Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/SliP2YJLFCV3nAHHkT_djDeeySI.roa
File: SliP2YJLFCV3nAHHkT_djDeeySI.roa (raw, json)
Hash identifier: KFu0Gw8qdi6L5v+AgTY/cH6NEwYQIhhl1XE293BXVSY=
Subject key identifier: 4A:58:8F:D9:82:4B:14:25:77:9C:01:C7:91:3F:DD:8C:37:9E:C9:22
Certificate issuer: /CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Certificate serial: 018572C391CBFA16B26CCE0F28F3E89CD696
Authority key identifier: EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/SliP2YJLFCV3nAHHkT_djDeeySI.roa
Signing time: Mon 02 Jan 2023 13:54:57 +0000
ROA not before: Mon 02 Jan 2023 13:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57063
IP address blocks: 213.5.72.0/24 maxlen: 24
91.236.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:91:cb:fa:16:b2:6c:ce:0f:28:f3:e8:9c:d6:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Validity
Not Before: Jan 2 13:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a588fd9824b1425779c01c7913fdd8c379ec922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:9c:ec:d4:fe:c0:76:65:0e:0c:71:6f:37:
4c:e0:af:a9:e2:d6:1b:06:fd:c6:46:39:c6:73:64:
94:db:bb:fc:3d:b7:e3:8e:4a:8d:f2:41:13:81:82:
3b:d1:5f:4e:e0:4c:1c:b3:67:51:8e:4a:f0:ed:cc:
66:d8:a2:95:d3:17:ea:46:d7:f0:49:cc:de:c6:6e:
da:7a:bc:57:6e:9e:4a:e1:bb:f1:50:e2:28:1a:fe:
5f:e9:cf:96:13:7a:c7:3d:03:4e:6e:37:b6:e9:b7:
b8:2a:39:2a:f2:99:7c:b1:31:c4:2e:cf:da:a7:29:
d6:5b:68:61:76:4c:2b:96:c6:2f:83:78:b9:75:bb:
55:0b:ab:49:f1:b9:b6:47:c4:02:d8:09:80:66:61:
40:56:39:df:c0:0a:bf:d5:53:8e:e1:75:a1:a3:44:
7f:64:58:41:bf:1d:a1:5f:d8:90:c1:63:8d:4d:0d:
18:86:82:83:ff:fe:33:b1:c4:58:13:ca:e4:67:93:
06:cb:73:c1:38:90:89:5f:47:a6:30:fd:9f:0e:9f:
8f:3f:b9:c6:0a:e2:95:96:f3:91:2b:d6:dd:97:f0:
0a:74:1b:51:83:0b:3e:88:a4:2f:c9:7b:ab:1a:c1:
b5:b3:0f:84:bb:4d:38:8a:f5:ac:fd:b6:2b:56:7d:
ac:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:58:8F:D9:82:4B:14:25:77:9C:01:C7:91:3F:DD:8C:37:9E:C9:22
X509v3 Authority Key Identifier:
keyid:EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/SliP2YJLFCV3nAHHkT_djDeeySI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.201.0/24
213.5.72.0/24
Signature Algorithm: sha256WithRSAEncryption
63:03:71:d5:91:2b:8f:e8:8c:44:ee:c9:11:13:fc:ed:35:c1:
03:7a:ba:e9:25:35:a1:3f:d1:e5:38:f5:76:02:8f:d7:d8:d2:
0d:33:20:06:f2:e1:46:cf:26:8c:2f:ca:4d:29:1f:7d:64:ee:
61:87:dc:35:a8:f0:2c:60:a4:31:21:b0:bc:33:56:13:85:93:
f4:09:5a:ca:e9:14:97:1f:a7:0f:96:5f:18:e1:67:c1:a2:ff:
84:24:27:a1:85:e3:c5:64:bb:37:59:07:d4:69:e9:ce:65:34:
3c:22:fb:79:1d:b3:98:7e:dd:73:93:45:b7:94:f7:b8:0b:31:
1c:37:22:63:a2:a4:80:78:0d:04:8e:f1:37:27:6f:d1:49:b5:
78:56:e6:8d:d1:8a:25:54:1c:2c:fa:8c:6e:23:14:16:d8:fb:
4e:df:64:47:68:b3:54:98:5f:e9:07:cd:4a:d1:91:11:fe:26:
d7:8a:09:b7:46:fe:22:e7:0c:82:c8:39:0c:5a:cd:84:01:54:
16:f2:75:90:90:0c:88:8a:14:7d:c7:03:f7:af:f7:66:f8:27:
73:ce:b7:f7:ca:ac:92:fb:e0:e8:87:04:91:18:bf:3d:b9:01:
e1:09:0e:96:d2:7b:2a:4d:70:3d:c3:be:06:71:79:be:70:89:
73:6e:19:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:08 2024 by rpki-client on console-ams.rpki-client.org