Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/6ZZ8oX8mWt8vRYXAc5GNQglorNA.roa
File: 6ZZ8oX8mWt8vRYXAc5GNQglorNA.roa (raw, json)
Hash identifier: gXpqgi/L42zPL88jdmeWpo5xtfkHRRry/K89tDBqxVw=
Subject key identifier: E9:96:7C:A1:7F:26:5A:DF:2F:45:85:C0:73:91:8D:42:09:68:AC:D0
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01877FC2BC4A7EA333B442CB6BE9C5A0A31B
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/6ZZ8oX8mWt8vRYXAc5GNQglorNA.roa
Signing time: Fri 14 Apr 2023 12:34:41 +0000
ROA not before: Fri 14 Apr 2023 12:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.200.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Apr 2023 11:11:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:c2:bc:4a:7e:a3:33:b4:42:cb:6b:e9:c5:a0:a3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 14 12:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9967ca17f265adf2f4585c073918d420968acd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:9c:98:66:f6:f7:cc:11:c6:c0:0e:2f:2f:
cf:da:69:47:58:f1:10:37:73:a2:76:0e:f9:a3:09:
0f:3c:79:40:8f:25:69:9b:5d:c8:ec:fb:ff:de:09:
89:30:df:58:bb:9d:99:a1:49:25:14:b8:35:9d:86:
5c:cf:67:46:63:b9:49:fc:a8:10:27:16:a4:ed:65:
28:ea:bd:7c:d6:f5:7a:61:c3:ad:f2:67:82:07:86:
92:16:bb:53:f4:44:23:68:eb:6d:c5:fd:2e:8a:5f:
9a:5f:5f:1e:de:ac:5a:97:fb:b5:15:79:20:33:04:
72:50:0d:5c:59:39:f7:2d:90:24:62:ae:f8:82:73:
14:0e:67:3b:7e:57:a7:c6:c3:ca:ec:c8:5e:ad:40:
af:18:39:2e:b4:a9:b4:15:cf:8f:be:ce:bd:01:a2:
bf:18:b6:c1:c7:c1:12:c8:d9:76:37:b0:2b:93:ef:
32:ab:81:db:d6:d4:d1:eb:0c:8c:99:4b:0d:b6:9d:
af:32:39:12:ba:fd:ae:7a:17:83:42:c8:45:6f:24:
d1:ec:c9:aa:10:38:8e:74:17:41:c5:68:86:9d:f1:
51:63:34:9f:5c:5a:8f:68:94:b2:22:d4:69:03:e2:
03:db:a6:6d:b6:90:c4:23:4f:7a:01:9f:10:9b:06:
c4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:96:7C:A1:7F:26:5A:DF:2F:45:85:C0:73:91:8D:42:09:68:AC:D0
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/6ZZ8oX8mWt8vRYXAc5GNQglorNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.220.0/24
Signature Algorithm: sha256WithRSAEncryption
08:27:6b:3e:39:80:2d:89:64:ec:a2:01:f6:81:e8:f3:12:d8:
0b:51:ba:c5:e5:cd:8f:fb:fa:a2:63:f9:48:71:90:cb:96:24:
00:9f:2b:e2:60:4a:0d:da:8d:2d:81:f4:c7:eb:1f:b6:1b:3b:
d7:3e:60:c8:7a:44:06:09:11:5b:22:1f:2b:69:35:f4:29:da:
98:55:69:51:d9:95:53:92:3c:02:3f:cf:f9:1a:9b:38:19:ba:
28:4f:5a:3f:b7:47:94:42:4b:1a:72:19:a7:f5:5e:2f:d3:b3:
1e:87:fd:4f:2f:df:7a:e2:36:42:c0:ed:24:a9:db:2f:8c:ec:
c1:b2:a1:34:66:19:44:22:3a:93:a2:fa:bd:d6:63:3b:a9:03:
6b:44:7c:22:f0:fd:bb:11:15:23:1c:37:5b:94:4c:b5:1a:e9:
9b:54:4d:df:78:62:1a:f8:9d:96:04:af:00:c7:ea:69:f4:6d:
75:e4:8f:01:35:fc:68:de:f5:1b:cf:65:7b:83:f2:40:e0:88:
41:46:29:90:e2:b3:eb:08:a0:44:00:cf:80:fd:d7:6f:c4:c5:
83:51:c2:2f:3b:7b:65:f1:36:10:06:0a:6a:07:18:e5:3c:36:
47:44:44:e5:e5:b0:46:7d:ae:09:a0:42:a7:33:ce:2a:1c:af:
19:0c:84:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org