Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/r5k9coZmXRtmfe4NxpYX4o-o9B0.roa
File: r5k9coZmXRtmfe4NxpYX4o-o9B0.roa (raw, json)
Hash identifier: BozWF2u6CvBy3yeQ8zSKScr1ZPLRXKYypL2Zv9pwy0I=
Subject key identifier: AF:99:3D:72:86:66:5D:1B:66:7D:EE:0D:C6:96:17:E2:8F:A8:F4:1D
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018CC9BA9A72B6557676DC7A7520B872A183
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/r5k9coZmXRtmfe4NxpYX4o-o9B0.roa
Signing time: Tue 02 Jan 2024 10:31:38 +0000
ROA not before: Tue 02 Jan 2024 10:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54252
IP address blocks: 91.186.200.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 06:08:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:9a:72:b6:55:76:76:dc:7a:75:20:b8:72:a1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 10:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af993d7286665d1b667dee0dc69617e28fa8f41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2d:fe:72:a8:6b:64:8b:2b:df:2a:76:95:b8:
24:0c:17:a8:00:a8:76:f6:55:d4:e4:78:3a:ad:82:
d5:41:3c:84:17:38:67:d0:ae:14:b8:fa:2c:7a:d2:
d7:1c:e1:be:63:85:32:5e:31:a0:86:a5:16:b5:95:
90:1c:90:7e:4f:11:e6:94:d4:ab:69:d8:07:c1:ef:
ca:80:a4:a4:87:ef:36:14:9e:8c:a0:ba:4d:0f:31:
26:17:5b:c8:9b:29:ee:a3:e3:65:a0:2d:1e:c5:e5:
57:43:d3:96:72:cf:e2:2a:37:9e:60:2a:ca:d1:4a:
ad:62:46:84:95:62:6d:55:d8:19:96:44:65:76:0f:
55:41:4d:7f:53:12:e6:b3:fd:f6:79:70:67:a9:cb:
98:ac:47:be:f9:46:d7:0c:80:87:ca:45:92:cb:be:
b0:aa:49:42:b3:f5:4a:83:f0:8e:03:49:c7:46:b8:
80:ce:55:d4:ae:9f:6f:f9:d8:42:dc:53:18:cc:cf:
fb:39:b9:ff:95:8a:8a:56:ee:8f:33:51:0f:96:35:
f0:94:00:02:46:eb:8a:cd:ab:53:a3:5a:06:25:4e:
82:e4:7c:4d:b3:c1:2f:b2:52:1e:fe:7d:47:4a:cd:
ae:59:dd:bf:3d:1f:f3:10:69:a1:48:e0:28:03:c5:
22:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:99:3D:72:86:66:5D:1B:66:7D:EE:0D:C6:96:17:E2:8F:A8:F4:1D
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/r5k9coZmXRtmfe4NxpYX4o-o9B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.200.0/22
Signature Algorithm: sha256WithRSAEncryption
56:5b:78:85:08:a1:a0:88:b0:db:3b:b8:07:11:28:e6:82:cb:
d1:17:22:d3:d1:4b:9e:6c:e4:2b:6f:9e:94:45:51:56:f0:53:
ed:b4:76:ff:80:b7:79:33:9e:c1:ff:ba:df:aa:f5:c2:1f:17:
20:06:64:01:8b:cb:21:43:ab:91:22:ae:35:23:6d:04:cd:01:
8f:3d:29:f5:8d:67:5c:31:a6:a1:4d:ca:b8:f0:98:1a:5e:ad:
bf:cc:0b:05:80:83:36:f7:c6:79:e3:d0:b2:f2:10:f8:e1:81:
42:c8:e4:61:49:b2:0d:46:cd:e7:4e:a6:a5:ba:13:49:72:30:
9b:d2:ab:65:6b:45:f3:a1:1d:e5:5d:f5:c7:86:58:ce:41:b2:
a9:57:de:60:34:59:54:3b:ea:c6:58:46:fd:b0:7f:4d:9a:1a:
47:e0:ba:43:d2:0b:e1:c5:2f:03:fc:df:25:6c:a0:b4:28:c2:
ac:78:35:7e:18:9d:5f:c9:07:7e:18:1c:e0:c7:4d:dc:60:d5:
42:a7:d6:94:cb:77:7d:eb:fc:3c:98:31:bb:53:f3:d9:bd:1c:
e1:7e:e4:0d:78:da:35:95:cb:af:e5:bf:d9:bd:a5:f3:74:62:
62:6d:b6:86:39:00:d1:34:e5:83:b2:91:b2:87:80:73:06:5d:
d6:6e:d4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:10 2024 by rpki-client on console-fra.rpki-client.org