Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/vAc0NaBi2Kbo5ROANVLb7stc-FM.roa
File: vAc0NaBi2Kbo5ROANVLb7stc-FM.roa (raw, json)
Hash identifier: bdrQaxoqLhLd1sF76lu8oCFuiqjFf5it/eyas85PYUM=
Subject key identifier: BC:07:34:35:A0:62:D8:A6:E8:E5:13:80:35:52:DB:EE:CB:5C:F8:53
Certificate issuer: /CN=4728eba001359cdd418346f651c0a187c89fbabf
Certificate serial: 01856CAF400E87D171E3478BF396B6F3B9C9
Authority key identifier: 47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/vAc0NaBi2Kbo5ROANVLb7stc-FM.roa
Signing time: Sun 01 Jan 2023 09:35:02 +0000
ROA not before: Sun 01 Jan 2023 09:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48613
IP address blocks: 91.233.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:40:0e:87:d1:71:e3:47:8b:f3:96:b6:f3:b9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4728eba001359cdd418346f651c0a187c89fbabf
Validity
Not Before: Jan 1 09:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc073435a062d8a6e8e513803552dbeecb5cf853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6a:1e:fd:f3:b8:bf:4a:5a:b2:f1:b4:e5:7d:
47:87:d6:5c:bb:73:e3:7a:31:2b:56:15:7f:46:a8:
17:0b:1e:b3:bd:ad:24:d4:16:e9:e7:cc:84:e7:1e:
5d:20:8a:a5:d8:11:c4:95:cd:48:fa:6f:02:aa:61:
be:74:c1:c2:71:8a:a8:99:0c:79:e5:c9:59:dd:73:
b7:3f:82:f5:13:23:0c:e6:d5:1f:cc:99:58:7c:c8:
fc:75:6b:45:74:9c:49:4a:f2:22:d4:0a:a6:ef:7f:
da:a4:25:93:a6:dd:d9:f4:5f:14:b3:20:9e:fb:c3:
58:24:f7:7c:6a:3b:6a:d5:45:67:06:8c:60:65:f9:
62:62:62:7d:e1:a0:3c:d9:47:5b:66:64:7f:0c:ae:
1a:84:98:aa:8e:4f:8c:f1:e9:74:1b:26:9a:78:27:
44:17:b5:8b:5d:da:c0:6e:ce:06:e4:12:7e:ee:d8:
68:f6:fc:6e:fc:ba:bf:f0:4d:69:a5:ba:d8:43:dd:
52:3d:53:79:d5:ff:cd:e1:40:b3:7d:68:61:35:02:
c6:ee:34:4f:d0:fe:38:9a:f3:34:bb:c7:d5:75:48:
b3:6f:13:cb:64:a2:85:f1:b8:b8:04:52:a7:71:61:
53:a2:ad:55:ac:f2:53:fd:0e:8f:6d:82:2f:62:79:
04:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:07:34:35:A0:62:D8:A6:E8:E5:13:80:35:52:DB:EE:CB:5C:F8:53
X509v3 Authority Key Identifier:
keyid:47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/vAc0NaBi2Kbo5ROANVLb7stc-FM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.51.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:16:3e:5f:28:bf:e9:7e:ce:95:67:96:a0:df:1d:6d:c9:3d:
ce:b9:a5:5a:d0:3b:8b:cb:ae:c5:8b:9c:f8:9a:16:37:28:67:
c0:5f:6e:f4:9e:cb:68:e0:bf:0a:1b:eb:16:78:35:af:f5:24:
32:82:4f:ff:46:c1:1d:01:7c:10:93:41:35:fb:75:20:57:c8:
b2:8e:86:99:c3:2f:db:e1:8e:38:82:e8:16:55:da:f1:8c:d6:
c5:e4:87:30:e4:06:12:7e:f4:79:f4:af:fb:66:99:d5:2d:28:
6e:6f:c6:23:da:c0:11:f3:a9:f6:a1:8d:ec:6c:21:70:10:64:
1f:5c:22:b6:5a:52:74:cc:1f:d3:63:fa:d1:10:68:51:cc:f6:
60:94:47:f2:f3:2c:24:db:cc:3a:d6:32:80:9a:2d:af:f3:f8:
65:ab:75:f6:56:8a:aa:7b:c4:9b:27:90:3c:4a:7f:f9:30:7c:
d3:41:75:eb:11:68:47:fe:40:e3:01:0d:a0:71:c4:cc:17:24:
c1:91:a2:db:3b:58:d5:7c:58:78:34:4a:04:1b:d7:eb:b9:5f:
0d:1a:59:56:a1:59:b4:fd:a0:38:5b:7f:eb:63:2b:5c:be:e4:
bc:7e:6f:7f:a9:bb:ec:4a:5c:97:62:41:9d:fe:cc:8b:de:7f:
9f:be:93:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:55 2024 by rpki-client on console-ams.rpki-client.org