Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/UO_ywaFfM3SPqabK5iiI2Fx_UXw.roa
File: UO_ywaFfM3SPqabK5iiI2Fx_UXw.roa (raw, json)
Hash identifier: LheUDk9NxnlLjaEPQavO6tSMrF8X6Z7nSunVWmuZDd0=
Subject key identifier: 50:EF:F2:C1:A1:5F:33:74:8F:A9:A6:CA:E6:28:88:D8:5C:7F:51:7C
Certificate issuer: /CN=cd911702f493d6ede1b6e872bcacdcb854282bad
Certificate serial: 01856FCBAF1722C10B7020BBE133F444ED7B
Authority key identifier: CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/UO_ywaFfM3SPqabK5iiI2Fx_UXw.roa
Signing time: Mon 02 Jan 2023 00:04:57 +0000
ROA not before: Mon 02 Jan 2023 00:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58034
IP address blocks: 91.237.130.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:af:17:22:c1:0b:70:20:bb:e1:33:f4:44:ed:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd911702f493d6ede1b6e872bcacdcb854282bad
Validity
Not Before: Jan 2 00:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50eff2c1a15f33748fa9a6cae62888d85c7f517c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:29:b0:e8:e8:f6:50:9c:ae:72:0c:67:fe:5b:
df:7a:a1:05:d5:a2:c8:a2:ec:dd:a6:f7:31:9c:ed:
24:fc:e5:57:ef:72:f8:02:53:a1:81:50:7b:e9:29:
3b:71:8a:03:8c:81:6c:42:10:88:0b:64:be:99:93:
8a:ca:00:84:39:10:e7:50:9c:c4:3a:f3:d6:a9:7d:
80:2a:11:21:00:f1:8c:3b:8c:26:87:fa:32:44:eb:
4b:78:f3:03:b4:f6:4c:b6:87:98:6b:b0:bf:7b:69:
8d:0e:c9:e8:59:32:82:6c:04:c7:e3:95:cf:c3:14:
4d:ea:a8:d7:4c:e5:3d:c8:0b:32:bb:e6:7d:1a:76:
b7:1d:29:e6:0b:4a:6e:1e:0b:03:37:fa:0e:2f:df:
02:c2:2c:67:e9:cc:ee:55:23:5f:c5:d5:f3:b1:a5:
47:70:c2:99:a0:c7:f8:e0:46:98:d5:4c:91:b6:2e:
28:5e:26:ca:59:e2:23:a4:0c:9d:20:9f:78:aa:a8:
fb:45:71:0c:54:2a:e3:ae:90:f8:79:77:96:b1:37:
68:84:84:66:47:4d:5e:fa:8f:5b:ec:f1:8d:6c:64:
8d:a2:ff:54:46:9f:4a:57:6d:71:34:1e:0c:84:5b:
7a:e0:26:21:f3:83:86:85:5a:7f:ad:86:90:ca:46:
8e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EF:F2:C1:A1:5F:33:74:8F:A9:A6:CA:E6:28:88:D8:5C:7F:51:7C
X509v3 Authority Key Identifier:
keyid:CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/UO_ywaFfM3SPqabK5iiI2Fx_UXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.130.0/23
Signature Algorithm: sha256WithRSAEncryption
73:23:4f:10:4c:de:d3:84:38:75:7c:49:00:72:dc:42:bb:69:
a6:22:d5:83:b8:b7:5d:d2:29:c8:1a:61:c5:bc:2d:5b:d6:73:
fd:ed:5c:1e:51:3d:fc:2a:8e:f9:7c:9b:16:79:2a:c1:78:9f:
45:67:74:4c:c8:81:f2:d5:1d:03:ed:c6:a1:84:34:59:f1:9f:
8a:64:97:c8:47:de:29:f9:75:36:0a:29:08:44:67:c5:8f:cf:
ce:09:f2:b9:ce:41:a3:b4:c6:d3:9e:b8:d4:fb:3b:35:c6:ab:
a0:bc:75:18:fd:f2:64:20:b5:03:d6:63:11:a8:ef:d1:87:b8:
1b:85:e0:be:de:8e:81:02:19:5f:2e:2f:04:a4:84:6c:aa:2d:
3d:9d:c0:a9:fe:58:38:f2:a8:64:57:cf:e3:25:da:a8:3c:97:
9f:8c:84:f4:36:40:bd:22:8a:bc:c3:1c:b1:86:4d:29:60:d4:
3d:39:18:72:e8:e9:74:17:07:22:b5:8e:8b:24:f6:3a:f7:53:
b8:fb:f6:eb:88:db:e7:be:b2:11:1b:a4:db:09:69:6d:87:74:
50:c4:3f:85:fb:f4:da:c1:5f:16:aa:ae:fa:1a:ce:41:3b:d3:
5f:bd:9d:db:95:a1:47:c5:db:88:b3:4b:fd:92:4d:c3:f9:08:
e1:15:5a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:56 2024 by rpki-client on console-ams.rpki-client.org