Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/iWVixuDeSUJWElpjNJ2NROcIv-8.roa
File: iWVixuDeSUJWElpjNJ2NROcIv-8.roa (raw, json)
Hash identifier: 4fsLbzhgAbn8zG7ctXdpbf/FB/V+yfHGnFjuiq6uiJM=
Subject key identifier: 89:65:62:C6:E0:DE:49:42:56:12:5A:63:34:9D:8D:44:E7:08:BF:EF
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01856BDCA322E2333A32A8B0913E29EBDEB4
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/iWVixuDeSUJWElpjNJ2NROcIv-8.roa
Signing time: Sun 01 Jan 2023 05:44:59 +0000
ROA not before: Sun 01 Jan 2023 05:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 812
IP address blocks: 91.232.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Jan 2023 22:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:a3:22:e2:33:3a:32:a8:b0:91:3e:29:eb:de:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 1 05:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=896562c6e0de494256125a63349d8d44e708bfef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6b:9f:2c:52:09:95:02:98:3f:cb:52:5c:1d:
44:25:43:21:3c:49:aa:01:c8:f8:28:f4:f5:e4:17:
24:eb:29:f1:4c:b5:98:44:e7:fe:1e:e6:55:f3:ab:
e1:da:84:8f:ec:31:08:12:97:f7:9a:d6:d7:47:fe:
de:ff:14:41:52:ca:d3:4c:9b:a1:e0:76:0f:f1:36:
e9:24:bc:82:7c:d6:f5:53:13:00:a9:f1:88:41:49:
c9:9a:d6:77:8f:4c:39:ca:7a:f4:c0:a0:d2:ea:40:
79:c1:90:32:35:9f:9a:b3:27:81:3c:32:f8:b7:30:
d0:d8:15:da:77:8c:1d:39:45:9a:84:21:e5:3f:1e:
f8:d0:9e:9c:1d:11:3f:c4:f2:18:2f:2d:3b:82:a3:
df:be:e4:ce:4c:3a:32:55:15:f9:01:39:c7:ce:2f:
73:8a:8f:53:3c:0c:fe:d3:d6:b0:f5:7b:d3:f6:62:
5b:de:7b:b2:42:e9:f8:b1:48:6b:74:af:66:27:ff:
a9:0b:17:b9:6d:79:2a:e9:ac:d7:3f:a0:62:45:09:
39:f9:dd:9a:09:39:e3:d1:fa:0d:a3:90:a7:ff:d5:
d2:2b:99:89:5a:60:19:07:85:81:94:6d:f9:ef:31:
84:19:de:df:28:e6:b5:1e:94:81:98:46:8f:a7:02:
55:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:65:62:C6:E0:DE:49:42:56:12:5A:63:34:9D:8D:44:E7:08:BF:EF
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/iWVixuDeSUJWElpjNJ2NROcIv-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.227.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ff:a8:15:54:23:80:8b:b6:bc:ea:3e:67:b6:87:90:58:14:
98:13:f6:64:42:5a:42:5d:77:8e:d4:dc:c7:b5:a8:c1:1a:21:
db:3c:ac:27:24:c9:29:64:db:98:df:a8:e3:2a:24:55:6d:03:
83:dd:28:d1:65:81:91:3e:15:22:84:30:87:7e:1e:5a:70:96:
ef:f7:f9:ab:e5:e9:2f:c6:b7:c1:ee:00:48:2c:57:17:81:6b:
05:91:5f:2d:3b:ce:22:bf:97:6f:ac:ca:84:26:27:de:df:10:
0b:fa:95:22:2d:6a:01:87:5d:bf:98:fd:38:b9:db:7a:01:0e:
c7:e1:ad:37:5c:94:49:1e:88:20:b4:3e:de:4d:fd:86:b3:8a:
54:54:41:20:6a:50:be:d6:72:5f:fe:14:96:03:e7:2c:eb:99:
9b:af:68:bc:db:fa:ee:69:c8:1c:24:fe:1f:85:5d:c8:9d:aa:
bb:af:ef:12:b8:59:97:07:27:44:02:a1:8f:08:6c:c4:83:e4:
a3:57:e9:6e:c2:e1:ad:08:c3:7b:a8:d7:7d:7d:c2:df:26:44:
e1:b4:76:3a:e1:78:63:4b:e7:70:8e:68:0d:09:86:a5:8e:d2:
8e:60:cb:00:bd:03:99:8e:f3:ce:27:a7:54:bf:71:e8:a0:38:
23:8c:a6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org