Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/vyP18ZCyXiS5Wbuh03Y5PxFZxko.roa
File: vyP18ZCyXiS5Wbuh03Y5PxFZxko.roa (raw, json)
Hash identifier: NtEIMoR8xG6zvWNMRpJxBtjSxXzn0CCxHR3zbhlLsUo=
Subject key identifier: BF:23:F5:F1:90:B2:5E:24:B9:59:BB:A1:D3:76:39:3F:11:59:C6:4A
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 01857283751A29795A02A63A389C08DD7EEF
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/vyP18ZCyXiS5Wbuh03Y5PxFZxko.roa
Signing time: Mon 02 Jan 2023 12:44:55 +0000
ROA not before: Mon 02 Jan 2023 12:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61179
IP address blocks: 91.250.250.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:75:1a:29:79:5a:02:a6:3a:38:9c:08:dd:7e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 2 12:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf23f5f190b25e24b959bba1d376393f1159c64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3c:87:df:59:86:e1:e1:fc:06:53:78:d8:58:
d3:c6:28:6d:a3:43:12:3e:98:ef:2b:06:2d:2f:09:
fd:3e:9f:fa:02:4f:71:8f:96:d5:9a:53:41:69:a2:
94:b2:0f:48:67:83:23:72:43:51:7d:4e:fc:01:97:
75:e3:23:84:25:4b:83:e0:3f:65:03:68:b6:7b:ba:
8a:eb:8b:6f:67:2f:51:ec:33:9f:fa:a6:7c:09:b9:
70:cc:6a:8b:e1:38:10:ee:1f:25:7c:d5:2a:37:fa:
c5:46:3c:e2:1e:eb:6c:4d:25:60:b4:22:46:7b:06:
72:7c:d4:8b:5a:d8:e4:ce:15:0a:18:b2:ed:84:7b:
50:67:aa:10:08:7a:af:34:f3:1f:f8:d0:44:97:43:
d0:7f:e9:1f:07:69:7c:7f:93:76:e9:7b:0f:84:cd:
4a:08:ae:7e:ee:4b:45:14:f2:4a:6b:de:e6:b2:7a:
bc:7b:32:35:a4:53:b1:eb:ff:60:58:a7:fe:9e:a7:
73:ff:b0:f1:38:35:17:ad:19:31:a7:8f:7b:bc:e1:
1a:72:df:72:30:e3:53:7f:9a:1c:d9:03:75:69:2d:
24:46:a1:b2:0e:28:d9:17:6d:2f:8a:91:6a:e7:e8:
00:fb:e3:40:07:66:fc:4a:19:47:75:89:bf:6c:ae:
70:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:23:F5:F1:90:B2:5E:24:B9:59:BB:A1:D3:76:39:3F:11:59:C6:4A
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/vyP18ZCyXiS5Wbuh03Y5PxFZxko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.250.250.0/23
Signature Algorithm: sha256WithRSAEncryption
61:cd:af:0c:12:fc:5f:6e:be:8b:52:72:5a:89:cf:09:cb:2f:
e1:22:48:f1:59:6c:1a:b6:49:9b:81:d3:c1:21:26:ff:cc:af:
0c:38:54:81:67:e4:04:61:94:31:dc:8b:ef:32:ef:6a:14:9a:
f0:e0:51:51:0b:ad:6b:d8:eb:78:b7:83:9a:45:7a:97:a6:21:
22:89:af:e7:13:8c:8b:be:0a:0b:83:b7:47:f2:6c:78:af:23:
96:75:27:b4:71:5e:ce:16:c8:a4:62:22:d3:27:17:fb:fa:fa:
8c:da:d3:5e:ea:b0:7a:31:ab:b4:73:57:dc:14:33:8f:dd:bf:
04:f9:4f:61:5e:a5:0e:e2:12:51:60:f8:43:b3:c0:57:8e:76:
cb:16:bf:b2:5f:ea:1c:b5:a7:43:25:18:32:87:a3:6a:d8:2f:
6a:a4:d8:b7:9e:dc:0c:a9:fb:4c:4f:2a:6a:60:4d:7c:fe:db:
53:7e:89:5d:72:64:ee:7b:c4:82:b7:85:c5:4e:8a:31:ce:c8:
75:b6:c5:cb:11:f6:84:c6:85:d8:a8:36:a0:8e:7e:b0:d9:f9:
68:0a:cc:77:eb:b0:51:d9:37:2a:c9:6b:44:f1:e5:65:7a:85:
e1:d6:ad:d8:54:cd:84:16:fc:a1:f0:1d:53:ec:6f:be:25:f8:
e4:e4:3c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:23 2024 by rpki-client on console-fra.rpki-client.org