Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/et2UelKsv2Y1BoCgsTPTODgHUdY.roa
File: et2UelKsv2Y1BoCgsTPTODgHUdY.roa (raw, json)
Hash identifier: 8pCvRrhkkBrGI1MLvJQGLoBGOgNXxWGE49ytHuc2AqE=
Subject key identifier: 7A:DD:94:7A:52:AC:BF:66:35:06:80:A0:B1:33:D3:38:38:07:51:D6
Certificate issuer: /CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Certificate serial: 018572CC93770A9528F438C70F9A494C3FFB
Authority key identifier: 4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/et2UelKsv2Y1BoCgsTPTODgHUdY.roa
Signing time: Mon 02 Jan 2023 14:04:47 +0000
ROA not before: Mon 02 Jan 2023 14:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 91.220.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:93:77:0a:95:28:f4:38:c7:0f:9a:49:4c:3f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Validity
Not Before: Jan 2 14:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7add947a52acbf66350680a0b133d338380751d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d8:14:89:cd:5f:7f:d3:c1:6f:60:2c:da:e4:
e2:d9:3d:3f:dc:c0:ed:f9:15:3c:a0:69:23:51:3e:
85:a9:8c:d5:fc:a2:48:14:f4:77:cc:c7:2e:2d:f3:
cf:42:5c:61:50:36:e1:e8:e1:b8:3c:4e:c0:e2:d8:
75:dd:4a:6b:92:11:f0:4f:76:03:c1:cb:26:27:88:
80:d5:58:0a:c2:21:82:6f:04:c1:0a:e6:26:c9:39:
15:98:a7:87:88:d9:33:94:73:d8:97:43:f0:32:89:
98:41:ea:fb:0d:39:15:98:9c:9a:d7:33:76:ef:dc:
c6:4c:85:0c:1e:dc:bf:17:91:dc:9d:86:3f:25:3c:
21:89:2d:91:ed:39:e3:99:c4:8b:e7:15:f2:03:cf:
4c:41:3c:fe:5c:ba:0e:e5:56:1a:ca:6c:34:c3:cb:
7e:01:06:0b:02:2a:0c:8e:c9:a8:cf:d6:e9:3f:8d:
7c:89:b4:f4:c6:5c:1d:46:25:6c:4c:ab:93:20:98:
39:6f:0d:ef:5e:89:27:d1:6e:f4:41:8d:71:bd:06:
17:73:01:b3:ae:5e:2b:4c:54:ea:4e:ab:04:b4:40:
c2:0a:4d:53:52:b2:8d:4f:5b:20:db:48:e6:b6:8b:
db:5b:94:eb:84:78:47:fc:79:cf:4c:71:7f:8d:db:
88:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DD:94:7A:52:AC:BF:66:35:06:80:A0:B1:33:D3:38:38:07:51:D6
X509v3 Authority Key Identifier:
keyid:4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/et2UelKsv2Y1BoCgsTPTODgHUdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.50.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ee:41:65:18:30:5c:61:a0:9c:20:68:2c:7a:9a:9b:6f:69:
45:e4:21:1a:9c:1f:51:8e:ab:f7:e6:a2:fe:bb:97:ee:dd:56:
12:3a:7b:93:f3:e9:ed:0f:3f:ee:57:a3:de:74:3e:7a:51:fc:
e8:b9:95:aa:fb:05:4f:42:f1:b9:17:e3:8a:c1:78:27:75:e3:
cd:d7:a6:64:dd:52:54:e5:b1:83:e8:1b:39:dd:ea:07:8b:ad:
0e:3a:b0:3c:b9:69:15:d9:01:b1:4e:c6:39:8e:c0:19:a1:0b:
4a:c4:d2:08:12:b0:ae:67:2a:45:f2:0b:2b:35:e2:d2:2a:f3:
9d:9c:05:32:e9:de:74:94:8f:98:5c:5f:5d:47:65:1e:57:b6:
59:98:fb:8b:cb:21:ed:7f:1b:34:76:48:1a:a9:c7:8c:2b:b4:
d9:e9:db:c1:6f:f0:e2:a0:54:ab:4f:fd:f0:e7:5f:7b:58:80:
b3:12:13:28:4d:ad:3b:df:e1:56:59:e4:be:c6:a1:71:ec:d4:
93:b9:5a:20:4e:87:32:d3:d9:48:90:0c:38:f0:9d:bd:f5:83:
15:8e:a1:50:58:e6:58:b5:09:60:99:cf:4c:32:5b:28:53:d9:
76:fb:d7:d1:b0:db:82:ec:e8:72:1a:09:b0:68:70:51:51:bc:
0c:ae:0c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:57 2024 by rpki-client on console-fra.rpki-client.org