Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/6crFjjLTc1HgIgE7oIzczXykIws.roa
File: 6crFjjLTc1HgIgE7oIzczXykIws.roa (raw, json)
Hash identifier: 0f1iIIpIsq7w/rp583bB1Kio8QUw0E64+On4uYIjU8w=
Subject key identifier: E9:CA:C5:8E:32:D3:73:51:E0:22:01:3B:A0:8C:DC:CD:7C:A4:23:0B
Certificate issuer: /CN=4aebd4543df29da64e4232ef3791f534573c12f1
Certificate serial: 01857681E2CD08C607C69929BD1CE5CD435A
Authority key identifier: 4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/6crFjjLTc1HgIgE7oIzczXykIws.roa
Signing time: Tue 03 Jan 2023 07:21:41 +0000
ROA not before: Tue 03 Jan 2023 07:21:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16019
IP address blocks: 91.231.28.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:76:81:e2:cd:08:c6:07:c6:99:29:bd:1c:e5:cd:43:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aebd4543df29da64e4232ef3791f534573c12f1
Validity
Not Before: Jan 3 07:21:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9cac58e32d37351e022013ba08cdccd7ca4230b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d8:90:7b:d9:6b:c2:97:fe:7b:5c:cd:5b:cd:
c9:ff:48:df:17:69:6f:4a:34:ab:ee:b1:4f:69:df:
d9:a9:94:b0:b8:2c:3a:64:79:a0:1d:26:b9:67:97:
64:f8:1f:81:74:98:4d:87:0f:90:d9:c7:d3:7e:f4:
90:82:ce:56:94:42:fe:9a:0b:d6:18:84:21:a6:bc:
07:06:2b:3e:d8:5b:31:5a:f6:45:cf:66:4b:c1:42:
28:ac:64:0a:a0:c5:2b:7d:d4:df:c0:71:8e:4c:51:
f8:da:35:4c:2c:e7:e2:80:45:74:2e:d8:92:13:ba:
40:b5:0a:dd:ae:f3:20:56:9b:15:c3:5e:6d:70:4b:
d8:50:6e:1d:a1:73:9b:3c:a3:3b:33:4a:16:7d:6a:
6a:c1:66:6a:f9:37:25:a3:aa:07:56:58:d3:8a:06:
83:57:55:ac:cd:43:d4:8a:17:52:61:4e:d4:9d:17:
18:76:1a:4a:8f:c6:d8:ad:65:24:4f:a9:95:7c:09:
b0:8c:b7:d4:99:75:bf:b2:01:ff:90:d1:50:d2:32:
89:b1:28:31:06:38:67:d1:88:99:30:eb:17:e6:af:
2e:45:a0:7e:e1:9a:7f:0e:72:05:0e:99:e9:7b:66:
79:63:1a:e4:79:f8:18:2a:52:7f:77:d6:f7:19:93:
85:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CA:C5:8E:32:D3:73:51:E0:22:01:3B:A0:8C:DC:CD:7C:A4:23:0B
X509v3 Authority Key Identifier:
keyid:4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/6crFjjLTc1HgIgE7oIzczXykIws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.28.0/22
Signature Algorithm: sha256WithRSAEncryption
77:b5:14:10:da:52:e7:d5:8a:d8:af:cf:e6:32:20:f0:61:93:
c5:f2:e5:15:5c:67:ac:0d:34:d9:5c:c4:65:fa:a7:9a:95:0f:
24:36:58:3b:56:6a:37:fe:e0:91:d3:c9:e7:69:d4:6d:3c:49:
95:5b:d2:97:8a:30:ed:b3:1f:25:63:eb:37:a8:f9:e7:ea:13:
0f:88:79:82:b3:4a:f6:e4:6f:e4:16:a5:b5:69:f4:57:a1:f8:
7b:d4:44:26:ad:24:a8:b2:98:57:88:1e:f2:81:65:5c:03:0a:
6d:e2:7f:75:c7:bb:21:6d:f8:b1:60:d5:12:5d:3d:76:64:94:
01:fc:2f:36:50:0b:f4:fe:ea:69:97:7e:81:5d:ad:0a:45:87:
da:44:f9:69:dd:88:98:e0:1d:7a:b2:3b:ea:6f:33:35:6c:c0:
4a:f7:f2:52:9e:71:7a:6d:a4:49:44:ef:da:3b:0f:c4:f8:d1:
80:fb:d2:88:d9:57:82:8b:ce:d2:11:33:c4:62:c4:77:4d:72:
cc:a8:f5:71:0e:14:c4:ae:87:1b:e1:49:7c:f8:28:2b:7b:47:
f2:f0:16:ad:15:50:a3:98:55:c6:6c:27:47:68:36:75:8c:1d:
ec:6a:6f:d1:b4:bd:a4:aa:9c:71:44:60:c0:8a:7c:5b:c9:c9:
94:ba:22:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:15 2024 by rpki-client on console-ams.rpki-client.org