Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/IdRk7u197WN31kodb_-McQRqHaU.roa
File: IdRk7u197WN31kodb_-McQRqHaU.roa (raw, json)
Hash identifier: u04cfrNGAfazoHhX5keH4AuBTrxJ7jp7fWyi2bThNNk=
Subject key identifier: 21:D4:64:EE:ED:7D:ED:63:77:D6:4A:1D:6F:FF:8C:71:04:6A:1D:A5
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01856ED4DF1A205E9F966DA74CEA6F46268E
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/IdRk7u197WN31kodb_-McQRqHaU.roa
Signing time: Sun 01 Jan 2023 19:35:22 +0000
ROA not before: Sun 01 Jan 2023 19:35:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 91.226.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jan 2023 09:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:df:1a:20:5e:9f:96:6d:a7:4c:ea:6f:46:26:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 1 19:35:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21d464eeed7ded6377d64a1d6fff8c71046a1da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ab:ef:af:d6:d2:c3:0d:f4:18:cb:a6:40:a8:
64:0d:e7:95:a2:31:a0:a6:5d:a5:1a:9a:7d:34:00:
07:dd:d2:21:4f:96:f1:75:af:0e:7a:5d:f7:4b:e9:
3c:47:50:ab:80:58:92:1a:80:2e:ef:04:11:92:9d:
61:4b:20:fa:43:3b:f0:7c:ab:65:49:96:aa:ff:c0:
63:c5:14:1f:af:89:d1:9e:a4:0d:8f:5a:b9:b3:18:
3a:6c:41:89:7c:a6:40:c8:e4:53:1c:b7:10:3a:46:
79:7d:f2:ed:09:99:57:1b:a7:21:5a:57:9c:95:db:
26:89:e1:29:39:d5:51:59:07:f8:a7:fb:a8:ad:8a:
59:a0:c1:a6:b8:c5:72:9f:71:d9:6c:08:e5:8a:b2:
93:29:57:8f:6e:ad:a1:a8:4d:b3:2c:3c:d3:6d:89:
d7:7d:34:0a:ba:7b:35:af:51:c2:29:2f:3f:46:75:
d9:b7:6a:43:17:30:0e:f9:a0:47:7f:e4:e2:19:41:
7f:bb:d0:c2:f8:ac:7c:8b:70:2a:1d:a7:7d:12:4e:
40:fd:3f:da:18:9e:49:39:af:8b:b1:ab:0e:51:a6:
4b:5e:4b:fa:47:d7:c9:2f:9f:1e:ee:2c:6a:ac:8b:
a3:16:60:9a:08:10:96:c6:1a:6a:1f:30:3a:ce:ff:
8c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D4:64:EE:ED:7D:ED:63:77:D6:4A:1D:6F:FF:8C:71:04:6A:1D:A5
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/IdRk7u197WN31kodb_-McQRqHaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.58.0/24
Signature Algorithm: sha256WithRSAEncryption
62:a5:62:e5:ea:12:b9:c7:b9:e3:16:e2:98:e8:4a:32:0e:e3:
22:97:bd:08:dc:2a:cb:ef:3d:b1:3f:42:a9:77:fe:81:fd:98:
d0:00:c4:79:43:f0:1f:3c:02:a8:a1:6e:b3:0f:2f:57:4c:43:
5f:08:4c:cf:35:99:4b:0e:65:66:52:ac:c8:fb:c2:06:00:97:
be:2b:bd:f7:d3:65:fe:69:f8:9a:a7:5f:d4:c8:74:e4:db:03:
4c:7e:0a:66:cb:d7:96:c6:20:7e:a1:20:6e:e7:95:b3:cc:bc:
66:ec:01:11:9c:9f:17:75:35:e0:f9:93:1e:ca:c8:91:96:27:
3a:9f:b4:55:7c:29:4f:09:99:f0:1e:34:b7:32:e8:44:4e:d5:
5e:72:48:bf:2f:50:62:32:43:14:a9:33:7f:1f:ba:cf:88:d6:
66:0f:36:94:ca:c7:82:41:08:f5:ed:90:23:aa:3e:3a:52:b0:
eb:65:50:cc:70:dc:61:7b:7e:3f:35:f5:a6:44:21:ec:67:7d:
67:be:78:20:a7:05:b1:36:d8:b7:18:48:2d:bb:a4:eb:00:c2:
e2:3b:87:1e:9d:70:68:07:5e:6a:32:a7:00:9b:5c:88:ab:6e:
ae:cd:2c:c1:24:3e:e4:15:d8:57:93:f1:16:78:34:aa:ef:91:
e5:d1:21:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org