Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/fRk7xtR7p_vLD5YPHUlRCFqTmrg.roa
File: fRk7xtR7p_vLD5YPHUlRCFqTmrg.roa (raw, json)
Hash identifier: GbEU8gMkhNVBRbYoCSxQPvrLSdbpWLL5bPFp3c24kps=
Subject key identifier: 7D:19:3B:C6:D4:7B:A7:FB:CB:0F:96:0F:1D:49:51:08:5A:93:9A:B8
Certificate issuer: /CN=3702d86b0e710668ea66da7dcd1b140dec1e0c3d
Certificate serial: 018570CBEA52AE6C44E7792783AE2E6070BA
Authority key identifier: 37:02:D8:6B:0E:71:06:68:EA:66:DA:7D:CD:1B:14:0D:EC:1E:0C:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/fRk7xtR7p_vLD5YPHUlRCFqTmrg.roa
Signing time: Mon 02 Jan 2023 04:44:49 +0000
ROA not before: Mon 02 Jan 2023 04:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50349
IP address blocks: 93.190.36.0/22 maxlen: 22
91.214.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:ea:52:ae:6c:44:e7:79:27:83:ae:2e:60:70:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3702d86b0e710668ea66da7dcd1b140dec1e0c3d
Validity
Not Before: Jan 2 04:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d193bc6d47ba7fbcb0f960f1d4951085a939ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a7:96:d4:66:d3:81:07:f9:55:3e:6a:a5:fc:
68:2b:79:e0:c7:9e:06:8b:97:f4:46:89:f5:95:b3:
7d:d4:e6:66:6b:9b:7f:60:d2:9a:6f:ca:95:f4:bd:
e4:f7:8f:57:ab:cd:cb:10:6e:b7:7b:1a:52:1b:cd:
d9:5a:45:99:37:24:ba:51:06:6f:d7:23:a7:cb:0c:
39:92:08:52:ff:ee:04:0a:00:5d:c0:37:16:4d:ae:
aa:45:3a:3e:fe:77:99:85:e7:5b:a9:9f:44:a3:0b:
51:fd:48:8c:cf:cb:83:2a:30:96:dd:f9:38:f5:e8:
1d:8e:97:e8:26:36:f4:f9:04:70:39:52:9a:5a:d0:
1e:bc:f1:b4:f5:ab:c8:fe:a8:3c:82:b0:a4:3b:f1:
3a:d7:3c:6e:6c:40:2f:d0:35:ad:27:aa:ee:cf:60:
2d:36:f8:dd:04:c8:0a:28:b0:b1:e6:d4:1e:dc:2e:
ad:69:15:05:96:ea:38:63:52:a9:c1:0e:49:2d:a7:
92:d5:5d:8d:14:69:23:e7:c3:99:4e:6a:17:e5:da:
08:e5:fd:30:43:8e:42:b3:24:fe:3c:9c:43:da:b8:
28:c3:98:df:de:1e:53:4d:cb:95:c0:d8:87:cc:b2:
a2:48:f5:2c:02:9d:0f:d3:a2:ec:cc:19:d9:02:19:
b6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:19:3B:C6:D4:7B:A7:FB:CB:0F:96:0F:1D:49:51:08:5A:93:9A:B8
X509v3 Authority Key Identifier:
keyid:37:02:D8:6B:0E:71:06:68:EA:66:DA:7D:CD:1B:14:0D:EC:1E:0C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/fRk7xtR7p_vLD5YPHUlRCFqTmrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.0.0/22
93.190.36.0/22
Signature Algorithm: sha256WithRSAEncryption
97:ee:11:9e:ba:0c:4f:8c:7f:b7:7e:18:fe:c1:5e:0d:3b:fb:
98:0f:21:17:a2:6e:87:36:07:04:28:04:01:13:79:cb:9e:fc:
51:1c:c2:f3:84:13:5a:53:74:3d:6c:7b:f6:30:db:6b:09:0a:
a0:e1:14:21:fb:a5:62:a8:c3:3b:48:64:5d:5f:bf:8c:30:b0:
7a:70:62:f3:1d:1e:a0:4d:46:2b:d1:75:98:ba:d3:0c:cf:87:
d9:cb:8d:f6:47:44:98:47:62:82:c3:13:f0:04:e2:e8:55:b4:
ba:b9:7e:d1:a3:00:ac:3b:e6:89:39:0d:93:23:5a:ee:7f:e2:
6c:71:6a:63:71:c0:fc:1b:d0:c8:36:4e:fc:8e:6a:5c:57:30:
fe:20:54:1a:5e:cb:79:03:6c:70:3d:cf:c3:75:53:5f:17:b2:
09:41:91:dc:9e:54:65:69:2a:ba:ed:b1:9f:41:d4:9b:ed:48:
bc:1d:1e:18:14:d1:ca:ba:b0:3d:cb:38:0f:90:42:20:a9:f8:
0c:2b:f1:63:96:08:aa:69:1c:eb:09:6b:53:cf:c7:11:9b:3e:
cc:c2:28:6b:a3:d3:77:33:01:34:01:af:29:a2:29:fd:14:1f:
63:c4:d0:15:3b:6a:a3:2d:6d:bf:bd:fc:dc:38:28:b7:f2:6a:
ef:f0:b9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:09 2024 by rpki-client on console-ams.rpki-client.org