Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/4s0K7SBaTgs_VkveT14rC9KNdM8.roa
File: 4s0K7SBaTgs_VkveT14rC9KNdM8.roa (raw, json)
Hash identifier: 8mnMYYuQqNQOcd5K5/oQmqiO0IrElDxQQQYKDZjMKZ0=
Subject key identifier: E2:CD:0A:ED:20:5A:4E:0B:3F:56:4B:DE:4F:5E:2B:0B:D2:8D:74:CF
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 018650BA0146D4A14F9B5ED5B4FC57EA572E
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/4s0K7SBaTgs_VkveT14rC9KNdM8.roa
Signing time: Tue 14 Feb 2023 16:20:12 +0000
ROA not before: Tue 14 Feb 2023 16:20:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 91.193.254.0/24 maxlen: 24
91.193.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Mar 2023 16:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:50:ba:01:46:d4:a1:4f:9b:5e:d5:b4:fc:57:ea:57:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Feb 14 16:20:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2cd0aed205a4e0b3f564bde4f5e2b0bd28d74cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ce:d2:b8:22:c6:95:a9:ca:e9:9a:0a:cc:2d:
c2:d7:9c:2f:41:ec:ad:5e:05:97:41:3a:5d:10:05:
9d:55:0c:d9:4f:a7:10:90:bc:c7:02:ea:07:99:49:
4c:f0:32:36:68:b1:c9:65:7c:fb:5a:cf:46:84:d7:
72:86:00:25:63:37:06:48:2d:d5:40:d9:13:45:59:
57:a3:b1:0c:aa:f6:d6:ab:e8:8c:3d:aa:e0:2c:bf:
dc:9f:9c:f3:c1:a4:13:5d:e1:30:a1:e6:d7:59:08:
86:a0:91:08:1d:7b:ef:ba:0b:4b:94:53:ff:ed:cf:
d0:1e:65:6f:77:d2:92:83:af:6b:74:c0:8b:4d:f3:
67:37:59:73:a4:42:ff:70:f3:d4:69:07:fa:77:78:
b3:15:b0:28:4b:12:ce:11:78:78:a6:6a:16:f2:0d:
5e:3a:9f:4a:ac:03:ea:37:06:03:e8:7a:11:e7:09:
b7:a3:f2:d2:d3:8d:89:af:6a:1a:22:fa:e9:b2:f7:
16:df:c6:90:82:8d:69:f4:a4:74:96:54:ed:7b:45:
df:9e:cb:e2:dd:ae:f4:ea:66:52:cc:94:b3:02:03:
23:b3:6d:9f:c2:54:23:69:ae:46:39:21:f3:48:52:
05:2e:0d:87:64:10:5c:a6:1f:1c:8e:6c:35:10:de:
41:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CD:0A:ED:20:5A:4E:0B:3F:56:4B:DE:4F:5E:2B:0B:D2:8D:74:CF
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/4s0K7SBaTgs_VkveT14rC9KNdM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.254.0/23
Signature Algorithm: sha256WithRSAEncryption
67:3a:96:d3:3a:12:05:af:1b:29:e9:cf:44:d7:5e:37:b8:be:
6b:13:34:5b:d4:24:00:56:db:86:55:59:a6:4c:61:c2:64:bb:
b0:37:73:3d:3c:ad:25:06:1d:71:33:e1:d7:5d:2c:fd:93:2e:
9a:9a:d2:3f:38:b6:0c:29:9b:f4:20:c9:24:c5:3a:08:6b:8d:
21:91:ab:bc:e2:28:50:71:19:dd:cb:9e:c3:60:40:61:98:d1:
3f:a9:28:99:41:3c:d3:e8:81:fc:f7:bd:7b:25:2b:6e:8b:50:
f1:6c:12:fa:e3:4e:28:3a:04:d5:08:cd:6c:f4:a2:ac:97:54:
00:b0:83:ff:bc:80:44:3e:16:9c:2b:56:33:4c:56:34:1e:ad:
ed:92:e0:2b:96:09:f7:85:c2:21:d3:ab:3b:f6:8d:c5:62:f2:
c1:67:fa:08:bb:1d:9f:71:43:ad:db:ba:4f:68:72:7b:ee:7e:
b7:93:89:dc:7d:db:fe:76:9d:18:24:07:9d:9d:93:af:d4:1a:
df:f6:1d:da:23:b9:39:1d:12:8a:14:f3:cf:6a:89:ae:1c:02:
70:ad:54:2d:25:16:af:05:58:86:3d:ef:1a:e5:32:35:e2:1b:
ef:03:1a:2d:75:f3:f1:ae:3c:0b:d1:28:48:61:8a:84:61:19:
b7:9b:96:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org