Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/RAa9pzvtTOGH6q5ilv7OowBcQLk.roa
File: RAa9pzvtTOGH6q5ilv7OowBcQLk.roa (raw, json)
Hash identifier: yo2mm7CfQAXl3jqSzUtJGoGxnn86nT/SK0lNkJs+h6w=
Subject key identifier: 44:06:BD:A7:3B:ED:4C:E1:87:EA:AE:62:96:FE:CE:A3:00:5C:40:B9
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0186BAB2BA0AA8FDEC79C129EA6712747742
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/RAa9pzvtTOGH6q5ilv7OowBcQLk.roa
Signing time: Tue 07 Mar 2023 06:12:00 +0000
ROA not before: Tue 07 Mar 2023 06:12:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 91.200.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Jun 2023 21:06:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ba:b2:ba:0a:a8:fd:ec:79:c1:29:ea:67:12:74:77:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Mar 7 06:12:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4406bda73bed4ce187eaae6296fecea3005c40b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:6f:f3:00:4a:82:d8:75:17:9f:5a:94:54:
90:be:f8:8a:77:b9:b8:31:00:20:71:01:40:81:df:
e0:19:68:83:5b:57:b3:10:6f:ac:5e:cd:e0:ff:b3:
2e:c7:2d:6b:ae:38:85:61:52:ac:1d:df:e5:b8:50:
ea:ca:16:ad:7d:43:d0:17:fb:94:67:5c:29:5f:1b:
54:48:f5:e9:ba:cf:17:0e:21:30:81:c7:3c:3d:56:
d6:e2:47:79:ba:f3:3f:9e:f3:f8:e0:dc:ac:2a:a6:
17:e6:6f:c3:34:69:64:e8:7e:83:80:37:b1:63:e7:
f9:db:e3:cf:4c:40:08:c6:ef:06:83:ed:1b:31:73:
7e:30:88:6f:de:78:d2:40:74:0f:f8:e7:f3:97:c3:
81:8b:bb:04:0b:62:88:85:21:36:f8:1d:dd:27:e7:
2f:d0:5e:00:be:dc:f0:0e:0d:43:1c:7e:33:94:71:
74:e6:0c:e8:7d:3b:19:e1:f6:fb:02:68:25:67:57:
6b:ca:ec:68:32:89:e0:b0:e2:88:72:d2:f9:68:eb:
53:27:b8:01:48:7a:18:78:24:f3:f4:1a:11:5e:3e:
b9:0f:c7:e4:dd:69:a2:43:26:7b:16:2e:69:27:da:
0e:bd:04:59:73:e5:74:a6:af:15:54:8e:45:56:7b:
8a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:06:BD:A7:3B:ED:4C:E1:87:EA:AE:62:96:FE:CE:A3:00:5C:40:B9
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/RAa9pzvtTOGH6q5ilv7OowBcQLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.222.0/24
Signature Algorithm: sha256WithRSAEncryption
78:61:72:79:67:e3:a3:2d:33:fc:f8:d0:94:94:f0:b7:5e:e7:
08:9a:c9:7f:5d:b0:76:99:ae:f0:d7:c2:40:91:33:79:31:5c:
be:db:12:bf:95:6c:09:76:6e:34:f1:f8:8f:8b:14:a2:d5:38:
9c:ec:26:40:2e:32:7c:9a:02:a0:09:32:91:55:19:ab:6f:8f:
56:d4:22:ac:f7:86:f5:b9:e4:a0:6f:1d:7f:b7:a3:f8:3d:51:
04:f4:23:c1:ff:9a:2a:47:f9:03:51:3f:76:9e:b3:99:7e:c7:
23:7d:0b:1a:77:b0:a2:e1:a2:b1:6b:56:0e:7f:dd:a4:e2:76:
67:97:bd:16:63:d5:5f:d3:6a:19:1a:28:ef:70:fe:d4:ae:ee:
2b:6f:0e:29:70:9a:82:7f:d3:16:d8:ca:e9:f4:8d:22:c5:37:
a3:e4:fe:b2:5f:ed:fb:c4:27:bc:fa:46:a2:17:01:7b:fe:9b:
fe:2a:f3:c9:06:68:c1:24:ad:a2:29:7e:28:ad:68:0e:01:b9:
91:4f:41:fe:63:36:3c:97:4e:5d:25:6d:7d:bd:85:71:62:4a:
c3:d8:2b:04:9b:e8:05:9f:57:fb:e5:82:71:c1:93:25:86:d7:
87:15:74:b4:13:d4:d4:15:8b:bf:64:ff:62:15:fe:89:82:b4:
57:59:96:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org