Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/R5RKBqWRaaYTAErZyqUbonmS4rw.roa
File: R5RKBqWRaaYTAErZyqUbonmS4rw.roa (raw, json)
Hash identifier: hB9d3iOCt+QcaOgC0h2lc841JSjyR8vGrp66rFRyGgk=
Subject key identifier: 47:94:4A:06:A5:91:69:A6:13:00:4A:D9:CA:A5:1B:A2:79:92:E2:BC
Certificate issuer: /CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Certificate serial: 01856ECB641C6C743A7635840726D4B02197
Authority key identifier: E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/R5RKBqWRaaYTAErZyqUbonmS4rw.roa
Signing time: Sun 01 Jan 2023 19:25:01 +0000
ROA not before: Sun 01 Jan 2023 19:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51435
IP address blocks: 91.217.147.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:64:1c:6c:74:3a:76:35:84:07:26:d4:b0:21:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Validity
Not Before: Jan 1 19:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47944a06a59169a613004ad9caa51ba27992e2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d4:8c:0b:fc:22:74:d6:36:57:49:68:7b:5a:
71:b9:ec:2a:95:16:2f:34:6d:af:6d:e2:24:de:4a:
65:a5:71:29:b3:d6:97:30:d2:8a:03:26:b1:d8:cb:
83:f5:51:b6:9a:23:ef:83:cf:36:93:34:c2:60:1b:
a4:3a:d2:2a:6c:2a:aa:4c:5f:c1:3a:62:36:38:cc:
88:c2:e0:1e:e5:fa:f4:ca:d1:6a:5e:c2:a1:a2:e1:
eb:de:f9:51:be:35:15:98:ef:66:f4:00:08:04:bb:
86:04:45:38:10:c7:13:47:a9:a8:50:f3:3a:92:9f:
c4:12:d3:11:76:0b:06:88:de:6d:5e:f3:dd:ea:b2:
99:ad:72:90:8c:3b:33:ce:21:04:df:8d:fe:a4:d9:
a3:40:df:3a:66:e3:76:29:9b:18:cc:8b:f8:04:11:
da:f1:39:30:4d:d6:9b:82:13:a1:50:b9:ad:24:db:
08:6a:a2:a7:a3:23:8e:9c:f3:f6:65:c7:a3:52:9d:
b2:fb:e4:36:19:dd:82:04:93:96:a9:95:34:a0:dd:
2f:34:a8:4e:d4:ab:ac:0e:c8:f6:bc:06:c7:c3:cd:
e9:4a:1c:cb:5a:4e:32:f9:cf:4a:a4:eb:88:ad:63:
12:36:db:60:09:5d:57:a7:1f:c8:2c:92:26:52:32:
4d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:94:4A:06:A5:91:69:A6:13:00:4A:D9:CA:A5:1B:A2:79:92:E2:BC
X509v3 Authority Key Identifier:
keyid:E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/R5RKBqWRaaYTAErZyqUbonmS4rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.147.0/24
Signature Algorithm: sha256WithRSAEncryption
79:17:dc:bd:87:c5:7b:f2:4d:d5:b8:ab:cd:5d:f2:f4:6e:c3:
47:64:76:ec:c5:a5:53:6e:95:eb:26:bc:4d:1a:f0:1a:15:45:
1a:ca:b4:16:1f:55:e5:ac:8f:20:55:2c:51:bc:e2:3c:18:df:
a4:5c:14:e4:1b:1d:df:02:6a:64:1d:de:7b:3d:0b:3b:2d:5e:
05:d5:5a:fa:70:10:bb:2e:b9:2b:52:51:80:cb:c5:9f:fc:dd:
17:38:04:17:0e:f9:04:91:51:f3:06:b4:b7:7c:93:31:9f:97:
e1:65:99:27:8b:6b:18:c2:75:02:4f:e7:70:fe:93:54:7e:f2:
87:a1:cc:3f:77:32:a3:05:c6:f9:2e:a3:6b:1f:8f:44:6f:ac:
4d:0b:c2:44:45:7a:74:b7:2a:b6:dc:a7:9e:42:e1:a0:19:38:
d0:47:25:48:89:0f:29:74:72:56:8e:19:e8:80:97:3e:2b:62:
19:33:81:55:76:62:b1:98:53:76:d7:4d:f0:ba:2f:c2:4c:e6:
f3:7f:85:be:5c:fd:bc:6f:d5:0b:d0:30:2b:6b:7a:85:b6:a5:
29:57:da:0b:aa:cb:22:f6:c7:d6:f9:68:53:20:26:0e:1d:91:
45:a1:15:56:07:aa:f4:ea:a3:75:d3:a8:ab:94:1b:ad:f4:4e:
51:d1:57:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:20 2024 by rpki-client on console-fra.rpki-client.org