Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/wUtoKi2Mks6ZgnWQ4dgn3weiVvU.roa
File: wUtoKi2Mks6ZgnWQ4dgn3weiVvU.roa (raw, json)
Hash identifier: eEtzjffOY7qzb1TQSGy3GHs8VY5WMpiUhCG6uN7Vw4Q=
Subject key identifier: C1:4B:68:2A:2D:8C:92:CE:99:82:75:90:E1:D8:27:DF:07:A2:56:F5
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0187BCE4C321C6D8F410DF10410D19E63B43
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/wUtoKi2Mks6ZgnWQ4dgn3weiVvU.roa
Signing time: Wed 26 Apr 2023 09:28:41 +0000
ROA not before: Wed 26 Apr 2023 09:28:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211715
IP address blocks: 91.225.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 May 2023 06:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bc:e4:c3:21:c6:d8:f4:10:df:10:41:0d:19:e6:3b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Apr 26 09:28:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c14b682a2d8c92ce99827590e1d827df07a256f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:73:a0:45:32:c8:00:46:09:76:0c:2d:76:4c:
ed:59:c9:37:93:5b:a9:cc:49:20:a6:1e:71:da:e7:
55:e5:2f:9d:94:e7:e4:03:71:4f:94:a6:ff:ae:82:
f2:ff:cb:03:47:95:18:35:eb:4e:00:26:e3:9f:14:
ca:bd:53:92:b8:5a:58:a4:e7:d6:17:1a:3e:20:43:
b1:ba:25:00:50:38:96:12:87:4c:21:2f:3c:bf:c7:
fc:66:18:d0:99:a9:91:7d:e8:5c:a9:9c:02:92:14:
fa:90:31:5c:d9:41:4b:21:16:82:7b:28:15:b0:5e:
52:64:49:a5:da:27:b9:c1:fa:39:85:d4:94:d0:fb:
e2:2c:08:d8:42:ab:b0:9b:f3:be:38:f1:b6:d0:c7:
db:ee:4d:5b:30:5e:00:41:d4:d7:2b:f1:2e:b7:98:
0f:41:76:53:a8:15:76:3b:83:0b:69:d4:34:dd:9d:
a5:ef:a5:5d:bd:3a:6f:2c:1f:64:37:6d:58:79:2a:
0d:04:04:2b:e7:01:b9:c3:79:04:34:49:a9:67:58:
18:71:d9:ce:f1:fa:4d:8c:60:40:a7:2b:75:c3:16:
f9:03:ee:9c:6f:17:24:70:38:6b:4a:c6:e6:f9:66:
a1:06:ec:35:8a:30:fa:60:7f:74:da:2d:29:6e:26:
00:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4B:68:2A:2D:8C:92:CE:99:82:75:90:E1:D8:27:DF:07:A2:56:F5
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/wUtoKi2Mks6ZgnWQ4dgn3weiVvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.225.0/24
Signature Algorithm: sha256WithRSAEncryption
46:41:cf:46:78:05:22:32:b5:3f:2c:ba:ac:bc:a6:22:7c:ed:
43:e2:2f:b7:90:9c:29:a2:ba:c3:a8:9c:29:a5:06:dd:bf:c4:
06:63:41:e4:ab:b2:5b:16:07:97:6a:a5:46:d6:55:5f:e4:52:
fe:38:96:b2:af:ee:e4:1d:54:f9:b8:2d:dd:40:07:9d:80:c3:
ec:28:b9:d0:7d:8f:9b:f7:9f:94:9b:80:2b:f6:f1:63:a1:13:
c7:79:1a:3e:14:55:f7:bc:0f:74:b4:2b:ea:bc:ad:8e:aa:5f:
ea:8e:f1:b9:bf:ea:ec:51:f3:76:8f:4f:c5:f6:6f:75:40:b7:
29:1d:fd:57:84:d2:68:0e:2d:04:ef:6f:cc:f9:d5:d0:cd:9e:
dc:ad:86:b4:b8:e2:38:8e:07:33:57:51:fd:52:7f:90:ef:53:
57:17:07:23:61:8b:36:fa:ac:5a:4f:ea:f5:d8:51:9d:33:16:
12:c3:4a:00:c5:49:78:3c:7f:f1:37:7f:cd:04:1d:5c:01:58:
b7:af:9c:b7:2d:06:1d:e8:7e:2a:43:ef:21:b5:7b:89:af:9d:
fd:61:74:35:a3:9e:e8:73:5b:95:92:ff:fd:2d:e5:99:ce:d0:
8f:34:d8:5c:b6:a8:2a:35:59:73:ab:ab:59:8e:dd:ce:12:25:
a6:54:d6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:49 2024 by rpki-client on console-ams.rpki-client.org