Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/7CjB5i75UoVwlnc_gcUtTzFhoYQ.roa
File: 7CjB5i75UoVwlnc_gcUtTzFhoYQ.roa (raw, json)
Hash identifier: WsiJ84yB2jerdRkVd0R1BCeBP1S8x3Agpuca6B7RovY=
Subject key identifier: EC:28:C1:E6:2E:F9:52:85:70:96:77:3F:81:C5:2D:4F:31:61:A1:84
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018C85E0B9624E0F2C109FD43EE653861E5A
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/7CjB5i75UoVwlnc_gcUtTzFhoYQ.roa
Signing time: Wed 20 Dec 2023 06:19:06 +0000
ROA not before: Wed 20 Dec 2023 06:19:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 91.200.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:85:e0:b9:62:4e:0f:2c:10:9f:d4:3e:e6:53:86:1e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Dec 20 06:19:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec28c1e62ef952857096773f81c52d4f3161a184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ab:51:72:53:e4:95:8b:a0:e0:f6:2b:07:a3:
2b:c5:23:a9:7f:74:9d:10:d8:f4:71:ae:60:62:f4:
24:c5:e3:8d:db:d6:f9:74:a5:93:f6:65:0a:58:b6:
81:6c:df:4d:5e:e5:cf:7c:b3:99:cc:2f:c9:3f:c0:
f8:69:10:ea:dd:29:fa:99:43:e9:96:da:f6:8f:ea:
cd:ff:f6:83:d8:77:c3:11:0f:63:99:fe:cd:09:7d:
b5:57:6e:46:e8:50:0b:24:e4:1f:0a:db:d6:cb:11:
a6:ce:8e:fe:cf:8e:92:8e:01:01:d9:c3:7c:93:7e:
cf:24:8a:63:66:a9:04:b2:ae:40:20:d6:49:25:7f:
a8:7b:df:b1:29:82:be:d9:4f:c0:25:12:5f:4a:e7:
11:e3:00:c2:b0:8e:ff:60:26:1a:22:a4:d3:02:72:
23:6f:f2:37:c4:bc:4f:3a:8c:e3:63:58:07:ed:f6:
68:a9:98:da:c2:b8:5e:35:e2:3c:11:80:14:e0:b3:
71:7d:29:c5:c8:35:e5:5d:50:57:11:9c:3f:10:e9:
2e:11:de:dc:09:62:cb:1f:55:3c:e0:5a:07:97:c0:
22:4f:51:1c:3c:f7:39:da:83:a4:77:27:8c:56:b0:
6e:e2:a6:24:ca:02:72:93:6e:4f:91:30:03:2c:47:
c3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:28:C1:E6:2E:F9:52:85:70:96:77:3F:81:C5:2D:4F:31:61:A1:84
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/7CjB5i75UoVwlnc_gcUtTzFhoYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.220.0/24
Signature Algorithm: sha256WithRSAEncryption
49:7f:3c:16:d6:a8:6d:ac:60:a1:fc:96:e7:b6:91:3c:89:9a:
40:4d:92:be:a3:bc:2b:a8:42:5d:58:d3:2a:a6:c3:88:9c:a6:
93:48:ec:0e:34:7e:f3:04:dc:65:b9:2a:6c:af:21:d8:1e:94:
85:61:2b:56:24:a0:5f:b6:2c:33:87:3f:65:8e:9d:46:ef:0d:
82:65:9c:dc:57:88:cd:5a:1c:b5:05:47:b2:9a:02:a8:a2:d1:
b1:83:46:33:aa:3d:0b:12:88:f0:25:a1:d4:0f:bc:bc:66:55:
85:b6:7a:4c:36:8f:a6:f3:13:4b:31:8e:7e:91:9a:31:9d:5b:
42:17:ed:1f:77:47:1a:9d:59:07:ec:63:41:e4:84:ef:be:44:
49:53:f1:ee:33:45:cc:3e:1e:b4:81:9f:bd:46:cb:c8:f8:0d:
dd:37:17:82:99:6c:79:99:36:fb:0c:b0:40:d9:40:de:3c:c4:
94:66:de:33:98:04:44:0c:35:7c:bd:8d:f0:c2:db:98:61:a2:
cf:e8:e2:52:57:a5:88:7b:2b:b4:60:f5:38:3d:68:eb:0d:5f:
c0:18:7a:2a:65:bd:10:12:87:39:e2:c2:0f:95:bf:4c:9b:0b:
a1:38:44:5f:d5:57:82:b1:87:41:0c:95:a5:8f:5e:dc:4b:e5:
ab:6f:21:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org