Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/vOn3y2Z1-LDccsyQ2_uw9-AhGjk.roa
File: vOn3y2Z1-LDccsyQ2_uw9-AhGjk.roa (raw, json)
Hash identifier: wC2We3y9TMSCaXxy7/C3q+Nj+foV0vxboM9Si9pT4PY=
Subject key identifier: BC:E9:F7:CB:66:75:F8:B0:DC:72:CC:90:DB:FB:B0:F7:E0:21:1A:39
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01885636FFBB11136E99F8786CC535334BB7
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/vOn3y2Z1-LDccsyQ2_uw9-AhGjk.roa
Signing time: Fri 26 May 2023 04:00:24 +0000
ROA not before: Fri 26 May 2023 04:00:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 91.200.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 May 2023 03:43:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:56:36:ff:bb:11:13:6e:99:f8:78:6c:c5:35:33:4b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: May 26 04:00:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bce9f7cb6675f8b0dc72cc90dbfbb0f7e0211a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:66:5c:49:7f:5c:67:11:dc:17:25:7d:e6:2b:
6d:c9:e5:73:f0:ae:1d:b8:75:e8:15:45:27:d0:fe:
18:66:fd:2a:bc:fd:7c:22:c1:68:c4:69:90:1f:b0:
2f:dc:6c:d1:5d:68:51:5e:d1:89:d8:67:b4:8a:dc:
60:c5:99:1c:d1:8d:a5:0d:35:40:b9:e2:12:d0:91:
ae:16:f6:fe:3f:bc:db:9c:21:96:44:f4:f2:5a:29:
e7:91:ca:d0:46:bc:6c:c3:d6:5e:58:67:4c:95:03:
83:51:c9:5e:19:75:23:4d:76:10:67:07:9c:69:8a:
33:42:b2:3d:04:cf:5b:d0:cd:6e:e5:5c:cf:fc:8e:
a3:58:cd:43:e0:73:65:5b:31:94:f3:c1:c6:cd:f3:
d4:31:ac:f2:f5:5e:c9:4f:41:8d:62:f8:62:f6:63:
35:ca:e7:0f:5e:35:d9:fe:a5:16:32:d7:16:8b:cf:
4a:82:c6:7f:a9:0d:f2:d3:9e:e2:e4:e2:3a:c6:f8:
72:6f:60:82:63:5c:7f:26:63:0b:fc:8f:8b:3d:b5:
ed:48:70:28:d1:52:6e:26:21:1b:15:fb:0f:4a:38:
e4:51:ba:6f:9f:ce:66:97:5b:90:85:68:2f:64:33:
be:bf:8b:dc:0d:65:ce:1e:86:c8:43:28:f9:3a:df:
45:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E9:F7:CB:66:75:F8:B0:DC:72:CC:90:DB:FB:B0:F7:E0:21:1A:39
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/vOn3y2Z1-LDccsyQ2_uw9-AhGjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.220.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ad:dc:ba:e1:f3:63:f5:7a:d8:a5:eb:e0:c8:c4:7a:c6:c2:
5c:9f:b4:03:c2:e1:21:10:e8:b6:1b:d7:65:6d:1c:3c:02:1e:
2c:63:19:44:cc:fa:ac:b0:f2:95:0f:6a:8a:45:cf:f2:e9:70:
0b:23:5e:97:9a:fa:02:ae:e5:50:1e:12:af:c4:72:e1:c8:78:
bb:b5:55:fb:a5:2b:b9:bf:d1:12:11:57:72:88:3d:ca:63:38:
ab:a5:7e:62:45:32:9c:4c:11:7c:cd:03:9d:cf:4e:53:a2:64:
4a:78:85:ef:8a:73:c1:d8:bb:5f:0f:c1:1f:05:73:b5:aa:b2:
c9:3c:91:89:e8:78:5f:ff:ef:04:92:c4:07:23:6b:be:b2:84:
d4:b0:de:de:98:bf:58:58:7a:e7:57:bd:45:60:64:08:d9:ca:
fb:34:c8:4f:9d:46:f4:0b:40:96:2e:84:f3:79:03:3a:44:af:
12:60:33:34:7c:d4:ec:27:fe:68:22:7e:75:20:ec:01:47:86:
f4:bb:ea:79:68:eb:bf:c0:05:ce:fc:71:9d:39:05:25:ba:f5:
e8:b5:a5:d8:ea:09:b6:81:31:74:96:c0:b6:77:20:80:4e:71:
02:8d:5e:5f:4e:f4:3e:b5:fd:33:5f:d0:60:75:60:ee:bf:ee:
b3:a5:90:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:37 2024 by rpki-client on console-fra.rpki-client.org