Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/rVKNeI9ABC-Tkg4VeIfl8S1f2Qo.roa
File: rVKNeI9ABC-Tkg4VeIfl8S1f2Qo.roa (raw, json)
Hash identifier: 11pkf6/qRI0wiqrgoASFp9C2kxRMawFCoxzl8H6m/gs=
Subject key identifier: AD:52:8D:78:8F:40:04:2F:93:92:0E:15:78:87:E5:F1:2D:5F:D9:0A
Certificate issuer: /CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Certificate serial: 018573BAADC0872D32FE77FF9E1472D526A8
Authority key identifier: 5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/rVKNeI9ABC-Tkg4VeIfl8S1f2Qo.roa
Signing time: Mon 02 Jan 2023 18:24:51 +0000
ROA not before: Mon 02 Jan 2023 18:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43522
IP address blocks: 91.198.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:ba:ad:c0:87:2d:32:fe:77:ff:9e:14:72:d5:26:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Validity
Not Before: Jan 2 18:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad528d788f40042f93920e157887e5f12d5fd90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9b:d1:a7:83:ac:19:88:53:47:04:aa:b0:fe:
d5:ea:c1:14:bc:55:a1:13:0b:94:9a:03:f9:da:0f:
aa:ac:4a:37:5b:cf:c6:6e:c0:18:98:8b:0a:81:bf:
cf:a9:05:b4:30:bb:b0:d1:4c:2b:94:ee:1f:1b:14:
d7:6c:43:5c:27:db:b4:18:31:c0:4a:e2:26:ad:93:
31:3f:21:cb:26:d0:21:09:90:bd:ed:ce:92:05:85:
0f:47:65:60:8b:7f:d9:c4:1a:9b:a1:aa:4f:8b:9d:
f9:e7:f4:2a:01:33:9e:62:aa:ba:99:90:2c:fb:6e:
9e:e5:8c:c3:bb:a4:09:10:e8:be:c6:5d:66:43:b0:
d7:f5:56:4c:16:88:58:c1:95:e8:06:d6:ac:2c:e6:
9d:e5:e4:72:e7:07:d3:b9:0c:f0:4d:14:4d:ad:8c:
f8:58:1b:f9:14:58:d4:0c:31:79:44:00:55:2d:29:
8b:51:8c:ed:b0:0d:1d:84:91:50:56:94:d3:21:c9:
5f:91:6f:25:0d:85:e1:85:a6:8e:0d:ad:88:54:5f:
ff:3b:4c:5b:ac:0f:d2:38:04:94:96:6c:f3:d4:c5:
2b:27:15:2d:34:a3:25:14:8b:af:c0:3b:fc:d0:d3:
30:c3:38:d3:49:0d:d7:77:71:70:de:88:0f:56:bb:
d6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:52:8D:78:8F:40:04:2F:93:92:0E:15:78:87:E5:F1:2D:5F:D9:0A
X509v3 Authority Key Identifier:
keyid:5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/rVKNeI9ABC-Tkg4VeIfl8S1f2Qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.45.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:a4:60:8b:e7:cb:40:22:9f:f0:04:ab:89:af:b6:6e:74:87:
46:6a:97:7a:60:91:92:19:0d:fa:ac:99:f2:e8:fc:fa:ff:1d:
50:3b:35:4d:19:01:48:84:e5:e5:c5:c6:56:57:61:bd:ec:d1:
ea:fe:ea:70:51:f7:9f:2f:f8:d6:6a:19:c8:10:20:11:9e:d5:
1d:91:80:4e:da:d9:00:0c:2d:68:1d:67:26:d3:60:e1:0f:08:
8d:51:d8:fb:95:ca:72:8c:c2:4d:90:27:2d:b5:f0:d8:9a:d6:
73:87:6d:28:cf:3a:5b:5e:fa:9d:ab:f7:a7:76:36:03:94:91:
34:86:ce:5e:0e:ca:b6:15:fa:0b:ab:29:21:2a:9d:c5:8d:08:
1e:ea:74:91:0c:dc:cd:5a:23:cd:2a:39:6b:a8:ab:71:cb:18:
a6:be:c5:91:5c:7c:2d:36:7c:8f:f7:18:94:8c:f3:c2:ed:1a:
d6:fb:f2:bb:44:ad:7d:42:5f:14:3b:c3:be:4d:26:8d:af:5a:
6c:57:22:e9:4e:ff:05:79:5f:22:27:40:c1:55:93:45:08:e8:
b1:ae:03:17:f8:48:7d:5e:04:d8:bd:ee:74:7a:5a:3d:e4:0b:
3b:49:40:00:cc:fe:cc:4d:2a:26:f6:93:94:49:3e:7f:05:4f:
02:78:ab:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:16 2024 by rpki-client on console-fra.rpki-client.org