Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/vj5Px2XtjEm7LYE-XpHW2fEA6IA.roa
File: vj5Px2XtjEm7LYE-XpHW2fEA6IA.roa (raw, json)
Hash identifier: AjVATfBu6ZXGLL/RqlaH0ZEMHRJxFGysIz4ANrIeazU=
Subject key identifier: BE:3E:4F:C7:65:ED:8C:49:BB:2D:81:3E:5E:91:D6:D9:F1:00:E8:80
Certificate issuer: /CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564
Certificate serial: 01856C25C745D2ADB0429EE89D5EAE2A2787
Authority key identifier: 43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/vj5Px2XtjEm7LYE-XpHW2fEA6IA.roa
Signing time: Sun 01 Jan 2023 07:04:53 +0000
ROA not before: Sun 01 Jan 2023 07:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48642
IP address blocks: 91.235.188.0/22 maxlen: 22
109.197.224.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:c7:45:d2:ad:b0:42:9e:e8:9d:5e:ae:2a:27:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564
Validity
Not Before: Jan 1 07:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be3e4fc765ed8c49bb2d813e5e91d6d9f100e880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:60:ab:48:e8:76:c5:f0:b5:3b:04:b2:00:ce:
28:dd:d3:97:87:39:b1:d0:55:7a:39:70:dd:e3:46:
e3:28:c7:4c:a3:d9:14:ea:8a:96:93:dc:51:36:ab:
d5:2c:aa:b1:03:16:58:c4:90:27:38:3d:d4:cb:d0:
c9:4e:99:e0:cd:34:cd:0a:de:f4:d1:00:58:2c:73:
81:22:00:ad:25:a5:3a:f4:ac:20:c7:90:4e:9f:89:
89:73:72:f3:1f:35:7d:ce:02:89:5a:23:b5:b3:9e:
0d:14:d7:31:64:d4:79:58:9c:4f:1c:36:4b:0f:29:
fa:e2:e7:37:2f:13:53:7f:f8:4b:30:c8:67:29:37:
d5:86:cc:39:0e:9d:1a:9a:a9:d2:5e:9c:26:64:22:
ac:09:5d:09:c6:49:d1:f0:cb:77:48:62:c6:47:bf:
68:8e:c2:bc:95:16:0a:62:e2:09:ac:07:fd:bb:00:
56:0f:1d:41:c0:00:b5:53:73:cf:d0:20:bb:57:52:
08:0b:a3:98:04:47:84:9b:2d:40:1e:b8:4a:dc:91:
84:dc:0c:e8:8e:de:b3:a3:f0:74:bd:e7:c7:98:80:
f1:85:c8:d1:3a:54:e4:d7:3c:1a:d1:fb:e0:8f:1a:
a5:c2:b8:65:cd:f9:b9:8e:8e:2d:13:0b:79:8b:38:
32:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3E:4F:C7:65:ED:8C:49:BB:2D:81:3E:5E:91:D6:D9:F1:00:E8:80
X509v3 Authority Key Identifier:
keyid:43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/vj5Px2XtjEm7LYE-XpHW2fEA6IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.188.0/22
109.197.224.0/21
Signature Algorithm: sha256WithRSAEncryption
46:9a:c6:bf:69:b4:69:fb:75:8f:cb:91:55:da:ff:98:aa:1e:
a7:fe:6e:b0:3c:44:b4:3a:8a:f1:1a:f6:8e:8c:58:ed:e5:c8:
b4:d5:80:e4:d5:da:d7:dc:2c:48:6c:5f:61:b9:fe:fb:cb:7e:
1b:31:36:6b:26:1d:60:9b:48:25:80:72:b0:75:5f:d8:ff:ba:
a9:88:e8:96:f4:62:00:89:67:ca:ad:83:e1:80:b0:64:78:b9:
3d:9d:38:02:b5:4f:58:c6:39:f5:25:7f:c4:a1:8b:81:9d:22:
bf:e1:33:f5:92:5a:fa:22:31:3e:0c:3d:8e:15:22:af:45:f0:
d7:41:3c:1c:13:f1:d5:da:41:4e:ac:9f:49:f1:a5:89:fa:f9:
13:5f:cf:7b:55:b5:8f:be:f7:a8:f9:a2:a8:1b:3f:9a:85:3f:
b1:79:69:25:59:f7:ec:8b:aa:2d:e7:57:e4:af:80:69:97:df:
3c:dc:f6:d9:fb:91:3a:0b:60:84:df:39:13:68:f1:96:03:ce:
39:09:65:2d:65:52:51:71:51:a0:25:54:eb:5c:8e:bb:7c:2c:
55:09:9a:58:97:d1:a7:18:52:d2:6d:17:5f:25:f7:88:71:ac:
dd:2d:c5:ca:d9:d6:40:3f:44:df:36:71:29:d3:7b:38:2e:cd:
9d:b4:07:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:23 2024 by rpki-client on console-ams.rpki-client.org