Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/4NG6vbu3S5GZaJL-ky-gWMHf9Yw.roa
File: 4NG6vbu3S5GZaJL-ky-gWMHf9Yw.roa (raw, json)
Hash identifier: 6PK7L2cNzsvZEAXoHwn3CmgOM1MvTo2SxUBmClhQqcY=
Subject key identifier: E0:D1:BA:BD:BB:B7:4B:91:99:68:92:FE:93:2F:A0:58:C1:DF:F5:8C
Certificate issuer: /CN=769a0ed13591d4b84ca79a8eb577226076651a14
Certificate serial: 0185723A2EBCD5B58622F0E4A28970C8A106
Authority key identifier: 76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/4NG6vbu3S5GZaJL-ky-gWMHf9Yw.roa
Signing time: Mon 02 Jan 2023 11:24:53 +0000
ROA not before: Mon 02 Jan 2023 11:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56743
IP address blocks: 91.223.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:2e:bc:d5:b5:86:22:f0:e4:a2:89:70:c8:a1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=769a0ed13591d4b84ca79a8eb577226076651a14
Validity
Not Before: Jan 2 11:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0d1babdbbb74b91996892fe932fa058c1dff58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:90:7d:e9:5d:25:40:d9:06:e9:b1:03:ce:91:
fc:02:6a:82:d0:58:f4:a2:ca:bf:50:fb:e2:e1:8b:
fd:13:dd:0c:23:4d:e5:e6:2c:69:62:0d:b4:84:01:
f2:9c:6a:e7:03:20:c0:6f:a9:ce:de:bd:57:45:aa:
64:ce:e5:29:d5:fb:d2:0e:db:ba:df:80:09:5e:01:
c9:e2:05:cb:e4:05:88:77:78:d0:d9:f7:31:55:9c:
55:cd:98:97:cc:a4:56:e2:b9:f1:5d:58:e2:eb:d7:
bc:24:e8:3d:30:bb:d9:33:9f:74:84:9f:ce:66:a4:
2d:8d:4a:61:b5:6d:88:db:14:bc:bb:ce:85:7a:99:
6c:36:b6:2c:e6:b5:a4:77:ea:01:e1:6c:5d:8c:d7:
f8:fd:50:ad:1c:c5:31:45:7b:ac:4c:b2:8b:5a:50:
52:03:41:ce:c6:42:72:73:a1:68:62:e2:1a:07:1f:
16:4c:33:10:1f:00:f5:62:9d:6a:77:b0:42:dc:17:
85:b9:ad:13:41:fa:48:66:ca:9b:04:be:a8:ab:f4:
43:f5:e8:ac:17:f6:27:66:c1:30:31:4e:6d:ab:cf:
c7:fc:15:41:a8:cb:97:71:84:dd:df:45:c7:ef:c4:
92:e0:3d:2c:4b:1b:04:e4:b3:ce:fe:0c:e2:3c:d4:
2c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D1:BA:BD:BB:B7:4B:91:99:68:92:FE:93:2F:A0:58:C1:DF:F5:8C
X509v3 Authority Key Identifier:
keyid:76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/4NG6vbu3S5GZaJL-ky-gWMHf9Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.179.0/24
Signature Algorithm: sha256WithRSAEncryption
99:e7:3a:60:ec:d2:3b:e1:09:67:96:58:6c:bb:6a:d6:bb:61:
26:65:cc:f4:0f:94:64:39:85:ee:28:3c:b0:69:b0:df:ee:6b:
f6:94:1b:a3:73:94:b7:3f:c8:83:9f:f2:32:f2:d0:60:4f:17:
55:46:b0:9e:27:1d:d8:f3:1a:74:c2:da:6c:65:8c:a7:b8:bd:
cf:a6:cd:e3:5b:23:73:0c:e7:ea:9e:e1:0c:74:9d:63:b9:34:
52:e4:87:e7:7b:9c:45:3a:18:08:ef:5b:97:92:8b:bb:6d:d7:
cb:03:00:f2:30:33:2f:04:c4:a2:75:f8:b4:59:ac:e8:0e:ea:
eb:49:cb:3f:91:c4:eb:ea:a7:3f:46:35:36:53:6d:30:37:02:
a9:e9:8a:a7:c5:6a:18:9e:54:e0:a8:72:41:b3:4b:db:4e:64:
26:9d:3b:a3:1a:a9:e6:d0:fa:5a:8a:81:93:4b:46:b8:49:c1:
f8:65:cf:4e:17:e6:2d:81:d4:86:44:60:b3:c1:74:d9:85:a7:
41:35:dd:4d:5f:d8:fe:5c:8d:fa:06:25:b8:6b:32:f4:db:52:
63:4c:1c:c5:51:66:92:e8:d0:d4:dc:15:93:45:1e:b6:fa:82:
68:c1:d8:a6:37:2e:50:3f:4b:4c:db:62:df:14:92:1f:7c:e4:
d4:34:7f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:10 2024 by rpki-client on console-ams.rpki-client.org