Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/WXaDJavq3X7zITSfx01wIeU18sQ.roa
File: WXaDJavq3X7zITSfx01wIeU18sQ.roa (raw, json)
Hash identifier: S7I2lHfGc0nzfMcbgjuJw6Rtau4STj+8TzFhWaSnlEk=
Subject key identifier: 59:76:83:25:AB:EA:DD:7E:F3:21:34:9F:C7:4D:70:21:E5:35:F2:C4
Certificate issuer: /CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Certificate serial: 018C3AB7D3308536BD05B29D9F5CB87D7F9A
Authority key identifier: 8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/WXaDJavq3X7zITSfx01wIeU18sQ.roa
Signing time: Tue 05 Dec 2023 16:02:54 +0000
ROA not before: Tue 05 Dec 2023 16:02:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50261
IP address blocks: 91.223.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3a:b7:d3:30:85:36:bd:05:b2:9d:9f:5c:b8:7d:7f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Validity
Not Before: Dec 5 16:02:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59768325abeadd7ef321349fc74d7021e535f2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cf:54:49:e6:10:5e:b2:bc:fb:f1:9a:9c:64:
6c:e2:33:87:80:70:5f:47:e3:20:6c:a5:22:f6:2d:
6e:79:f7:4e:22:b0:35:b5:a1:e6:f5:c4:65:a6:36:
c4:f7:57:ed:51:8d:a4:ea:ab:4f:63:45:9d:bd:38:
79:0a:d7:59:aa:da:eb:2b:89:5f:12:85:4f:5d:12:
50:f6:8a:94:69:28:70:0b:dc:dd:6e:4a:31:40:6e:
eb:11:cd:aa:c5:e7:65:98:d0:e7:ce:5c:d0:86:3e:
7f:4d:1b:9d:91:1d:a4:fd:c3:c7:eb:78:bc:f0:da:
59:08:80:f8:e9:2d:e4:f5:e2:9c:86:5a:60:5f:61:
db:f9:f2:92:cd:4b:f3:5b:3e:38:9d:79:30:28:ce:
8e:74:bc:3a:d8:da:1e:79:3b:d1:a1:dd:d3:64:1f:
a7:82:68:34:b7:9d:cd:d0:47:f3:a3:48:21:3b:d2:
45:b6:5e:15:9c:90:98:a6:3f:4e:12:62:c9:82:24:
b4:8d:0e:09:cd:45:cc:aa:c8:fb:7f:a0:6c:8e:dc:
3d:86:81:97:df:d1:42:87:83:7d:59:ad:06:77:e6:
39:be:22:45:cc:03:04:00:38:a8:48:6a:5a:b1:41:
9f:b7:fd:a3:af:47:22:aa:ef:a3:50:4e:6c:6b:00:
38:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:76:83:25:AB:EA:DD:7E:F3:21:34:9F:C7:4D:70:21:E5:35:F2:C4
X509v3 Authority Key Identifier:
keyid:8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/WXaDJavq3X7zITSfx01wIeU18sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.222.0/24
Signature Algorithm: sha256WithRSAEncryption
81:06:46:4c:47:99:84:5a:e9:80:40:ed:ed:92:bc:69:ca:64:
9c:21:2b:ce:94:11:e8:f3:9c:cf:52:19:26:0a:e8:26:54:32:
c9:34:40:0d:f2:d3:46:dd:52:20:b3:99:35:9f:17:71:d9:31:
35:b4:30:6a:03:d5:b5:e3:e3:e3:14:9d:58:4f:d3:27:a9:9c:
15:fb:7d:e4:c9:64:aa:17:51:db:11:88:01:58:1d:69:10:f5:
ea:79:5a:4f:6e:7c:f1:80:ac:d7:a4:8c:0b:e5:a0:44:0f:9c:
08:b0:02:95:6b:ed:5a:79:81:6d:c0:0b:6e:00:49:b8:67:5f:
f1:40:3d:c5:50:db:f2:3d:0e:3a:3c:32:0a:44:61:f1:53:39:
fa:03:a7:3d:a5:96:d1:57:30:93:9a:a3:81:0c:67:69:28:c3:
5c:ab:a1:67:9f:42:ca:64:7e:e4:d1:dc:e5:fa:37:b8:8c:73:
8a:63:36:aa:ec:9a:1c:1e:2b:62:cc:ed:d0:d5:58:18:ec:75:
ab:3a:74:90:8a:f5:ad:97:95:69:f2:cb:b9:cf:46:c9:3b:99:
52:19:cb:96:0b:0d:fa:17:6f:1c:20:c2:36:2e:b0:44:3f:44:
f9:de:84:ce:03:2b:d9:2b:ec:34:a8:5e:aa:67:ab:0a:47:8b:
91:a3:09:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:34 2024 by rpki-client on console-ams.rpki-client.org