Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yEcuNMJFrQAVBTkLbDTpRdB2yE4.roa
File: yEcuNMJFrQAVBTkLbDTpRdB2yE4.roa (raw, json)
Hash identifier: /JN/ra2gh1yQIiz09RoK/0AZo7HwPw9McgZ/4/KrE98=
Subject key identifier: C8:47:2E:34:C2:45:AD:00:15:05:39:0B:6C:34:E9:45:D0:76:C8:4E
Certificate issuer: /CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Certificate serial: 01856FC256CF2A8B18A570722BE4625CE15F
Authority key identifier: CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yEcuNMJFrQAVBTkLbDTpRdB2yE4.roa
Signing time: Sun 01 Jan 2023 23:54:45 +0000
ROA not before: Sun 01 Jan 2023 23:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197935
IP address blocks: 91.227.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:56:cf:2a:8b:18:a5:70:72:2b:e4:62:5c:e1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Validity
Not Before: Jan 1 23:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8472e34c245ad001505390b6c34e945d076c84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b2:b3:0a:51:30:23:91:98:62:f7:af:54:cf:
7f:e1:cd:03:04:d0:48:32:63:d6:08:c0:cf:38:e3:
ee:cf:37:dc:e4:06:a3:17:37:61:b9:fa:02:49:71:
8a:77:71:a9:7e:ee:67:e4:ba:21:89:d6:68:d1:b4:
3c:ad:b6:16:40:6b:40:45:89:9c:0f:6a:38:47:62:
7f:9e:89:7d:8d:90:c6:bb:0e:ae:c7:68:25:10:61:
7f:e9:50:f4:bf:53:95:d8:7f:30:5e:80:36:06:2a:
00:6a:12:8e:6c:06:fe:31:6b:cd:bc:dd:42:cf:70:
32:b4:17:b7:a0:a8:ef:99:97:3b:5e:4b:3c:da:01:
d9:bb:8a:6e:2f:a8:3c:79:93:10:79:fe:a7:19:92:
25:f1:21:8f:cb:f5:0c:a5:fa:0e:82:cd:dc:22:4c:
85:8c:05:2b:8b:8d:50:bd:42:40:8e:af:de:55:98:
31:4f:88:61:6d:29:35:3f:3a:59:ba:e4:5f:0f:00:
8c:18:ae:a5:42:1e:87:7d:d1:28:9c:2c:3f:f7:41:
77:15:d2:7f:60:c6:98:34:0c:12:ec:45:da:b5:24:
6a:e4:f9:08:e1:79:b1:f5:92:94:77:55:24:99:92:
fa:c3:78:68:80:a4:62:6d:d9:98:a9:d0:c9:21:39:
76:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:47:2E:34:C2:45:AD:00:15:05:39:0B:6C:34:E9:45:D0:76:C8:4E
X509v3 Authority Key Identifier:
keyid:CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yEcuNMJFrQAVBTkLbDTpRdB2yE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.76.0/24
Signature Algorithm: sha256WithRSAEncryption
29:6a:e2:27:50:e2:e9:f3:28:b8:28:78:8b:37:d9:8e:c9:0b:
4f:4a:05:70:a3:88:b8:07:94:7e:72:b8:65:3f:fc:2c:57:db:
44:e4:98:88:6f:88:43:28:8f:b9:08:c9:78:4d:53:64:b9:44:
73:0a:ee:c9:ee:b1:73:ca:d1:af:ef:39:c9:aa:f7:e4:50:7b:
f1:44:03:d3:e0:6c:07:1a:34:03:da:cf:bb:35:8b:79:0a:c0:
ea:b6:d6:40:54:fa:67:4b:e8:5f:ab:45:b1:82:65:9d:8d:c1:
a8:c9:02:14:3f:3e:a5:ab:03:bf:f4:cd:e0:9d:24:82:d5:48:
c4:48:6e:7a:33:06:79:f8:d1:67:a4:11:06:6a:11:b5:52:6c:
6c:c6:11:e6:94:3c:23:e8:68:93:2e:a7:39:6a:51:61:90:5d:
d4:3b:b6:4e:5b:44:13:b0:7d:56:cf:12:f4:27:86:1a:dd:a7:
96:00:57:46:40:ad:c3:8c:37:a7:3c:9b:02:36:64:ba:82:ee:
32:89:bf:91:63:d5:72:11:36:c2:8a:39:a4:75:ed:1a:54:45:
b9:16:c8:8d:5d:dc:e5:ba:aa:b3:c0:2d:72:7d:4b:ef:a7:50:
00:a9:e0:17:1f:bd:1a:ae:32:50:be:95:02:92:97:ea:12:f5:
12:f4:06:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:10 2024 by rpki-client on console-ams.rpki-client.org