Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/5LYTVBN_UGnNxEM8X3KCWC2RWms.roa
File: 5LYTVBN_UGnNxEM8X3KCWC2RWms.roa (raw, json)
Hash identifier: X9S+6Mko72Ao48dvCiyL3kYIGfN3GZMXeh18GqZkwmY=
Subject key identifier: E4:B6:13:54:13:7F:50:69:CD:C4:43:3C:5F:72:82:58:2D:91:5A:6B
Certificate issuer: /CN=887fa37371d7d4593ba290ef45669ea0de293782
Certificate serial: 018A88B8D8AF8E4C1C63B4B164FF42A69E24
Authority key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/5LYTVBN_UGnNxEM8X3KCWC2RWms.roa
Signing time: Tue 12 Sep 2023 09:28:50 +0000
ROA not before: Tue 12 Sep 2023 09:28:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31027
IP address blocks: 91.231.147.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:88:b8:d8:af:8e:4c:1c:63:b4:b1:64:ff:42:a6:9e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887fa37371d7d4593ba290ef45669ea0de293782
Validity
Not Before: Sep 12 09:28:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4b61354137f5069cdc4433c5f7282582d915a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9e:4a:36:c7:47:2b:83:ad:be:34:1d:90:ff:
6a:d6:5a:e3:41:4e:61:cf:f8:dd:ba:bd:53:8f:8a:
b3:aa:b6:24:9c:2d:dc:92:8d:a1:52:ce:49:5c:5e:
7d:a2:fc:b2:ef:28:76:81:74:22:d2:3d:35:29:46:
a1:2d:8b:a1:cc:bb:15:59:e9:7f:64:f1:c7:22:f0:
1b:f2:b6:63:12:3c:7d:0f:a2:aa:35:28:96:c9:f3:
2c:2e:cf:09:f8:9e:38:3b:32:a0:cf:70:dd:5e:80:
c7:68:dc:f6:c7:d5:92:8b:80:e8:47:13:87:ca:02:
65:08:16:bc:21:15:68:59:5a:75:4d:a8:42:28:9e:
9a:2a:41:70:43:42:53:a7:6f:f2:a8:39:a2:5c:8a:
a1:46:13:49:16:0d:3f:d5:59:08:bd:6f:af:eb:bb:
32:c0:34:6a:c1:31:66:8f:f8:7b:3e:15:84:44:9c:
c0:cf:9c:7a:7a:0d:78:56:96:45:f8:98:b8:c3:5a:
81:65:95:84:af:b9:de:b3:50:f8:d4:0b:a3:49:76:
59:35:5c:c4:59:7e:b4:48:a2:fa:e5:01:18:e4:d9:
37:9e:7e:47:ad:18:66:5b:6d:79:9f:2a:03:26:23:
9f:37:6b:b4:91:33:db:8c:2d:40:aa:3b:a8:5f:f1:
9a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B6:13:54:13:7F:50:69:CD:C4:43:3C:5F:72:82:58:2D:91:5A:6B
X509v3 Authority Key Identifier:
keyid:88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/5LYTVBN_UGnNxEM8X3KCWC2RWms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.147.0/24
Signature Algorithm: sha256WithRSAEncryption
31:8f:a4:03:e6:5e:2a:6b:31:e1:d2:37:f7:4d:f6:dd:85:e7:
23:42:52:41:98:7c:7d:26:81:2f:e8:e7:b5:bc:5b:df:02:73:
0e:6b:8b:89:a3:c6:29:a2:d8:bb:8e:72:80:ab:fe:85:8e:49:
d3:d7:73:4f:1a:76:96:74:4c:0f:03:9b:ba:ca:7a:05:4f:82:
59:47:ce:0e:fb:8a:ee:9c:0f:a3:8f:25:e8:f5:41:0e:f3:73:
c1:de:1a:48:84:e4:d9:be:52:45:eb:11:e8:cd:6e:f7:09:38:
06:68:7b:90:96:93:a9:cc:83:2a:f3:e4:aa:d8:e4:d1:37:a6:
98:12:a9:41:2e:44:5c:60:d7:8f:0e:55:94:94:8f:0b:13:77:
3b:09:1c:36:37:29:79:ab:bb:ba:e5:82:ea:77:a2:53:3d:c8:
85:92:3b:0a:02:dc:27:73:de:60:0e:23:cc:b8:4c:fe:1d:a5:
00:b8:ba:f1:85:59:f8:82:8a:d1:07:7a:a8:04:33:c2:1c:3a:
7a:f6:1a:82:05:1d:b4:68:2a:26:66:05:b8:f0:1c:57:18:b3:
1b:2b:09:34:6b:94:54:68:cb:5a:18:97:ef:ac:24:7e:57:82:
7f:35:47:c3:51:1d:fa:95:5b:61:8e:bf:3f:b0:21:32:61:15:
ea:ad:7d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:01 2024 by rpki-client on console-ams.rpki-client.org