Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/SigkhtPvzJxhDzn0i6f6OP6w8_8.roa
File: SigkhtPvzJxhDzn0i6f6OP6w8_8.roa (raw, json)
Hash identifier: y93WsXMi/CkFirLhwGqtIIFkOp9xs4A2fRrcJHFR8Q4=
Subject key identifier: 4A:28:24:86:D3:EF:CC:9C:61:0F:39:F4:8B:A7:FA:38:FE:B0:F3:FF
Certificate issuer: /CN=798e0da4f91007b224768acb4d131f12517d2b7a
Certificate serial: 0188FD2FA02B9FBCD5D25B2A3BBD1FD154B1
Authority key identifier: 79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/SigkhtPvzJxhDzn0i6f6OP6w8_8.roa
Signing time: Tue 27 Jun 2023 14:08:56 +0000
ROA not before: Tue 27 Jun 2023 14:08:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13110
IP address blocks: 91.202.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fd:2f:a0:2b:9f:bc:d5:d2:5b:2a:3b:bd:1f:d1:54:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798e0da4f91007b224768acb4d131f12517d2b7a
Validity
Not Before: Jun 27 14:08:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a282486d3efcc9c610f39f48ba7fa38feb0f3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:fe:fb:ba:a6:54:ba:f2:ef:74:9b:ab:d9:
aa:13:c3:60:24:45:57:7a:3a:e1:5b:78:49:2b:65:
6d:ef:22:ee:03:10:ac:a2:15:22:1d:91:9b:0f:15:
ec:fd:c6:7e:77:6e:9c:11:02:2a:80:9b:3e:88:86:
c5:d9:eb:6c:8e:47:bd:93:ab:94:7e:9c:47:3d:e8:
aa:66:48:88:d8:be:9c:7e:f0:22:2b:3d:f4:82:c1:
96:e2:32:78:8f:34:fc:64:a6:13:53:8f:9e:46:73:
72:8f:00:98:bc:d0:4f:b7:0b:93:7a:4b:c6:53:72:
91:07:52:b7:bf:dd:ba:c4:4b:02:ab:84:3a:b0:dc:
87:2b:a8:b0:d1:c1:d3:cc:f1:c3:78:5d:8e:8f:ad:
60:aa:bd:02:66:3b:a6:ac:77:87:12:7b:5d:90:64:
09:40:b0:4e:d7:7f:1f:35:e0:7c:f4:a9:f8:06:1e:
08:d2:2f:a7:bb:ea:fa:c5:bd:eb:b9:12:67:7b:a9:
69:4f:95:e2:5f:87:86:7e:47:40:c4:c0:35:e9:50:
ea:a3:71:d3:58:93:95:9a:40:42:83:68:f4:bf:c3:
ba:c8:01:10:99:f5:35:3f:ca:15:2b:1c:64:c2:3b:
e5:c1:61:1a:97:10:91:01:97:58:14:27:6b:30:95:
ec:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:28:24:86:D3:EF:CC:9C:61:0F:39:F4:8B:A7:FA:38:FE:B0:F3:FF
X509v3 Authority Key Identifier:
keyid:79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/SigkhtPvzJxhDzn0i6f6OP6w8_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.102.0/24
Signature Algorithm: sha256WithRSAEncryption
58:90:b8:cc:3c:33:1d:c7:42:53:ae:c1:d5:9c:dd:bd:82:f7:
f8:da:05:b7:2e:32:c9:02:02:be:96:12:ab:8a:0e:7d:d5:be:
d5:d7:c4:65:a3:c4:99:20:97:43:c7:e1:64:fb:8e:b1:e7:f4:
1d:3d:26:ad:3e:31:f9:c2:4b:43:74:fa:2b:ad:72:ef:ec:28:
1c:91:b6:37:a2:de:e6:19:4a:d6:e2:29:44:eb:e9:2e:af:13:
30:dd:08:d7:d4:38:c2:5b:d6:c9:ce:cf:3b:ec:51:e7:21:8f:
ae:7e:bc:cb:9f:7c:5c:8a:1d:22:ce:ba:01:9e:25:05:4a:dd:
19:a9:10:0e:fb:94:e8:7f:21:51:8b:1b:37:e1:ae:26:19:1d:
24:06:9c:a2:45:01:bd:21:fa:42:e0:03:29:dc:13:90:ea:e2:
55:3c:f9:41:71:18:56:1a:cb:e3:18:fc:07:d5:22:a5:af:df:
82:54:07:95:97:1a:d2:79:00:7f:3a:69:43:e4:d2:9f:41:65:
c3:57:79:09:6c:50:26:7f:09:2a:bd:c2:03:21:9f:bb:07:e3:
60:c5:3d:24:1a:b0:6f:14:30:90:84:3e:e3:00:69:43:0f:27:
e3:59:41:f8:5a:98:70:d0:47:c0:0a:92:32:09:7d:23:8c:7b:
f3:9b:d9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:18 2024 by rpki-client on console-ams.rpki-client.org