Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/ce8_s5fTNURiyiFqXh3Lr45XR2c.roa
File: ce8_s5fTNURiyiFqXh3Lr45XR2c.roa (raw, json)
Hash identifier: 0WEWXIq6TT2b/oNmpL+M0vZCMo2U9USzVY9TlSzPkEQ=
Subject key identifier: 71:EF:3F:B3:97:D3:35:44:62:CA:21:6A:5E:1D:CB:AF:8E:57:47:67
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 01856D7876230364094383FAC02EA853444B
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/ce8_s5fTNURiyiFqXh3Lr45XR2c.roa
Signing time: Sun 01 Jan 2023 13:14:49 +0000
ROA not before: Sun 01 Jan 2023 13:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 91.225.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:76:23:03:64:09:43:83:fa:c0:2e:a8:53:44:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Jan 1 13:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71ef3fb397d3354462ca216a5e1dcbaf8e574767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:db:a8:8f:14:71:68:26:51:f1:92:dd:83:05:
80:47:34:38:72:76:7f:85:ac:ff:6c:a4:05:85:1e:
ee:9e:77:ef:b0:99:ac:43:71:74:ab:ed:06:33:ae:
c8:92:c4:44:c2:3f:3c:74:c0:1d:84:75:4f:4e:bd:
6d:84:2f:b8:b1:f0:f1:cd:e7:c7:5b:52:6a:47:9b:
73:3b:6d:e2:dd:84:97:67:38:f7:5f:62:a2:c2:11:
bb:e4:a8:6a:8d:95:e3:c8:e5:d2:33:0a:ec:67:ff:
b8:98:d7:d0:a2:44:6f:3f:15:28:bf:e3:85:d2:3b:
7a:f6:80:5c:86:b2:b3:56:1a:10:2a:a3:a1:e5:d8:
88:d4:e3:da:ff:40:ae:e1:e3:42:7d:0b:e1:7b:b8:
ab:62:d7:ed:7f:1d:4b:8f:c1:b9:e5:13:95:79:b4:
85:de:c5:bd:d8:a2:05:1f:f3:d9:7b:93:34:f0:2f:
db:14:d0:28:fb:e1:e7:92:bc:35:ba:a7:49:a6:15:
e5:fc:d8:67:bd:a3:e0:cd:4a:c5:1b:9c:04:a9:e6:
a5:7e:69:25:c5:92:b4:1e:56:e3:a0:8c:5c:50:00:
b8:ed:81:f4:0b:da:c3:42:e5:a5:e4:53:1d:2d:d5:
b6:19:a9:1e:5a:ec:35:29:6b:ca:82:06:ff:13:34:
a3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EF:3F:B3:97:D3:35:44:62:CA:21:6A:5E:1D:CB:AF:8E:57:47:67
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/ce8_s5fTNURiyiFqXh3Lr45XR2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.248.0/24
Signature Algorithm: sha256WithRSAEncryption
42:54:3b:7a:56:1c:20:f5:00:44:ba:6a:cd:19:cc:d2:69:67:
70:d2:ab:65:c5:24:06:f9:2f:47:22:fa:b6:d9:ad:a8:95:0f:
0a:22:ab:3d:31:f2:f1:72:a0:75:47:da:88:85:07:47:62:9f:
51:64:5d:62:64:a7:49:21:52:c3:37:eb:43:e7:7a:3a:84:87:
e1:c7:db:0c:5f:01:44:ae:56:c6:54:90:85:00:5e:6e:24:f3:
c8:60:64:4e:9a:37:94:13:77:ed:90:34:82:ec:67:38:e4:66:
6a:51:e9:12:a7:b0:f4:c2:84:b5:1a:0f:df:d9:17:17:49:b2:
8b:51:c0:23:a9:0d:8e:07:8e:e0:4c:79:ac:db:66:1e:9e:11:
8f:c5:db:fe:c8:1d:bd:fc:08:1b:6d:28:3f:fd:8c:35:9c:f4:
d9:f0:e8:b3:28:0b:17:1e:b5:37:1b:c8:91:27:2e:76:73:b1:
45:47:d6:56:84:e5:c0:56:37:41:d1:8a:d2:12:dd:46:8b:77:
76:52:d2:74:67:8a:b1:0f:6e:95:86:5c:c2:0f:a6:3f:b2:c8:
d8:3b:2e:23:91:1b:eb:ff:aa:3c:0f:67:b7:8e:d5:1f:4b:1a:
64:95:78:55:6b:f0:be:f9:7b:22:1d:74:f1:dc:f9:44:86:55:
9c:b6:aa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:44 2024 by rpki-client on console-ams.rpki-client.org