Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ciNOdbIq9cJ59pxbOhLjEQMib-s.roa
File: ciNOdbIq9cJ59pxbOhLjEQMib-s.roa (raw, json)
Hash identifier: 84DvCf4MBGO2zFhFjE1MSeElmOjrEjuXjV3Xhsq8e3c=
Subject key identifier: 72:23:4E:75:B2:2A:F5:C2:79:F6:9C:5B:3A:12:E3:11:03:22:6F:EB
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018A1CBE7CFD498E3D4DCDEA382ADC29B183
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ciNOdbIq9cJ59pxbOhLjEQMib-s.roa
Signing time: Tue 22 Aug 2023 10:16:00 +0000
ROA not before: Tue 22 Aug 2023 10:16:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61335
IP address blocks: 91.200.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Oct 2023 19:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1c:be:7c:fd:49:8e:3d:4d:cd:ea:38:2a:dc:29:b1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 22 10:16:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72234e75b22af5c279f69c5b3a12e31103226feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f4:ea:7d:83:06:15:4e:81:2d:6b:e9:04:83:
b3:46:a1:21:7c:b5:f1:db:cc:d0:1a:a4:b8:f2:5c:
62:23:fe:40:b6:31:24:07:8d:55:0d:18:87:81:7e:
f1:88:15:33:5e:12:6d:c7:cd:6f:28:eb:7e:03:85:
fa:55:31:27:4f:87:d9:23:e4:3e:10:ea:45:d2:58:
c4:ed:9a:52:52:37:a3:29:64:f1:e1:bd:a0:a8:38:
12:9a:d3:2d:06:a5:63:02:57:a4:b4:f7:ab:9e:c9:
83:9c:0f:d0:0e:5d:be:54:f7:96:66:1b:e5:69:82:
fd:d0:83:a5:57:ee:c1:02:3b:f2:7a:df:0b:35:6d:
44:01:fd:1e:ff:60:aa:c4:ea:d2:4f:d3:47:11:26:
2a:68:1b:fb:9a:5f:49:ef:ce:6e:9b:09:8b:4c:c2:
32:c0:b6:06:87:94:5e:5e:4b:90:5b:e4:ee:48:27:
12:65:89:9c:c1:e6:7d:dd:80:86:22:fe:ed:ec:76:
8e:77:d6:60:c9:69:42:5d:0f:f1:69:89:48:ba:91:
be:a8:fc:a5:03:ae:69:96:a6:42:94:cf:7b:1d:2b:
8d:41:f8:ee:e9:bb:55:06:fe:74:af:de:55:f2:3b:
07:ae:14:3a:51:c9:64:a2:85:66:69:c8:47:cf:9f:
4e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:23:4E:75:B2:2A:F5:C2:79:F6:9C:5B:3A:12:E3:11:03:22:6F:EB
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ciNOdbIq9cJ59pxbOhLjEQMib-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.221.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b0:77:3a:92:b1:2c:42:16:12:5e:d1:c3:8d:ff:13:52:96:
67:18:c8:42:f1:c6:af:a8:d3:50:7f:ae:aa:b2:64:5b:38:80:
97:1c:59:b7:4a:f7:f7:e5:30:7e:a3:7f:87:e8:d5:69:79:3d:
ba:6d:f7:d1:f8:47:ba:2c:4d:8f:3e:e9:99:be:5a:67:09:96:
ac:74:aa:19:0e:64:b2:df:0c:8b:09:1f:2e:c3:ac:d0:11:e0:
5f:54:80:7e:f9:da:07:6d:45:27:1f:3d:a2:70:d4:5f:0d:a5:
05:e7:31:c3:f5:df:6a:8b:55:e0:dc:47:64:84:bf:8e:ce:2a:
4b:13:8c:39:ba:ef:e7:be:3c:f6:b4:ff:d0:60:63:52:77:94:
4c:1e:b1:4e:77:45:7f:6a:7b:4d:5c:ad:a4:f7:92:15:05:80:
d9:d7:78:eb:48:fa:19:24:44:37:d8:c0:35:42:b6:69:f5:1d:
99:f2:cd:c0:11:6a:c2:81:6b:9e:45:21:4f:74:4b:9a:bc:6e:
4d:97:a4:f3:b2:57:fd:d4:e5:c6:04:16:59:92:5e:83:14:ef:
56:9b:0d:71:12:40:35:3b:84:b4:c0:f5:5e:ab:34:eb:97:5e:
28:16:3a:e8:14:dd:7f:e2:9f:c3:08:68:68:bb:7f:40:1c:4f:
54:55:87:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org