Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/VrAwnatAIQ6zgOGjOM5vVTaKC1s.roa
File: VrAwnatAIQ6zgOGjOM5vVTaKC1s.roa (raw, json)
Hash identifier: qwnbjIElgtVjaTg01mTVsC3hP9MeSSmEc2mln8vBNzE=
Subject key identifier: 56:B0:30:9D:AB:40:21:0E:B3:80:E1:A3:38:CE:6F:55:36:8A:0B:5B
Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial: 0188BE9E99060AA5ED6AAAD6DACD37A9D7C5
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/VrAwnatAIQ6zgOGjOM5vVTaKC1s.roa
Signing time: Thu 15 Jun 2023 10:34:04 +0000
ROA not before: Thu 15 Jun 2023 10:34:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206854
IP address blocks: 91.228.22.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:9e:99:06:0a:a5:ed:6a:aa:d6:da:cd:37:a9:d7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Validity
Not Before: Jun 15 10:34:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56b0309dab40210eb380e1a338ce6f55368a0b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:13:59:c4:cb:d8:10:ad:41:aa:2f:bc:87:a7:
44:7e:4c:49:56:a4:cf:66:b9:76:6c:1d:1d:dc:01:
18:7b:cd:3c:5e:8c:17:d0:39:ea:b1:10:5c:05:ec:
8a:22:89:ac:b0:16:10:59:4b:c4:d5:cd:6b:18:64:
b7:06:e5:e3:b1:64:f3:57:e8:55:1e:17:6e:ad:40:
76:18:cb:f8:f4:ea:23:85:ef:bb:5d:d0:c0:bf:9c:
0e:e7:b8:53:f2:58:ff:c4:68:96:ba:30:4f:33:b3:
a1:57:94:82:ad:39:85:f2:39:f3:90:f4:ca:07:b3:
ba:a7:2c:c8:01:a4:5d:5c:28:32:0a:b7:ae:dd:1a:
bc:7a:56:3f:5a:94:51:f6:d7:e7:8e:70:f4:dc:71:
28:3e:67:31:8f:91:13:db:1f:b4:64:4c:80:9d:92:
41:4d:08:c7:b4:37:4f:00:0f:81:73:03:38:7b:bb:
fd:a9:41:56:81:01:9a:e6:98:bb:07:8b:bb:54:ed:
ca:69:6f:a6:bf:1a:80:c2:00:3c:7a:bf:fc:eb:e6:
0d:2e:85:5f:af:c6:8e:a5:a4:2c:43:d4:ba:ec:82:
3f:88:55:02:e6:bc:ba:cb:76:25:49:76:a6:8e:d2:
35:34:96:85:8a:12:88:1a:23:fa:79:68:34:b0:73:
82:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B0:30:9D:AB:40:21:0E:B3:80:E1:A3:38:CE:6F:55:36:8A:0B:5B
X509v3 Authority Key Identifier:
keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/VrAwnatAIQ6zgOGjOM5vVTaKC1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.22.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:53:0b:03:e9:78:e5:67:20:c6:58:a6:a8:46:e8:f2:56:5b:
27:6a:0a:b7:92:8a:3f:bd:70:a5:6a:bd:48:50:c3:be:1f:09:
e6:c7:02:3f:47:10:c9:87:d1:05:07:4f:f6:ae:93:31:e0:b3:
ce:6c:a2:70:7f:bd:60:2c:54:48:a7:4d:f7:7e:91:e5:fb:d4:
97:9c:1d:be:81:c0:1e:e2:35:99:89:9a:f5:84:5b:0b:0b:cd:
c4:aa:d1:45:03:b0:ab:b8:0a:8a:4e:94:f3:59:78:6f:7a:8c:
2a:f2:9c:f0:46:0d:2c:50:19:83:7b:db:e6:a9:6f:6c:4e:d9:
5a:d2:cd:69:83:47:e6:58:c1:76:09:8c:fc:ab:60:8e:dd:75:
75:80:ea:a3:a9:fe:65:7d:c7:a9:c8:5c:f3:12:d1:3b:10:59:
c3:65:c2:74:26:d0:87:18:b9:2e:6c:bb:75:e1:b0:89:17:b1:
94:7c:84:87:80:51:8b:52:fe:6a:e3:31:61:f9:02:a4:36:c1:
91:6d:12:32:c8:1f:58:d4:bb:7d:90:0d:df:b4:83:3e:8b:d1:
0a:f6:86:46:69:f7:ed:99:ce:8e:a1:57:89:45:37:dd:44:ac:
ef:4c:3c:b2:32:33:c5:86:d7:4f:b2:a4:b5:93:0d:e5:3b:85:
70:a6:22:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-fra.rpki-client.org