Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/56AsY-ExGyPCVukoV4yvCulHR4k.roa
File: 56AsY-ExGyPCVukoV4yvCulHR4k.roa (raw, json)
Hash identifier: p7Sos9K1rbMnIrjryqhnQuOMpr9sGeM2kVOayTKA/YI=
Subject key identifier: E7:A0:2C:63:E1:31:1B:23:C2:56:E9:28:57:8C:AF:0A:E9:47:47:89
Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial: 0187FFE8ED8A05A0C43898D2558815C85DA8
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/56AsY-ExGyPCVukoV4yvCulHR4k.roa
Signing time: Tue 09 May 2023 09:47:47 +0000
ROA not before: Tue 09 May 2023 09:47:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 145.221.0.0/24 maxlen: 24
91.199.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 May 2023 13:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ff:e8:ed:8a:05:a0:c4:38:98:d2:55:88:15:c8:5d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Validity
Not Before: May 9 09:47:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7a02c63e1311b23c256e928578caf0ae9474789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f9:7c:26:76:69:30:b3:bf:5f:bd:32:a8:9d:
1b:93:e9:63:27:44:eb:e0:b6:3b:54:d3:6e:a1:d4:
c1:b0:7c:a5:ed:18:c2:e7:5f:c7:d6:b4:04:5e:e6:
f4:84:96:2a:11:81:44:d7:d8:30:51:70:73:f2:f4:
91:cd:72:a0:0b:b4:96:e1:e6:dd:5e:cb:37:2c:f0:
9b:a0:00:0a:62:a4:8f:e4:e1:10:47:47:13:74:58:
c8:6f:0d:ff:16:cf:52:93:07:11:1c:fe:49:1a:b1:
83:9b:3e:a1:a0:7e:4b:9c:a9:17:3c:5f:fd:96:17:
27:53:66:21:a4:ed:21:30:65:d9:0a:a4:36:f4:1a:
33:7c:75:15:82:8a:b1:34:d8:21:ce:e9:d9:e5:e0:
47:f5:7c:55:4a:74:33:f6:d7:20:54:15:cf:ea:da:
39:8c:e2:ae:82:0e:e0:75:f8:ec:b8:1d:c6:06:9f:
f1:17:d8:95:0a:5f:50:72:cb:ac:c9:84:90:81:f4:
33:4b:2b:a2:f7:6b:f9:43:6c:6e:72:f6:7a:e8:40:
18:3a:a1:6a:60:fe:30:2b:ab:29:c0:02:b1:e8:52:
6a:7b:b1:f0:f6:71:f3:1c:9a:ad:b7:33:55:2d:c3:
bb:68:0e:ab:70:cc:9b:4b:2a:6d:8b:b3:19:7f:5c:
b5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A0:2C:63:E1:31:1B:23:C2:56:E9:28:57:8C:AF:0A:E9:47:47:89
X509v3 Authority Key Identifier:
keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/56AsY-ExGyPCVukoV4yvCulHR4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.173.0/24
145.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
04:25:47:ce:31:cf:08:e8:90:65:a6:f2:78:4e:c6:14:d3:ed:
c0:81:ee:24:04:14:90:2d:e4:0d:88:24:52:d4:0a:8e:c3:76:
36:60:b0:e6:19:ea:56:ca:a7:db:70:5c:30:2e:79:11:c1:d0:
93:57:a6:d4:52:ac:b5:cf:c4:56:1b:c0:38:68:b4:ff:80:7c:
36:ab:05:f8:bb:78:f8:63:a2:c6:a5:0c:c3:8d:be:5f:29:66:
56:71:22:21:25:4a:1b:70:29:c0:46:3c:75:d6:c8:8a:f9:6c:
04:6c:a9:11:04:b5:9e:b7:0d:6f:51:d6:08:35:b3:53:37:11:
6b:de:ea:aa:5c:54:96:45:05:45:50:ac:68:2c:35:69:d8:77:
f7:bd:45:04:35:82:36:01:e4:2f:cb:e5:a3:24:62:a0:24:b8:
e0:04:af:13:1f:65:74:1c:36:fb:ef:e7:99:88:31:92:1e:8d:
f5:1f:76:c1:47:fd:43:73:d8:65:79:4c:00:9c:fd:d5:b2:a2:
dc:90:ce:f7:60:0d:ba:3b:8b:9f:bb:dc:e5:fc:a8:0e:00:eb:
23:e1:47:9a:e8:c5:f1:e6:80:cf:8a:42:0a:cc:e7:2a:1d:c5:
b1:d9:e6:cb:3a:11:60:5d:d3:da:e4:3f:e2:b0:73:5d:12:99:
96:ee:26:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:13 2024 by rpki-client on console-ams.rpki-client.org