Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/4-RqZzjccQd_l8Rnu8EKjEIc95M.roa
File: 4-RqZzjccQd_l8Rnu8EKjEIc95M.roa (raw, json)
Hash identifier: yVCnWKNSi5qxlHnWQh0vmNyaSlZpXn69XTNyjsK1vjk=
Subject key identifier: E3:E4:6A:67:38:DC:71:07:7F:97:C4:67:BB:C1:0A:8C:42:1C:F7:93
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01870393C012639DCE4397C943D7291E6FE6
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/4-RqZzjccQd_l8Rnu8EKjEIc95M.roa
Signing time: Tue 21 Mar 2023 09:50:27 +0000
ROA not before: Tue 21 Mar 2023 09:50:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 91.200.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Apr 2023 18:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:93:c0:12:63:9d:ce:43:97:c9:43:d7:29:1e:6f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Mar 21 09:50:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3e46a6738dc71077f97c467bbc10a8c421cf793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:2f:79:6c:0c:48:d0:6b:6d:61:f9:79:84:
45:39:b4:99:72:9a:b0:e2:a3:82:d0:d5:91:d0:95:
cf:42:9b:7f:b7:07:c7:17:19:f4:7f:06:0a:24:83:
29:65:3d:17:c0:f5:78:13:7a:f4:66:50:47:9b:43:
91:d4:4a:7d:3b:c2:55:d8:bf:a5:8a:1e:6e:ce:08:
27:80:ab:74:ff:89:36:80:23:f3:3f:34:88:1b:be:
fa:bf:d2:d9:f1:50:5d:8f:5a:cf:dc:dc:21:08:c5:
9c:72:1d:30:64:da:ea:7f:4f:7e:b9:a7:f1:ba:db:
fc:3a:e0:1a:93:55:e3:ef:18:37:b9:51:c0:80:c5:
8f:9f:e5:e2:00:54:ad:86:f6:14:16:3e:dd:92:4f:
18:9d:58:41:52:b5:e6:2a:b2:27:c5:b0:6c:eb:8c:
01:91:ad:e0:31:e5:4b:60:93:b9:4e:90:8d:ed:a3:
e7:0c:16:64:b5:d2:a4:39:93:88:8c:8d:8b:94:d5:
bc:5d:1c:36:72:d1:a3:9f:79:33:ed:b7:6a:d5:1e:
47:e3:4c:86:39:41:44:a2:2f:55:d3:b9:9e:d6:95:
34:61:ca:4b:21:7d:43:35:46:79:a6:4b:ea:04:6a:
00:1c:a3:0c:16:f7:8a:a2:fb:ef:de:8a:89:5c:a5:
fd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E4:6A:67:38:DC:71:07:7F:97:C4:67:BB:C1:0A:8C:42:1C:F7:93
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/4-RqZzjccQd_l8Rnu8EKjEIc95M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.220.0/24
Signature Algorithm: sha256WithRSAEncryption
96:63:0f:98:d1:01:88:4f:77:ec:06:d3:e8:d9:14:82:1e:6b:
1c:28:9a:7c:81:19:b0:b4:32:00:f1:a0:ec:19:fb:64:cb:bb:
2f:50:0e:5f:e3:69:64:9e:36:1d:40:39:9a:e7:0d:12:d0:f8:
d4:09:f4:a0:4e:f8:ca:89:b4:de:58:41:26:c3:02:26:35:41:
16:56:7a:ca:f9:86:45:04:11:46:60:f2:c6:e2:d6:11:8e:23:
62:2a:b6:c0:df:00:85:73:d5:40:ae:70:99:ef:85:3b:26:a5:
37:7b:95:ed:d3:98:b9:d2:35:ba:dd:c2:ef:64:1e:08:aa:83:
23:9e:f9:7c:78:30:f1:92:e8:9f:b2:b1:a8:d8:67:fe:95:a7:
fd:60:24:ef:2a:f9:3e:7b:24:04:3d:5f:d3:ef:d9:2d:fe:29:
18:20:0e:2d:a1:f5:92:7f:ba:7e:97:ce:f1:91:e0:8a:8a:4e:
e7:88:f4:3e:5c:44:21:d2:eb:df:1d:6b:26:b2:e9:5a:d8:aa:
7c:53:1d:ee:9e:ee:1c:fa:79:4a:ca:dd:d4:33:88:73:93:2d:
4d:66:83:d3:41:8b:a9:fe:71:01:36:ff:ab:49:04:4b:e8:10:
33:ed:bd:8d:6b:51:e0:bf:e6:c3:7d:3f:92:95:eb:6c:9e:12:
3d:73:21:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org