Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/S1xoALNuu63N7dU3YWsSAwO2m_I.roa
File: S1xoALNuu63N7dU3YWsSAwO2m_I.roa (raw, json)
Hash identifier: sHEccN2S69DWK4zZ927iPcJS5Qnay35yIct6JSApSJk=
Subject key identifier: 4B:5C:68:00:B3:6E:BB:AD:CD:ED:D5:37:61:6B:12:03:03:B6:9B:F2
Certificate issuer: /CN=a011a02e929c43f0199c8326302e24899c4a4151
Certificate serial: 018572B41470AAE8D89B5638C237B4798BE9
Authority key identifier: A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/S1xoALNuu63N7dU3YWsSAwO2m_I.roa
Signing time: Mon 02 Jan 2023 13:38:02 +0000
ROA not before: Mon 02 Jan 2023 13:38:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51739
IP address blocks: 91.223.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:14:70:aa:e8:d8:9b:56:38:c2:37:b4:79:8b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a011a02e929c43f0199c8326302e24899c4a4151
Validity
Not Before: Jan 2 13:38:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b5c6800b36ebbadcdedd537616b120303b69bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:54:0d:93:ba:a2:15:69:19:26:74:2d:c6:b4:
7b:9b:f4:a9:59:1a:80:23:f0:73:fd:a4:6d:a6:98:
d5:08:d9:ad:de:d2:17:9f:62:fd:fd:c6:71:e6:93:
0a:36:b2:b8:46:92:c0:2c:60:fe:73:d2:77:1e:1f:
dd:64:7b:c2:85:00:fb:ee:4f:38:14:52:ab:69:38:
12:e5:74:89:40:b2:4d:c1:7c:c9:fc:8c:91:d3:79:
95:29:a2:e6:1f:92:ed:ee:8f:d0:d6:30:1c:55:ef:
43:d6:06:a9:4c:0b:97:60:68:64:41:18:c9:5f:20:
c5:2b:6e:20:27:87:b7:ab:85:1d:71:8a:6a:4e:c3:
08:ea:d4:34:c8:a5:77:7f:f9:ad:c1:80:25:d7:d2:
f9:26:01:13:69:43:d2:78:2f:53:a9:34:f9:41:66:
ca:80:c7:04:37:ff:6d:30:c0:da:e3:7f:5a:22:d7:
0b:4f:85:02:3c:b9:00:8a:7e:1b:32:07:1b:e3:45:
64:34:26:f3:3c:29:a8:ec:92:09:de:ff:8c:88:ae:
b9:bc:58:3d:b2:f9:20:39:68:01:74:7f:24:97:59:
18:db:c8:53:0a:4c:1d:6d:13:86:ee:6a:18:ce:d0:
cc:a0:e2:17:79:52:f8:a4:28:22:74:6a:8f:ea:0e:
82:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5C:68:00:B3:6E:BB:AD:CD:ED:D5:37:61:6B:12:03:03:B6:9B:F2
X509v3 Authority Key Identifier:
keyid:A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/S1xoALNuu63N7dU3YWsSAwO2m_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.0.0/24
Signature Algorithm: sha256WithRSAEncryption
66:8d:71:02:32:df:b6:23:5e:e9:db:44:5e:82:c6:b6:ae:17:
24:01:37:47:49:c2:e2:44:1a:4b:dc:fe:33:57:59:cd:72:b9:
a4:ca:1f:a5:be:2f:89:5f:b5:8c:54:03:f9:71:9e:e3:79:2b:
5f:6a:33:25:96:bc:5d:a3:f6:fc:4a:83:2b:bf:3d:44:af:ea:
ba:34:23:f8:f6:d1:16:1d:e9:86:15:aa:c9:d4:4a:29:7d:b6:
83:58:f0:c7:64:05:38:00:7e:d8:62:8a:b0:16:9d:ac:84:fb:
16:48:2a:f9:07:09:6c:0c:79:fa:66:e9:7d:74:56:a5:a5:1f:
73:e7:e0:5b:50:60:c9:4b:73:3d:4e:17:0f:c8:8c:f3:d1:30:
2a:9b:85:e2:8c:7a:28:e1:13:58:9d:16:e2:2b:79:4a:22:ec:
a8:a3:b3:ff:58:77:10:36:79:6d:f1:b6:1b:62:08:70:02:a4:
b9:ac:d0:e1:58:c0:ba:1d:ce:53:32:10:82:04:3b:3d:7d:32:
aa:9a:3f:36:35:e8:68:64:3e:71:dd:e7:2b:7b:cd:7e:62:21:
bf:84:c4:4c:a2:73:4b:65:d7:e5:1c:d3:ee:fa:f1:20:6f:08:
8e:66:29:85:01:05:0a:41:89:b8:63:28:84:9c:fc:4e:4a:e9:
bc:29:62:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:32 2024 by rpki-client on console-fra.rpki-client.org