Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/4AuYfYXIGjiXLE3nLlNnbATAVz4.roa
File: 4AuYfYXIGjiXLE3nLlNnbATAVz4.roa (raw, json)
Hash identifier: KQsTZd6ikANbiInwh6QWecwHGYPxPBXCipVVQIYkdbY=
Subject key identifier: E0:0B:98:7D:85:C8:1A:38:97:2C:4D:E7:2E:53:67:6C:04:C0:57:3E
Certificate issuer: /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial: 018A69570F88607727037EF83C14092433AA
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/4AuYfYXIGjiXLE3nLlNnbATAVz4.roa
Signing time: Wed 06 Sep 2023 07:13:47 +0000
ROA not before: Wed 06 Sep 2023 07:13:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210579
IP address blocks: 91.214.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:69:57:0f:88:60:77:27:03:7e:f8:3c:14:09:24:33:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Validity
Not Before: Sep 6 07:13:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e00b987d85c81a38972c4de72e53676c04c0573e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:41:9f:75:4d:d3:3d:37:0b:fc:5b:19:f4:
fb:3a:11:23:57:a3:3e:2d:99:71:96:ca:ea:63:a6:
a8:97:03:dd:b2:ab:70:fa:f2:a1:d7:77:89:0e:44:
8c:b5:6f:74:06:99:d8:29:b6:21:12:f1:e1:a1:7f:
6c:4d:30:24:aa:be:9a:45:e3:81:f0:d8:c4:c4:3e:
03:e9:42:7f:65:d0:1e:46:b2:4b:28:f3:7d:46:aa:
df:06:b8:d7:9a:e9:75:18:aa:7a:ab:44:c9:a1:15:
5a:b7:e5:cd:b2:f0:e4:be:02:b6:53:68:03:b5:e3:
ed:a3:fe:26:cf:20:ea:e0:8c:dd:0d:97:e8:96:e4:
7b:12:57:f9:6f:53:4a:71:01:0b:e8:26:19:9f:e2:
6f:00:a3:89:fa:b4:12:26:3b:00:dd:2b:b1:a3:e9:
8d:0a:7d:80:69:ce:5e:2f:b6:3f:4c:88:60:ea:d6:
fe:3b:ce:46:3f:46:1a:da:a4:ae:88:06:63:30:be:
7c:64:65:ae:5c:fb:d5:47:5e:b1:97:cc:10:a2:5d:
d5:83:b0:7c:c2:a7:9d:d2:37:41:24:c2:b0:7c:be:
69:e3:fe:62:98:82:53:d5:5d:39:69:7a:05:ec:f5:
7a:09:32:5b:25:27:10:77:f3:c6:8b:43:eb:cf:c3:
e5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0B:98:7D:85:C8:1A:38:97:2C:4D:E7:2E:53:67:6C:04:C0:57:3E
X509v3 Authority Key Identifier:
keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/4AuYfYXIGjiXLE3nLlNnbATAVz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.112.0/24
Signature Algorithm: sha256WithRSAEncryption
13:3f:0f:72:1e:a1:0c:86:97:49:10:19:6d:30:f9:b7:5d:a0:
f2:c6:94:a9:0b:91:62:1c:d7:3e:6d:8e:0e:11:55:32:47:01:
2a:2e:f4:fb:70:47:54:20:f7:39:fb:9d:c7:1b:b5:69:86:06:
4a:2d:c8:9d:3c:e0:a4:a9:72:b1:6e:0c:37:6f:13:18:fd:a5:
19:2b:1b:56:59:82:83:b3:28:e5:82:bd:d3:40:6f:4b:b3:e3:
af:18:6e:28:64:2f:8a:3b:39:d2:74:58:3f:35:27:ab:a9:d9:
c5:88:a4:62:24:a9:23:b8:12:a5:8a:3e:92:d7:fe:c2:54:d8:
5b:23:e7:96:e9:b2:71:69:e8:48:b6:17:a9:74:fc:20:7f:06:
d0:33:e8:d6:51:62:d8:f7:0d:c2:53:85:7e:1c:0f:37:02:d9:
68:6d:6a:39:72:1f:15:9d:b2:25:61:32:bb:07:fe:38:7f:8c:
f6:f9:18:30:89:5e:1b:bd:6a:b0:ec:ef:86:e7:c0:e5:0e:45:
ee:50:ed:7b:53:5a:57:e7:15:fa:0e:c5:65:ce:16:64:2d:5a:
bb:ec:b0:43:a0:e6:2f:a7:6f:75:4d:fe:b4:e5:c5:d1:9f:7d:
23:57:80:15:e5:83:9f:e0:c4:2a:73:fc:c0:38:7d:fc:e6:df:
61:0d:d4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:22 2024 by rpki-client on console-fra.rpki-client.org