Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/gjVw5c41UMj2yv_6LkroaOBXEvU.roa
File: gjVw5c41UMj2yv_6LkroaOBXEvU.roa (raw, json)
Hash identifier: kwzQvkx1c/d1t5KZoJfrRJm4EqHnfwVmy6sTRCYctFs=
Subject key identifier: 82:35:70:E5:CE:35:50:C8:F6:CA:FF:FA:2E:4A:E8:68:E0:57:12:F5
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 01856EA67FFD2F400797FA8A16A2EDFD064F
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/gjVw5c41UMj2yv_6LkroaOBXEvU.roa
Signing time: Sun 01 Jan 2023 18:44:43 +0000
ROA not before: Sun 01 Jan 2023 18:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48471
IP address blocks: 91.211.12.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:7f:fd:2f:40:07:97:fa:8a:16:a2:ed:fd:06:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Jan 1 18:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=823570e5ce3550c8f6cafffa2e4ae868e05712f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8e:09:d6:5d:0a:48:86:21:7e:4e:5d:ed:5e:
e8:f1:09:69:9b:13:d1:e6:20:0a:78:3f:18:cd:91:
67:13:23:ae:5f:22:73:46:93:9c:20:2a:e6:02:32:
bc:b0:c6:0d:9b:67:78:21:3f:97:a5:cd:35:af:fa:
1b:37:23:7d:b5:54:d0:67:a9:02:b1:d8:c4:f9:64:
f5:9f:ba:32:7e:a7:ec:92:d8:a4:f9:8c:2b:5a:b7:
e1:73:b9:13:0b:29:3b:28:9f:85:69:eb:f7:ce:c5:
b0:36:ed:21:2b:f1:ca:34:e0:75:9c:8d:15:f6:50:
ac:d2:7c:0f:34:ad:66:d9:9a:f3:25:60:38:af:00:
98:15:98:8e:3d:b2:32:81:39:c8:9c:b5:0b:ee:a3:
23:ca:8e:c0:fd:0b:a5:0b:58:51:65:ef:28:ed:c0:
e8:cd:91:8c:17:f7:ce:6d:1b:39:59:96:8e:ef:7f:
eb:4a:46:6d:03:91:1d:66:61:9f:08:1e:42:59:81:
da:6b:02:29:ae:75:c9:3c:2a:db:a6:c0:a9:f2:96:
58:90:af:70:68:f2:85:26:3a:67:a0:b2:a3:f1:19:
de:68:ba:74:1b:ff:fd:91:fe:95:93:c8:21:fb:e0:
7f:30:39:3e:d0:61:1e:b6:17:f5:bb:21:ae:a5:da:
34:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:35:70:E5:CE:35:50:C8:F6:CA:FF:FA:2E:4A:E8:68:E0:57:12:F5
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/gjVw5c41UMj2yv_6LkroaOBXEvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.12.0/22
Signature Algorithm: sha256WithRSAEncryption
51:d1:ff:62:59:1f:cd:2b:28:a8:c2:9d:0d:bb:d0:b4:a4:85:
19:cd:d9:2e:c3:b4:b6:ef:fb:4e:7d:98:58:3d:55:55:53:ef:
44:4a:ef:ab:dd:e5:7b:d8:fd:e4:1b:d8:09:65:4c:48:d3:d6:
92:93:6e:b2:43:98:f3:f6:96:af:03:3c:f5:f5:55:e0:b1:fb:
bc:15:f4:30:2a:46:02:d7:f8:63:d1:0f:37:bf:e9:d4:65:99:
33:a4:ab:6c:8e:0b:a0:cc:29:64:a2:67:c5:d3:ce:72:d7:11:
e4:9f:2c:13:42:5c:e9:69:23:0e:2e:a6:2d:af:d0:96:57:55:
18:7f:00:87:9f:88:21:7f:0d:02:4c:9a:88:ea:2f:30:ef:8f:
2a:94:e2:39:22:0d:7c:cc:e0:90:c2:38:73:de:b1:b8:71:a8:
54:e1:f1:9c:dc:3e:c7:ef:6e:be:e5:5d:59:eb:0d:2d:15:a8:
ae:46:93:bf:e6:18:9d:ef:e8:fe:90:7e:4a:96:7d:2d:f9:c9:
1a:a9:96:c3:66:b0:ba:ff:7f:cf:8c:35:8e:77:96:67:9f:ee:
fd:3d:4f:28:34:71:20:5e:27:55:08:26:67:fb:36:f6:06:2e:
79:32:e9:a3:dd:da:f2:87:f2:c0:ef:74:fd:c9:90:56:af:f9:
c3:42:6e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:33 2024 by rpki-client on console-ams.rpki-client.org