Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/vy4ImuBZOhZ7OafCiQA1OJkcAzw.roa
File: vy4ImuBZOhZ7OafCiQA1OJkcAzw.roa (raw, json)
Hash identifier: g8QbNrff+A8gcTnJpaxl+qaJtjfvQ2DOZFWAB3nXGeE=
Subject key identifier: BF:2E:08:9A:E0:59:3A:16:7B:39:A7:C2:89:00:35:38:99:1C:03:3C
Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601
Certificate serial: 018571D7C89DC87FE5E8CF25EADE2F068157
Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/vy4ImuBZOhZ7OafCiQA1OJkcAzw.roa
Signing time: Mon 02 Jan 2023 09:37:24 +0000
ROA not before: Mon 02 Jan 2023 09:37:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56853
IP address blocks: 91.228.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:c8:9d:c8:7f:e5:e8:cf:25:ea:de:2f:06:81:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601
Validity
Not Before: Jan 2 09:37:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf2e089ae0593a167b39a7c289003538991c033c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:72:6c:c5:91:03:92:51:4f:0b:bc:2d:60:
d4:07:f5:ab:55:58:a4:9b:51:20:10:36:87:c8:4f:
e5:61:16:25:de:a5:18:37:b1:7c:cc:e7:01:19:8c:
a0:3d:d5:69:c6:3e:10:7b:84:fe:b6:e1:3d:e3:cc:
d7:f7:3d:0a:70:38:a3:86:85:6b:80:48:97:22:a6:
4e:e4:eb:5e:a8:9c:e6:74:4f:a5:a9:cc:ec:6d:5c:
bf:a2:6a:b6:fa:94:5a:83:9f:3b:4e:7d:e9:24:9c:
e5:63:30:fe:54:dc:43:b6:d4:57:9d:48:32:08:14:
2f:cd:84:cb:e7:23:49:46:55:f0:f0:7e:b5:46:76:
65:69:c8:50:5c:90:43:75:4b:c8:96:b4:64:1a:c5:
bb:39:81:15:18:28:fb:bd:24:2d:05:b5:63:72:18:
c6:53:83:c7:23:b6:61:55:29:63:44:a1:30:88:44:
e1:1f:e8:dc:58:3a:5f:2f:fd:12:40:81:88:5d:d9:
9b:42:b4:73:fe:ca:95:36:a5:2f:7c:31:06:8b:81:
11:2b:47:64:f4:03:17:27:8e:66:e3:55:67:db:a7:
fa:52:9a:de:d9:d5:a9:bf:dd:d7:b1:7a:d8:db:ed:
ba:6d:fe:94:ca:76:c1:c1:4b:ce:7a:fb:4e:1c:a6:
e5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2E:08:9A:E0:59:3A:16:7B:39:A7:C2:89:00:35:38:99:1C:03:3C
X509v3 Authority Key Identifier:
keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/vy4ImuBZOhZ7OafCiQA1OJkcAzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.102.0/24
Signature Algorithm: sha256WithRSAEncryption
89:8b:23:ff:6d:fb:af:50:41:ce:80:96:97:13:d5:9b:aa:6b:
4e:a7:db:b1:87:31:8b:e8:61:b1:f4:56:4f:7a:9b:d6:74:87:
6d:11:86:64:80:34:45:14:22:3d:c6:a6:cd:0e:71:50:83:d5:
1e:79:ad:06:3f:9f:ed:6e:68:a9:dd:94:4e:11:2b:89:13:58:
98:24:a1:e3:ae:5a:ab:29:cb:be:f7:6f:45:e7:c3:11:0a:70:
4f:ac:86:57:35:e9:b9:94:c7:a4:48:17:a4:4c:f6:64:b8:5d:
7a:4b:02:ed:2e:b3:db:48:c3:79:a5:04:c2:d9:d3:fe:65:50:
d6:f1:0f:60:8c:25:3c:b6:8b:37:16:da:9b:fd:b0:51:9a:46:
84:0f:ab:de:73:16:07:63:17:75:06:35:dd:e4:29:5b:8b:c9:
bb:ca:ee:84:94:42:92:a6:9e:8b:d8:28:e0:d5:9d:b4:78:6d:
4e:5b:26:17:20:9e:95:12:4c:42:1d:f7:c1:63:d0:32:0b:0c:
f3:e0:6a:a8:0b:ea:1c:f5:4e:a5:78:5b:fb:c6:0b:aa:d3:aa:
0b:d9:6b:74:d4:1c:ec:61:ba:90:e0:3f:89:e0:e7:8d:89:78:
56:7f:7c:48:e3:90:7d:41:16:60:32:9c:f7:f0:27:c1:0b:6f:
e1:7b:15:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:22 2024 by rpki-client on console-ams.rpki-client.org