Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/3Ev0t3FBeQgTEdhR7CBhbGeffXg.roa
File: 3Ev0t3FBeQgTEdhR7CBhbGeffXg.roa (raw, json)
Hash identifier: crLgXd8lZUgVW/+y8pHcf5F2IJRHLY80Udw+KJNNmE8=
Subject key identifier: DC:4B:F4:B7:71:41:79:08:13:11:D8:51:EC:20:61:6C:67:9F:7D:78
Certificate issuer: /CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Certificate serial: 0190CED8969B1801D2F417B89D5A974C7B16
Authority key identifier: A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/3Ev0t3FBeQgTEdhR7CBhbGeffXg.roa
Signing time: Sat 20 Jul 2024 06:33:39 +0000
ROA not before: Sat 20 Jul 2024 06:33:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.227.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jul 2024 05:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ce:d8:96:9b:18:01:d2:f4:17:b8:9d:5a:97:4c:7b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Validity
Not Before: Jul 20 06:33:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc4bf4b7714179081311d851ec20616c679f7d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:4e:fc:5a:ed:c4:60:14:ed:1a:31:bd:b7:
1e:e2:6c:9a:09:19:17:2f:0d:b8:95:5e:fa:ef:ef:
6b:57:6e:7c:4e:74:a1:6f:d7:09:e2:16:63:a9:a7:
41:a0:19:6f:3b:7c:da:76:d8:3a:c5:dd:f8:34:b8:
4a:64:d3:77:6d:fc:a0:0c:2b:27:c5:c6:5c:44:5b:
b5:ec:ce:6e:a1:21:d5:53:25:df:23:ad:ae:fb:25:
50:9b:0a:50:79:94:b6:b0:d4:5b:95:60:67:ea:6f:
72:9b:e3:f5:bb:11:b9:67:24:c3:63:5d:c0:b0:2e:
09:fd:38:36:2e:b5:91:74:70:78:02:89:8a:2c:86:
96:cf:1b:29:e4:6e:d2:80:cb:df:db:fd:16:3d:e7:
0b:8a:50:cf:67:84:b4:ba:ef:86:1a:83:b0:0a:0f:
27:32:5a:4a:ea:84:a2:be:7f:da:14:c3:a2:29:e7:
4c:15:3e:55:38:4f:38:0b:7d:e4:a1:38:81:6d:b8:
e4:bf:a9:23:f6:6d:f7:da:21:21:4a:00:5a:9a:99:
f4:e8:8f:90:35:8e:86:d6:63:3c:f6:09:12:92:30:
02:9d:cc:41:95:28:7f:f7:c8:66:73:da:eb:c0:46:
22:83:fa:55:ef:3b:4a:d3:3a:4c:22:9d:c8:d6:57:
3e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4B:F4:B7:71:41:79:08:13:11:D8:51:EC:20:61:6C:67:9F:7D:78
X509v3 Authority Key Identifier:
keyid:A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/3Ev0t3FBeQgTEdhR7CBhbGeffXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.62.0/24
Signature Algorithm: sha256WithRSAEncryption
40:55:6f:a6:b0:12:06:4b:63:dd:58:4b:e9:65:a4:ef:72:e3:
3a:bd:19:88:e8:57:5b:6e:16:6d:60:95:12:57:94:61:7b:67:
28:0f:02:43:08:3e:c7:40:fb:02:08:dd:3b:9c:61:e4:f5:01:
81:5e:a2:bf:4c:8f:89:91:d2:fa:12:a2:63:c4:14:17:10:e3:
ac:3a:11:6c:80:17:8e:ff:45:7b:e5:8f:78:e8:dc:b4:a7:84:
7b:db:92:8b:6b:39:de:63:65:fb:3e:2b:a1:10:ee:fb:97:99:
12:75:f5:4e:ec:21:d2:f2:79:e8:75:4d:9b:7f:16:d2:54:3d:
14:e8:ac:9c:f3:c5:fe:b4:3e:c4:e7:d2:2e:e9:6c:74:a1:a4:
02:43:96:1b:34:63:20:3e:e0:d8:96:0f:dc:89:09:35:47:14:
8c:bc:ce:8b:77:87:16:e5:20:65:48:a6:5f:1e:a4:22:a2:80:
d3:78:43:28:c6:9d:b5:01:1a:13:a9:68:a2:6f:77:0c:86:6e:
ce:bc:29:f2:61:79:52:1c:d9:ab:d9:72:53:a5:15:e2:f6:e3:
8e:28:8c:c1:06:ed:a5:4d:11:11:06:61:fd:c2:30:87:c0:ad:
e3:ab:cf:a0:bc:5d:23:a0:58:1f:b4:55:dc:ea:1b:b8:c4:1d:
25:84:17:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 07:50:30 2024 by rpki-client on console-ams.rpki-client.org