Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/loozjTju2n8fM6heE8V6HzjylZQ.roa
File: loozjTju2n8fM6heE8V6HzjylZQ.roa (raw, json)
Hash identifier: 5d32jt5MlRPnaOjuUW4iPst9pik25tDQXpThNOx7fyg=
Subject key identifier: 96:8A:33:8D:38:EE:DA:7F:1F:33:A8:5E:13:C5:7A:1F:38:F2:95:94
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 01862C4B7B75754F7F044B5D65FF89CAA21F
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/loozjTju2n8fM6heE8V6HzjylZQ.roa
Signing time: Tue 07 Feb 2023 14:33:09 +0000
ROA not before: Tue 07 Feb 2023 14:33:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43310
IP address blocks: 91.225.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2c:4b:7b:75:75:4f:7f:04:4b:5d:65:ff:89:ca:a2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Feb 7 14:33:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=968a338d38eeda7f1f33a85e13c57a1f38f29594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:95:da:b0:92:b3:79:0c:9c:a7:5c:c1:41:c3:
58:f7:36:bd:4a:4d:d6:dd:a6:76:31:b1:10:15:d3:
6c:ce:10:bc:9f:a8:03:58:52:09:d5:07:f0:ea:ed:
fe:60:45:fd:52:42:88:43:06:54:8a:4b:c7:8e:c7:
2c:f5:98:1e:ff:76:0e:69:1a:10:cf:9a:a5:0c:4d:
e1:40:42:c4:c6:8a:68:93:35:29:b4:30:66:d9:9e:
68:7b:c2:47:bd:9c:f5:80:fe:eb:da:70:cb:3b:c4:
e0:37:2f:1c:c2:1b:78:09:d3:6b:dc:cf:73:fe:90:
62:ad:8f:09:e0:33:d3:75:a4:1e:45:c2:d9:0b:5e:
b9:fb:ef:32:b8:33:aa:34:fd:da:86:2d:70:41:2f:
c3:23:e2:57:50:b3:8c:d8:4f:5c:7d:ca:bc:86:a7:
95:f9:6c:94:3f:27:de:30:47:74:e1:6e:03:70:61:
0d:82:9c:1b:2d:a3:13:4c:e3:9b:ae:5a:63:78:b0:
c4:0a:3e:a3:0b:93:9c:fb:f5:dc:47:f8:5f:85:d1:
16:6f:0a:b4:ae:6c:40:a1:85:84:3b:be:ee:10:bc:
2b:23:43:75:7c:02:8e:c8:aa:73:05:c6:f5:59:6e:
20:b0:15:ee:7c:0b:7f:be:fe:3d:77:0a:b9:33:85:
2d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8A:33:8D:38:EE:DA:7F:1F:33:A8:5E:13:C5:7A:1F:38:F2:95:94
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/loozjTju2n8fM6heE8V6HzjylZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.224.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:47:98:bb:91:89:b6:60:53:dd:24:dc:d9:8d:f0:3c:84:b9:
9a:04:1b:42:5b:99:46:ae:22:66:7f:9d:7f:c2:7b:b0:38:3f:
bb:96:a5:0e:2b:51:d3:7e:3d:84:0b:28:6c:b7:08:ca:9f:92:
63:8e:1a:3a:3d:52:9c:a0:82:e6:6b:27:d8:d4:37:e8:06:63:
e4:00:75:5e:09:a7:b4:2e:6f:d1:8c:51:f0:42:e3:bd:93:7b:
24:ff:81:b0:9d:32:1e:ce:cf:e4:04:19:0c:b8:0e:44:69:41:
6b:00:a0:77:95:97:e1:b2:4c:6e:fe:6f:e2:20:a6:fd:dc:3a:
2b:6c:9f:88:06:77:23:d4:9d:df:20:af:63:d5:a3:28:c5:55:
5d:51:da:e3:64:73:6c:93:f5:06:8c:51:42:a6:3a:f6:34:63:
0d:88:e6:0b:28:f1:bc:3c:4b:7b:94:0d:70:8f:aa:f7:26:f8:
1c:de:9a:28:63:41:0d:0c:fb:d0:9a:21:a7:75:2c:46:df:4e:
2b:ee:de:5d:87:58:b7:24:17:67:c4:b0:b7:88:5c:45:0e:74:
3f:48:ed:e5:76:f9:4a:2b:8e:06:d2:d7:ff:97:ca:df:ad:50:
0a:ab:fe:3d:4f:f0:b9:b0:59:10:23:b0:c2:dc:9b:c8:9e:dd:
5c:08:98:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:49 2024 by rpki-client on console-ams.rpki-client.org