Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/EV5cRDolazPp-Lvnn-13vZuni5I.roa
File: EV5cRDolazPp-Lvnn-13vZuni5I.roa (raw, json)
Hash identifier: cUHpCwfupZiSYVVvGFl2p/k/7eMJdsBNmVXNGuABcb4=
Subject key identifier: 11:5E:5C:44:3A:25:6B:33:E9:F8:BB:E7:9F:ED:77:BD:9B:A7:8B:92
Certificate issuer: /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial: 01856DDD707E44D8DF7274B23B7D93EAB9B5
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/EV5cRDolazPp-Lvnn-13vZuni5I.roa
Signing time: Sun 01 Jan 2023 15:05:06 +0000
ROA not before: Sun 01 Jan 2023 15:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203397
IP address blocks: 91.226.85.0/24 maxlen: 24
91.226.84.0/22 maxlen: 22
91.226.84.0/24 maxlen: 24
91.226.87.0/24 maxlen: 24
91.226.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:70:7e:44:d8:df:72:74:b2:3b:7d:93:ea:b9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Validity
Not Before: Jan 1 15:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=115e5c443a256b33e9f8bbe79fed77bd9ba78b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bb:2f:bf:b3:f3:60:ad:83:ee:cd:47:e9:e9:
08:42:7a:b4:4f:19:60:5f:e8:9e:76:c5:e1:8a:9e:
52:46:d8:2f:17:a5:a2:f0:0e:54:25:4a:4a:a9:6b:
e9:e8:de:dc:49:a3:6a:f3:7e:80:18:23:ff:2e:3e:
74:ef:db:ae:41:6f:ae:ef:15:31:b8:60:10:63:53:
ce:99:f9:20:8a:2e:e3:51:3c:c7:da:cf:75:65:8c:
8e:38:22:45:1b:ba:af:05:e5:79:9c:ff:f5:35:4e:
9d:97:76:b4:af:93:3b:7b:35:a8:5a:93:9a:c8:16:
0d:4e:63:ff:85:b6:f5:19:f7:ac:35:76:ee:e2:24:
35:34:f5:f7:8d:9f:70:ce:1d:a0:c5:31:81:18:9d:
d6:ac:88:f4:75:19:5c:a9:a5:42:31:50:3f:71:89:
0c:17:c9:cc:75:c6:e8:80:e6:55:03:cb:6c:5b:87:
ef:68:12:fe:91:0c:25:9c:57:4c:d7:46:b3:5c:4f:
7c:af:ce:fe:71:44:21:76:bc:a7:5d:c7:79:2c:39:
33:53:b7:96:97:f4:98:5e:8f:f5:7a:7e:05:fa:30:
20:b1:6e:14:5a:ef:7b:00:68:0b:b5:2e:b2:ce:fb:
d5:8a:91:dc:b3:5d:35:d4:05:6f:1c:59:58:58:89:
49:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5E:5C:44:3A:25:6B:33:E9:F8:BB:E7:9F:ED:77:BD:9B:A7:8B:92
X509v3 Authority Key Identifier:
keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/EV5cRDolazPp-Lvnn-13vZuni5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.84.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:fb:9e:28:4e:31:99:99:48:4b:3a:95:e3:c9:ca:8c:a0:2a:
3a:d8:4a:f5:2e:2f:15:b3:8e:70:60:5a:41:b1:e4:e1:1f:2c:
7a:b5:d8:b2:83:00:d3:7a:f8:32:89:b4:32:60:fe:79:e9:d7:
69:64:d0:c1:4f:77:10:c4:7b:d2:9f:0c:9f:5d:92:d0:e9:7d:
ce:04:5e:33:46:f6:54:57:cc:d7:33:20:10:0f:d4:11:2f:40:
c0:e3:56:83:d6:fa:0e:8b:13:a8:cf:d6:91:12:98:9d:a7:68:
3b:1f:00:d5:f5:74:18:21:38:ef:db:17:5a:1c:97:92:4e:3a:
21:35:f6:a3:ea:8f:b4:ce:76:ba:00:32:2f:16:bb:31:b4:a3:
e0:90:ff:15:6c:47:06:b5:6a:50:65:be:99:83:fa:22:e7:8d:
3e:5f:16:a8:a9:2d:ba:07:4f:b3:d4:cc:3e:2e:c7:8d:32:db:
ba:bd:20:f3:94:bf:06:21:a0:5c:25:e6:86:9e:a2:13:4a:7b:
33:0e:8e:c5:be:1c:cc:50:73:53:89:f9:dd:7c:49:7e:cd:50:
78:10:89:b8:b6:20:63:5d:d2:aa:82:15:81:21:85:6c:78:f3:
27:f8:e4:81:b4:ec:e5:16:37:9a:3e:51:94:d7:df:83:b5:ca:
42:33:61:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 6 17:56:11 2023 by rpki-client on console-ams.rpki-client.org