Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/eY5oXh3CYGaqLuh7wouMqqtS-4w.roa
File: eY5oXh3CYGaqLuh7wouMqqtS-4w.roa (raw, json)
Hash identifier: CvjY3GM8e3DqraJKRBsvf6fy9ZPlUmgfTL+K4qFgtDg=
Subject key identifier: 79:8E:68:5E:1D:C2:60:66:AA:2E:E8:7B:C2:8B:8C:AA:AB:52:FB:8C
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 01856D9D3465CE0C399B6162AC0AEDCAED69
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/eY5oXh3CYGaqLuh7wouMqqtS-4w.roa
Signing time: Sun 01 Jan 2023 13:54:57 +0000
ROA not before: Sun 01 Jan 2023 13:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 91.204.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:34:65:ce:0c:39:9b:61:62:ac:0a:ed:ca:ed:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Jan 1 13:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=798e685e1dc26066aa2ee87bc28b8caaab52fb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ad:85:df:ec:2e:3a:8e:fb:6c:65:00:69:36:
00:d6:6b:d2:de:e1:21:45:20:f5:2d:ae:bc:e5:d3:
33:ea:aa:0c:15:15:75:9a:0a:0c:99:2b:a4:35:23:
6d:b0:b8:a7:ee:fc:06:b9:e4:1a:fc:49:21:06:a2:
da:1a:f9:bb:1a:53:f6:f3:f1:69:c9:c4:9f:59:a0:
4c:3a:5c:72:74:aa:0b:e5:55:d4:3b:dd:74:14:1e:
2b:b7:01:3d:cf:e0:51:a5:97:ea:19:a0:45:d4:3b:
08:56:66:78:95:8f:3f:3d:84:fb:20:fc:4c:74:55:
92:19:2a:b0:57:0f:25:58:77:1f:46:bd:79:70:36:
3f:da:d5:85:eb:12:6f:ff:c0:aa:8e:7e:85:70:c1:
0b:f8:e8:ad:bb:01:8b:a4:c3:d7:28:70:1d:0e:68:
24:b1:fa:0b:44:55:c4:c2:39:94:a2:86:f1:26:20:
eb:34:14:55:cf:81:7f:75:1e:28:b7:f9:eb:f1:44:
a5:26:c5:17:db:44:c5:e9:b1:a7:bc:e3:3b:06:4d:
57:c6:db:18:1a:31:d1:2e:fd:da:95:9f:c8:9b:7b:
a0:4d:f1:76:51:42:c3:43:1f:74:54:72:53:4e:4c:
b5:d8:fa:30:7c:9a:a5:fd:80:00:f8:b2:34:df:39:
ec:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8E:68:5E:1D:C2:60:66:AA:2E:E8:7B:C2:8B:8C:AA:AB:52:FB:8C
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/eY5oXh3CYGaqLuh7wouMqqtS-4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.181.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:43:1f:95:ed:af:cf:38:0d:bb:14:d6:04:33:ba:4f:15:bb:
ba:a2:43:88:21:e3:81:6c:c8:e1:19:e3:8b:5e:91:1b:9c:b9:
86:95:88:c6:5c:6d:01:8f:82:2d:4a:0c:32:b2:d4:49:ee:e8:
ff:e1:4e:b0:a3:16:6a:1c:66:1a:32:e9:69:22:df:9e:9b:c2:
dc:13:6c:c1:e4:3f:b6:77:6c:52:1f:d4:79:b1:d6:42:53:5c:
1c:18:81:fa:33:40:ab:2c:43:ee:87:43:21:ef:15:3b:68:10:
5a:2c:10:a2:b1:63:13:fe:7c:5c:f9:67:e9:8e:5b:6d:1f:fd:
03:c9:2a:fe:34:4d:e9:fb:91:e8:12:dd:a7:6c:d6:14:87:fa:
0b:43:d5:90:30:97:fb:32:56:b5:3b:0c:3e:59:f7:a3:1f:5a:
58:ac:c5:5f:3a:cf:7e:6e:a9:d0:90:4e:60:92:26:e0:ee:a9:
55:8c:c6:9e:b9:54:ad:9f:2b:ab:25:70:01:cd:0b:70:c3:58:
4c:ab:ef:ca:ca:be:86:a3:b8:77:3c:7a:bd:47:e0:75:2d:18:
e3:23:77:65:fb:29:8c:ac:d7:25:61:86:b9:fe:71:7e:b2:b7:
56:e9:45:2d:8a:1c:f7:99:cc:10:d5:7c:78:7c:18:14:81:dc:
6a:30:aa:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:47 2023 by rpki-client on console-fra.rpki-client.org