Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Yct_JKREmSAWk_fESTxzziVlpe4.roa
File: Yct_JKREmSAWk_fESTxzziVlpe4.roa (raw, json)
Hash identifier: i3fXK0oFq/bx0TJWmiVAfHR2r6b7aP46TUmE/Ya1u+w=
Subject key identifier: 61:CB:7F:24:A4:44:99:20:16:93:F7:C4:49:3C:73:CE:25:65:A5:EE
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018CC7257B5AD94121B2E8701B3AC31D4600
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Yct_JKREmSAWk_fESTxzziVlpe4.roa
Signing time: Mon 01 Jan 2024 22:29:31 +0000
ROA not before: Mon 01 Jan 2024 22:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44714
IP address blocks: 91.228.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 08:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:7b:5a:d9:41:21:b2:e8:70:1b:3a:c3:1d:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 1 22:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61cb7f24a44499201693f7c4493c73ce2565a5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:39:a1:c9:c1:29:12:23:06:26:32:55:24:95:
89:ad:6b:9e:4a:b4:57:c4:5e:95:ff:17:7a:4f:2e:
38:4d:0c:11:77:35:b1:c6:2f:2e:76:94:fc:eb:15:
e4:22:bd:b2:a1:89:bd:c9:62:a0:8c:ca:78:d4:fa:
20:b5:0e:c0:b0:a7:42:14:00:dc:d0:79:2f:fa:dc:
c9:e3:62:11:98:bd:61:5b:ef:08:08:0c:6b:9d:57:
04:57:46:27:c8:bb:48:b8:a5:93:50:3f:f7:b5:c3:
29:6e:29:08:0f:62:f6:19:a9:4d:62:18:05:4c:da:
50:38:2a:81:9e:68:1b:b3:d5:46:74:41:ae:b7:d8:
2f:7a:cb:39:ba:5a:a3:64:c8:34:e3:2a:f2:1d:1d:
b0:fd:82:96:3d:79:27:38:0f:37:ea:0b:53:59:76:
4e:eb:2b:09:3b:59:1a:7c:52:7d:23:e9:62:20:04:
aa:36:62:a9:1f:2f:69:a5:56:fc:3c:1c:07:48:ed:
30:6d:6d:c5:56:45:01:0e:06:ef:97:7a:38:02:8d:
ec:a3:f2:05:90:73:aa:91:83:84:b3:b5:4d:4f:9c:
e4:fe:0c:86:49:51:82:2d:3e:e4:aa:0f:fb:53:e6:
59:85:f5:ae:c5:29:7e:82:0d:3e:67:77:dc:bf:70:
e6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CB:7F:24:A4:44:99:20:16:93:F7:C4:49:3C:73:CE:25:65:A5:EE
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Yct_JKREmSAWk_fESTxzziVlpe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.15.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:c3:79:6a:0f:f3:6d:6d:04:6e:f1:58:fe:06:c1:c7:a1:bc:
36:29:0e:d8:7c:52:17:9f:d5:6c:a3:90:af:b0:bf:ed:ce:cd:
8f:0d:88:04:f6:8d:02:ba:f3:85:b3:2f:98:e1:a8:ab:b2:51:
04:86:e1:6d:c1:e0:c2:0c:99:48:ae:52:41:da:3a:db:5e:83:
0c:6e:1e:45:26:0c:65:a9:92:4d:48:f0:9b:a6:9a:10:1a:2e:
34:f5:09:4b:58:ff:e4:dc:71:2d:dc:bc:46:86:ec:99:db:e1:
9d:88:24:8d:b5:1d:dd:71:e3:15:ce:8b:5e:22:9e:92:fc:07:
4f:89:df:ff:9e:f5:70:a5:db:d9:31:d0:e5:1a:6d:b4:99:ea:
4c:30:48:c8:d5:7f:8a:e9:65:9b:e9:b7:47:2b:e2:63:d9:c1:
bc:fa:aa:da:bc:9e:96:03:01:a8:92:18:6a:3b:ce:8e:67:c7:
17:4b:52:5d:ba:96:ab:39:a4:fd:6f:44:c8:9d:6f:32:7d:25:
b7:90:27:77:36:54:67:5b:5d:62:ab:1e:a9:77:ba:b2:d6:0c:
8f:f6:8b:33:3c:18:44:6f:24:95:ef:5b:60:b5:28:d6:3a:75:
ae:ac:52:c3:2b:29:09:cb:f6:57:da:fa:e0:6d:0a:15:94:74:
de:d7:73:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 12:45:16 2024 by rpki-client on console-ams.rpki-client.org