Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/E7ke86hKzQHKMekDv2hEsPxdvO0.roa
File: E7ke86hKzQHKMekDv2hEsPxdvO0.roa (raw, json)
Hash identifier: /Np03LJnKDU5iUN4kNV/a9GZ6BjeVzje8qAhWZSA6Tw=
Subject key identifier: 13:B9:1E:F3:A8:4A:CD:01:CA:31:E9:03:BF:68:44:B0:FC:5D:BC:ED
Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Certificate serial: 01856F2FE2962C617B411FBB7964435DC594
Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/E7ke86hKzQHKMekDv2hEsPxdvO0.roa
Signing time: Sun 01 Jan 2023 21:14:47 +0000
ROA not before: Sun 01 Jan 2023 21:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35297
IP address blocks: 91.184.224.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:e2:96:2c:61:7b:41:1f:bb:79:64:43:5d:c5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Validity
Not Before: Jan 1 21:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13b91ef3a84acd01ca31e903bf6844b0fc5dbced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:1c:b8:b1:ad:9b:9f:eb:0d:01:2c:c1:fa:
3f:bc:5f:37:78:a5:75:89:84:96:88:3f:50:c0:29:
e5:73:0b:3c:b7:74:d5:69:45:b6:9c:37:3c:96:c3:
1d:49:5e:98:79:3f:fb:94:bf:d0:9f:d3:83:72:b4:
27:60:b6:98:98:1c:5f:62:09:6e:f5:36:7a:19:ad:
74:74:2c:35:01:f2:1c:b5:5a:54:6d:2a:da:1c:06:
be:fe:ff:ad:81:cc:1a:db:09:30:94:67:b1:98:cb:
7c:47:a4:9d:77:8d:d5:40:3b:03:ba:58:92:c7:55:
88:e0:f7:d5:3c:a5:c3:02:31:3c:97:b2:4b:4a:1a:
6e:64:c5:e8:72:55:da:fb:1d:1f:91:97:58:f5:74:
08:6f:0e:ad:1e:45:12:0f:6f:ac:55:48:0e:63:75:
5e:22:25:7c:5f:2e:a3:41:66:42:ff:80:cd:4e:89:
34:2e:76:88:d0:8e:fd:b9:a4:7c:93:67:ef:bd:a0:
d9:75:fb:cc:db:8d:77:8e:11:ea:e7:08:9f:9b:6e:
b9:1d:77:28:ca:55:97:74:15:9f:92:7a:30:fe:4e:
c0:ad:f0:a6:70:fa:e9:97:44:ed:72:52:27:ad:60:
06:31:2b:b0:53:68:3c:8c:7c:ec:8e:52:d3:36:2f:
d1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B9:1E:F3:A8:4A:CD:01:CA:31:E9:03:BF:68:44:B0:FC:5D:BC:ED
X509v3 Authority Key Identifier:
keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/E7ke86hKzQHKMekDv2hEsPxdvO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.184.224.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:26:f6:be:ae:7f:29:6f:dd:92:a2:b2:f3:5d:de:8e:08:4b:
13:86:25:88:d9:54:bb:db:7d:1e:df:f6:96:6b:f5:74:16:10:
e4:db:cd:61:c2:a0:b1:f0:df:41:42:69:e4:58:a4:bc:dc:87:
06:0f:a3:02:80:5f:6e:f4:34:96:63:e3:6b:ed:cc:b2:6c:16:
4f:f3:83:c8:10:b2:b8:24:76:62:48:22:b3:9f:2b:7a:4f:c9:
d6:70:ae:97:82:bb:66:cf:7e:e0:a8:47:87:5e:dd:8c:ec:4f:
9c:7d:52:e1:04:f8:48:f0:e7:13:89:61:28:42:9b:a6:aa:fb:
e6:de:a2:e6:73:8c:4a:ad:56:ef:01:bc:a6:44:61:d7:ff:a3:
24:3a:87:e4:64:3c:08:55:7c:70:a2:55:d5:7e:13:13:c5:10:
9f:58:4b:59:af:fe:09:bc:63:aa:fc:0a:df:00:48:1c:92:a9:
b5:49:ee:83:ec:c3:89:95:e6:dd:15:21:66:a1:37:ff:94:47:
6f:e7:39:d6:e5:26:db:c8:e9:95:81:da:d2:ef:14:bb:80:c2:
ac:b8:83:55:77:ee:5e:3b:dd:c7:50:8f:4a:d8:fe:96:a1:89:
77:4e:1f:e0:e5:18:dc:06:f9:ba:fa:bb:45:27:8e:5c:5a:3f:
4f:78:14:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:21 2024 by rpki-client on console-ams.rpki-client.org