Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/X_q1mDnLVW49VGKmGhvWftZJxSs.roa
File: X_q1mDnLVW49VGKmGhvWftZJxSs.roa (raw, json)
Hash identifier: iXKo7NEBsB+fZnMlroyd97U8cgyGvTeQZYFuCcg825Y=
Subject key identifier: 5F:FA:B5:98:39:CB:55:6E:3D:54:62:A6:1A:1B:D6:7E:D6:49:C5:2B
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 018BBAF0FBE4D207B5FD60C0E64D8D420C64
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/X_q1mDnLVW49VGKmGhvWftZJxSs.roa
Signing time: Fri 10 Nov 2023 20:33:57 +0000
ROA not before: Fri 10 Nov 2023 20:33:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.225.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Nov 2023 07:34:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ba:f0:fb:e4:d2:07:b5:fd:60:c0:e6:4d:8d:42:0c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Nov 10 20:33:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ffab59839cb556e3d5462a61a1bd67ed649c52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ae:a7:45:8d:d7:18:a0:fe:90:f6:64:d1:10:
e7:e4:f5:42:cd:67:2c:11:d6:c3:07:31:e3:42:2f:
b8:60:97:92:0c:02:25:d6:30:fd:4f:5f:ab:b4:7d:
ab:27:65:64:05:17:46:78:2c:79:38:f2:99:e8:0c:
6b:4c:c7:8e:77:46:13:ce:ad:b8:f1:62:98:e1:97:
7d:8a:29:84:00:68:42:3b:ac:bd:5b:98:b2:5e:5e:
8a:58:ed:82:72:9e:b5:96:af:75:b4:a0:8a:fe:d9:
21:fe:e4:de:e5:a3:2b:f7:49:22:c9:33:94:d8:ec:
d5:a8:f3:69:76:68:2a:2c:7f:20:c7:8e:3e:6b:8e:
35:0f:39:30:24:de:c5:25:a0:11:ed:95:73:10:ac:
2d:e8:f6:1e:c7:41:ff:9e:a0:b6:30:c8:d4:c1:90:
8b:38:11:6a:61:2c:ac:b1:81:8d:48:64:a3:e8:bb:
25:c4:00:99:58:b3:a8:94:57:ff:65:f4:50:58:f7:
a2:06:ff:0d:8b:38:14:4d:c9:76:17:fd:2e:a7:93:
bc:e5:82:c9:7e:ce:90:03:9d:fb:01:c0:78:5b:5d:
f7:f7:7d:fb:c9:20:21:cc:3c:72:2f:2a:e1:8e:8a:
82:64:6c:9c:8d:9b:c7:bd:d6:a8:1d:aa:13:52:d6:
66:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FA:B5:98:39:CB:55:6E:3D:54:62:A6:1A:1B:D6:7E:D6:49:C5:2B
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/X_q1mDnLVW49VGKmGhvWftZJxSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.227.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:8b:a4:90:a2:a6:d2:93:49:ae:3c:4f:77:03:92:dd:95:64:
a7:7c:1d:33:de:c6:7e:b7:89:ba:6f:42:67:11:a2:a6:f8:bf:
db:73:08:b6:e3:63:3a:d9:0a:c3:90:fb:b1:03:93:48:27:65:
01:9a:72:c8:66:b9:42:26:74:f8:cd:e3:48:cd:1d:04:ca:5d:
4b:9b:d2:66:f9:f6:48:27:68:ea:95:74:b8:9f:8d:52:4e:03:
73:c4:ce:27:7d:75:39:2a:aa:74:dc:bf:15:d0:4a:60:19:28:
9a:7a:f1:f7:85:fd:48:13:20:28:40:02:a4:27:87:45:c8:3b:
ee:28:3d:0c:f6:69:05:32:04:0b:0f:a0:a0:e1:d5:d0:66:83:
48:33:bf:55:02:53:4a:81:10:9f:e8:69:0d:74:48:6c:b0:f0:
51:27:9e:c5:bd:24:4b:83:2c:7f:a7:8d:a0:27:dd:bf:65:47:
ac:9b:f6:f4:0f:b6:34:8a:3f:25:f8:80:4e:3a:62:4a:f8:a7:
9a:04:9b:60:a6:c7:12:c2:c3:cd:b5:8a:e2:2c:9d:7d:36:bb:
cd:39:cb:0f:95:f4:d7:f4:0b:6b:dc:5e:c9:53:f5:6a:68:14:
d1:31:bf:ee:8f:b8:2e:63:b7:74:64:bf:4f:cd:cd:5c:94:04:
fd:20:3f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:06 2024 by rpki-client on console-fra.rpki-client.org