Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ez9Q-yC1bcYDJYYlNIaTAi5mhEQ.roa
File: ez9Q-yC1bcYDJYYlNIaTAi5mhEQ.roa (raw, json)
Hash identifier: iip4oTVi2zW7ewO6CTobFEiubOqSQ3EN2yIlCY3bz/g=
Subject key identifier: 7B:3F:50:FB:20:B5:6D:C6:03:25:86:25:34:86:93:02:2E:66:84:44
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018DEEBEA7BCA753736FC7728503D5D41B86
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ez9Q-yC1bcYDJYYlNIaTAi5mhEQ.roa
Signing time: Wed 28 Feb 2024 08:04:48 +0000
ROA not before: Wed 28 Feb 2024 08:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210542
IP address blocks: 91.200.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Apr 2024 09:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ee:be:a7:bc:a7:53:73:6f:c7:72:85:03:d5:d4:1b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Feb 28 08:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b3f50fb20b56dc603258625348693022e668444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1d:cb:91:d0:8b:28:28:6a:dc:5b:32:8d:65:
cc:2b:ec:a6:58:4e:a7:8b:af:8e:90:bb:d4:e6:63:
09:11:70:29:ab:a1:82:91:b9:58:3c:b0:f7:74:d1:
d6:5f:30:3b:53:54:19:e4:79:0e:05:98:aa:7c:05:
8d:b7:f2:f1:e5:7b:5d:74:85:3b:11:e5:d9:bf:2f:
b0:66:86:2e:b8:4f:73:75:70:d5:ad:56:9f:3d:4b:
62:68:3a:e0:19:f8:48:9a:9e:ff:57:06:ae:d8:c8:
b6:71:8c:cc:5d:76:d8:e2:19:ed:61:04:af:4c:f9:
50:84:a0:5c:20:34:d1:1f:ee:96:6c:a6:fc:65:eb:
45:52:af:e6:69:88:c0:a6:87:f3:7e:86:b9:2f:07:
ed:64:5f:c5:19:34:2d:3b:9a:7c:88:38:8a:14:77:
3d:bc:95:62:5f:2c:94:88:2a:67:1c:23:6a:c9:03:
1b:79:b9:8b:f6:97:d9:c7:aa:38:93:49:ca:7e:b5:
90:16:5a:28:81:1c:85:a7:71:ab:51:fb:39:0f:5e:
d0:39:a3:c1:e0:d8:5f:04:3b:a3:72:f6:26:ad:46:
b4:b9:3e:d1:7a:8e:ce:41:b3:1a:a3:17:45:92:a1:
a3:e9:c0:1c:52:4a:ce:24:c0:08:5d:f9:b3:fa:b4:
cb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3F:50:FB:20:B5:6D:C6:03:25:86:25:34:86:93:02:2E:66:84:44
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ez9Q-yC1bcYDJYYlNIaTAi5mhEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.221.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:af:ea:d6:75:00:d3:4c:42:94:8c:d4:0d:9b:e8:86:2a:8a:
aa:a1:bf:fd:6e:fe:6f:cf:64:bd:f5:0e:74:d8:b9:30:4d:21:
9c:f9:48:e8:74:72:e8:84:b8:33:63:8e:f8:20:c6:4d:5a:f7:
25:1c:2d:24:3a:be:bb:68:46:f4:ae:47:fe:6d:ce:55:c1:02:
73:5a:5e:82:26:28:71:08:35:66:e5:c5:60:f3:6d:a9:d1:ce:
88:fa:d7:36:6a:ea:bb:b7:05:0e:50:88:65:6f:f5:1c:56:3b:
ff:fa:50:ed:a3:6b:41:59:d6:9c:b6:b5:46:42:a6:08:55:28:
e1:c4:d5:9b:64:73:40:90:4b:d1:74:6d:b0:b1:6b:28:5e:4b:
96:7f:8d:ba:12:63:ca:61:8a:0d:8a:95:10:df:0f:cb:ea:f6:
09:01:cd:0b:71:5e:6b:02:3e:bb:ee:5e:3d:7b:87:dd:34:c1:
92:5e:bd:b6:da:63:20:5e:9b:f3:43:35:c8:c3:8d:7d:8b:d0:
23:25:28:f0:37:5f:c3:a3:45:2c:91:07:f4:b9:ec:12:8a:e1:
7d:d8:01:d7:92:4c:c5:ae:31:86:36:e6:ac:d4:2c:cd:8c:16:
6f:22:6e:5b:01:fc:e4:f5:1b:b0:f3:2d:62:e4:25:e8:eb:83:
6c:bf:92:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:37 2024 by rpki-client on console-fra.rpki-client.org