Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/M598rs4wisVbVFBaTA0j7aZpQqU.roa
File: M598rs4wisVbVFBaTA0j7aZpQqU.roa (raw, json)
Hash identifier: pjwEXEFdPKrrGZNbwNU1H3PC7PSfscJZJ3wGPNshTpw=
Subject key identifier: 33:9F:7C:AE:CE:30:8A:C5:5B:54:50:5A:4C:0D:23:ED:A6:69:42:A5
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01887B6CDD30155B199E180D628F6F3ED555
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/M598rs4wisVbVFBaTA0j7aZpQqU.roa
Signing time: Fri 02 Jun 2023 09:25:12 +0000
ROA not before: Fri 02 Jun 2023 09:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49121
IP address blocks: 91.191.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7b:6c:dd:30:15:5b:19:9e:18:0d:62:8f:6f:3e:d5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jun 2 09:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=339f7caece308ac55b54505a4c0d23eda66942a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7e:35:c6:1c:1f:72:c1:ca:17:3b:f0:a6:3a:
65:68:0d:04:70:37:5f:b6:b0:6d:39:ec:bc:ef:73:
c1:bc:59:3d:12:bf:3e:bb:91:7e:2f:ae:68:e1:ca:
a1:d0:55:24:f8:71:66:c5:62:24:9b:39:ed:4f:b9:
ad:32:74:58:9a:77:fe:34:d5:91:5a:9d:84:60:b7:
d8:df:fe:e3:c5:51:66:5f:a0:7d:6a:a4:9c:89:91:
f6:d8:07:78:c8:b8:cf:11:a4:3a:0e:18:dd:77:2b:
bf:38:aa:31:8b:cd:f7:fb:4f:28:3d:69:27:7c:63:
be:90:8b:fe:b5:f4:43:4c:ae:06:7a:66:ff:08:e8:
61:89:e0:35:ca:63:ca:2d:e2:27:09:20:23:26:d6:
7c:bd:2e:36:14:0f:75:29:b1:d5:26:db:66:f5:8c:
46:b3:08:f9:c0:61:61:d2:0e:cb:c3:2f:54:1f:ca:
0a:58:a4:43:05:96:59:11:d6:23:fb:c2:94:12:a6:
27:34:80:a1:ce:5d:af:db:f1:2f:ac:38:fa:7e:69:
77:e8:32:98:3e:ad:dc:37:12:6e:69:8e:81:ff:af:
ad:d4:d8:ed:44:66:55:78:49:61:f3:5d:fb:0f:66:
e3:c2:fd:08:37:db:08:b7:3d:9a:d6:58:e5:b0:e5:
74:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9F:7C:AE:CE:30:8A:C5:5B:54:50:5A:4C:0D:23:ED:A6:69:42:A5
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/M598rs4wisVbVFBaTA0j7aZpQqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.191.185.0/24
Signature Algorithm: sha256WithRSAEncryption
45:d8:11:98:54:04:54:17:d7:20:8b:26:d9:2e:56:02:52:7a:
f1:8a:92:3b:90:a3:36:13:b8:dc:27:f9:55:d7:6e:79:69:01:
7d:f7:23:dd:6c:dc:a5:e2:1d:55:64:45:d8:11:8f:a1:5d:c7:
29:67:9c:e7:43:16:90:44:bc:94:b6:09:14:32:e7:e7:b6:a9:
d7:18:94:6b:bb:a3:63:aa:20:c2:42:7d:63:e2:0f:2c:bb:63:
f1:ce:6c:39:f7:97:ee:bd:67:4c:04:44:b1:6a:e3:af:95:03:
27:3a:af:ca:a8:e9:e2:cb:a3:10:d9:93:4c:9b:a1:b9:46:60:
c2:28:aa:3f:c6:b2:92:49:fd:df:6e:b8:da:35:55:e9:25:35:
49:75:90:42:5a:f7:5a:d6:4c:e5:66:48:e5:66:eb:28:74:0b:
d3:b1:df:2b:fa:18:04:5d:a7:d9:e3:66:21:fa:e1:d7:ef:14:
59:24:90:9b:a8:0f:60:36:dc:4d:3a:c8:23:d6:5e:85:dc:8b:
43:98:cb:7d:f1:ae:5e:b8:da:16:90:c3:90:7d:e9:7f:32:2a:
65:c0:44:dc:88:4e:2d:0e:92:84:a7:28:f7:e5:b9:0f:02:4b:
16:0b:e1:87:9c:1e:ed:70:ed:67:54:1c:35:cc:57:28:05:60:
a5:1e:79:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:04 2024 by rpki-client on console-ams.rpki-client.org