e:67:29:f4:0d:67:7e:5d:b6:
cc:06:ac:b6:79:0f:83:2a:c7:ff:5d:1e:8f:3a:dd:cb:0a:19:
23:fc:2e:04:32:01:ff:75:78:ab:91:d1:86:e5:9e:f1:f4:ca:
35:07:7f:4a:00:cd:18:45:66:1b:a1:28:10:0c:99:7c:39:9b:
8f:f7:60:d0:ff:db:46:0a:67:02:2a:a7:75:9d:16:68:e3:95:
e4:95:4c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:05 2024 by rpki-client on console-ams.rpki-client.org