Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/G7fQ3nsLs38O_eIsVzMpRZis2MI.roa
File: G7fQ3nsLs38O_eIsVzMpRZis2MI.roa (raw, json)
Hash identifier: RC8WtCFo5oaHP/0j+kdkqDubeWLKY5nkuWtlYlvRv6I=
Subject key identifier: 1B:B7:D0:DE:7B:0B:B3:7F:0E:FD:E2:2C:57:33:29:45:98:AC:D8:C2
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 01856C1CBC63EDD38D60427FB5B016EC7F29
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/G7fQ3nsLs38O_eIsVzMpRZis2MI.roa
Signing time: Sun 01 Jan 2023 06:55:00 +0000
ROA not before: Sun 01 Jan 2023 06:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34762
IP address blocks: 91.198.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:bc:63:ed:d3:8d:60:42:7f:b5:b0:16:ec:7f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Jan 1 06:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bb7d0de7b0bb37f0efde22c5733294598acd8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:19:c9:15:a8:96:5f:cf:c6:3f:db:aa:87:e0:
6e:dc:cb:ab:4d:5c:4c:53:d6:25:a2:66:02:a3:6d:
6c:c1:ce:48:7c:ed:b7:32:9f:eb:8e:80:f6:25:0a:
3d:4a:6f:61:3c:f3:7a:3c:f1:03:60:57:42:33:3f:
99:cf:2b:49:66:f1:cc:68:cd:11:d0:3b:bc:a0:1d:
9f:47:9e:a0:e4:57:ed:fc:c4:58:dd:42:a4:41:db:
94:87:8f:54:bb:f3:56:47:cf:9a:04:b9:7f:db:25:
c2:4f:ba:44:dc:71:2d:47:8d:36:f4:05:a7:23:04:
1e:d7:fe:cb:b4:cc:ba:71:d8:c1:8e:c7:b5:9b:ca:
24:f1:04:5a:29:5a:43:79:9b:3a:2a:d6:91:41:7e:
7f:3b:f5:ea:ec:06:83:26:0a:08:0f:c2:e6:37:20:
0e:7b:32:cc:fc:2c:b4:bf:2e:93:1d:cf:b8:c7:bf:
2b:66:10:94:a1:b4:f9:75:01:47:42:e4:5a:c3:88:
fe:4f:25:14:e7:8f:5a:d2:e1:93:62:2d:33:a1:d7:
79:5a:c0:8d:d9:0a:05:cc:0e:8f:34:2d:de:28:31:
9a:a1:7c:0d:be:16:03:a6:2b:c8:c3:93:3b:e8:54:
b9:c5:dd:71:5f:c4:14:bd:de:6b:f5:81:54:48:bf:
a6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B7:D0:DE:7B:0B:B3:7F:0E:FD:E2:2C:57:33:29:45:98:AC:D8:C2
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/G7fQ3nsLs38O_eIsVzMpRZis2MI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.243.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:f6:5a:fb:78:26:9d:1f:d0:0b:f8:e4:63:1c:eb:07:3a:e1:
e7:5e:55:34:31:e4:a4:dd:0c:e7:69:7d:c9:eb:7b:a8:32:31:
29:76:d2:0e:cc:f8:7a:75:ac:91:17:c4:78:43:ed:7e:c3:54:
36:de:02:bb:d5:c5:bb:c6:11:7e:77:af:67:16:bf:f2:01:64:
f7:2e:4e:37:02:84:6d:17:bc:c7:21:c6:78:96:05:0f:f5:03:
dc:11:ec:3d:eb:eb:45:ff:e8:d6:eb:82:c2:53:b3:81:7c:ce:
da:11:b2:95:47:41:7b:4a:56:2c:4d:f4:b2:8e:96:92:ad:3e:
7e:7e:b1:22:14:b0:16:58:2b:ce:b8:32:3f:e4:3c:b6:50:9d:
88:ed:09:86:f5:4d:15:be:16:18:52:84:7f:9f:89:51:0b:9a:
9d:e5:cb:56:3a:ef:0b:74:f3:cd:27:55:9d:96:1d:f7:60:dc:
a5:52:a9:76:91:ed:5b:45:af:ea:66:ac:5b:2a:84:31:02:cc:
82:49:cd:bd:dc:5f:af:99:4f:94:d0:8a:fb:aa:cf:c3:6a:ba:
36:7c:d6:71:fd:76:8e:6e:da:39:5d:d2:35:80:b1:c9:6f:9f:
d6:66:d5:e2:6d:4b:43:80:dd:89:a2:76:ed:13:95:ad:e3:69:
64:bd:d4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:03 2024 by rpki-client on console-ams.rpki-client.org