Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/MYsTd3ZCM8U3W0fFw2xzmXdtfnU.roa
File: MYsTd3ZCM8U3W0fFw2xzmXdtfnU.roa (raw, json)
Hash identifier: Ih1h1Qh6bk4qHeXFILVv/MySZdIm0BPmloy4fBMrkhQ=
Subject key identifier: 31:8B:13:77:76:42:33:C5:37:5B:47:C5:C3:6C:73:99:77:6D:7E:75
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 0187A2C043D4592D37F7A59E65EE7C1DC873
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/MYsTd3ZCM8U3W0fFw2xzmXdtfnU.roa
Signing time: Fri 21 Apr 2023 07:38:41 +0000
ROA not before: Fri 21 Apr 2023 07:38:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 91.211.115.0/24 maxlen: 24
2a13:a502::/32 maxlen: 32
2a13:a501::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 25 Sep 2023 16:35:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a2:c0:43:d4:59:2d:37:f7:a5:9e:65:ee:7c:1d:c8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Apr 21 07:38:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=318b1377764233c5375b47c5c36c7399776d7e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:00:6a:5e:20:80:52:21:0c:37:ea:0b:9e:27:
6c:9a:d9:9e:0b:06:25:03:5c:99:b1:3a:6a:c8:e6:
e2:75:2a:2a:ef:f9:8a:4f:4e:fc:de:a9:d5:2d:c1:
64:7b:8d:f9:ba:e7:a7:13:ec:86:2f:4e:30:8e:e1:
12:57:dc:de:26:db:eb:6f:71:f8:e3:e7:ab:20:2c:
9c:2f:fe:2a:95:c9:84:7a:65:e8:ca:a2:c7:dd:9f:
8b:aa:4f:ae:d7:6c:1c:0a:ab:54:a6:c0:e3:1d:13:
5c:32:45:1e:d2:73:b2:13:44:70:a1:0e:a9:5b:a1:
ed:86:9e:4d:23:51:26:2e:a9:e8:5a:71:be:08:66:
45:8c:5c:54:26:1e:72:fc:74:f4:86:29:1f:d4:75:
37:ba:7b:17:df:d2:52:a7:51:e1:22:6f:82:9f:3a:
e9:44:ea:7f:c3:f7:37:d1:c3:73:09:9c:36:cf:de:
81:c9:d0:85:81:b0:5e:29:3c:e0:dc:c2:a8:00:af:
9a:28:c7:57:61:66:74:62:df:25:f3:8e:27:df:67:
48:70:69:a7:bf:de:28:02:97:80:96:e2:d6:5a:fa:
9e:d9:27:dd:c3:63:57:5f:f8:2a:8e:27:b4:61:f2:
de:f8:1f:92:ad:69:3d:1a:b8:6d:39:66:d3:fa:ea:
bf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8B:13:77:76:42:33:C5:37:5B:47:C5:C3:6C:73:99:77:6D:7E:75
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/MYsTd3ZCM8U3W0fFw2xzmXdtfnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.115.0/24
IPv6:
2a13:a501::-2a13:a502:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6b:2f:57:53:76:ee:b5:e8:a6:0f:d8:6f:d2:6e:e3:60:42:13:
49:e8:ba:da:34:cb:1c:f1:ba:b7:ac:2e:df:21:07:7a:0a:90:
74:7e:54:1f:21:be:14:b3:b5:cf:43:37:1d:f9:fe:2e:d6:8d:
6d:5b:ff:7f:29:37:88:12:ab:97:0a:1b:ac:98:61:4a:f5:29:
42:ac:83:c0:71:5d:bc:fa:c1:1c:1d:60:d1:b3:a1:f0:87:1b:
22:34:38:6c:e4:35:1a:22:bd:96:3c:2d:33:27:21:fb:fd:dd:
e0:a2:eb:85:66:bc:5d:13:3c:80:76:fd:6f:60:17:12:17:75:
39:90:cf:10:ee:b8:45:1e:42:94:4e:c6:ce:e2:b8:c4:4c:1b:
ce:53:dc:db:eb:51:68:79:a2:60:59:dc:ba:00:ad:12:3d:30:
8b:60:bb:07:f9:0c:b8:71:ff:fb:11:7b:02:cd:e5:80:82:59:
de:b0:4f:0e:e3:fc:85:90:c0:98:ee:cd:a0:0c:c7:c3:04:95:
98:87:ec:fd:a1:95:af:92:d4:73:c2:f4:7c:27:27:ca:e1:5d:
d2:df:45:76:aa:df:ce:18:a6:e9:f0:80:8c:f5:3d:63:bf:96:
68:c7:56:44:8c:11:a2:8f:56:45:0b:dc:81:75:73:b0:60:3e:
52:1a:59:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:28 2024 by rpki-client on console-ams.rpki-client.org