Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/DV4B_FU2HGZgUrbUEv3DcHx2m70.roa
File: DV4B_FU2HGZgUrbUEv3DcHx2m70.roa (raw, json)
Hash identifier: MZrp/kRYyK7OcMyppdN/5Cb1T8/xd0CGe/+TbWGyDRA=
Subject key identifier: 0D:5E:01:FC:55:36:1C:66:60:52:B6:D4:12:FD:C3:70:7C:76:9B:BD
Certificate issuer: /CN=548f757a56d17680d6d6690b19d9f39061980033
Certificate serial: 018A345FAB0038677B7F49CA52165742DC79
Authority key identifier: 54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/DV4B_FU2HGZgUrbUEv3DcHx2m70.roa
Signing time: Sun 27 Aug 2023 00:23:19 +0000
ROA not before: Sun 27 Aug 2023 00:23:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49372
IP address blocks: 91.234.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:34:5f:ab:00:38:67:7b:7f:49:ca:52:16:57:42:dc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=548f757a56d17680d6d6690b19d9f39061980033
Validity
Not Before: Aug 27 00:23:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d5e01fc55361c666052b6d412fdc3707c769bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:33:0f:1f:84:91:56:88:f1:77:f6:73:92:8b:
b9:be:cf:fe:4d:a3:e4:c7:24:19:7e:15:41:72:38:
56:62:02:7a:be:57:bd:6e:e1:93:e3:23:1f:36:e2:
df:f9:0a:d4:09:d7:50:5b:95:39:ea:79:97:7f:db:
06:ec:f1:cc:e7:ad:de:b9:a5:3e:7d:19:2b:9d:99:
dc:e1:2a:55:f3:c0:c6:13:96:46:f8:da:a0:11:27:
d8:5b:35:54:a0:64:f7:a0:36:7f:cf:14:13:dd:8a:
c8:e6:74:4f:54:e8:00:86:83:c0:0d:2e:75:9c:71:
ea:50:b5:c1:3f:9c:a7:49:7c:59:a2:35:5a:99:17:
e5:39:02:39:75:d6:81:d2:2f:8b:d7:af:ba:76:92:
c2:3b:e7:aa:58:1b:de:59:97:37:bd:dd:26:33:ee:
3a:1e:23:68:da:1b:6a:37:8a:09:70:28:63:5f:55:
b4:39:51:da:a2:54:26:22:76:28:93:d7:9d:56:ac:
9e:02:f2:5d:e9:fd:b7:24:47:6a:96:52:d4:e9:56:
45:10:4a:e2:b5:87:e6:ec:f7:32:79:6b:74:c0:2c:
f6:28:40:f5:3e:57:66:3f:d0:e1:cd:51:84:1f:00:
42:cc:3e:4c:3a:68:d7:e6:4e:ac:02:5c:dc:3b:fe:
e1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5E:01:FC:55:36:1C:66:60:52:B6:D4:12:FD:C3:70:7C:76:9B:BD
X509v3 Authority Key Identifier:
keyid:54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/DV4B_FU2HGZgUrbUEv3DcHx2m70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.196.0/24
Signature Algorithm: sha256WithRSAEncryption
46:29:be:59:7c:a2:d8:c0:b2:a4:42:a6:c9:52:a1:81:c3:88:
e7:d6:1a:41:ea:15:be:b4:a5:c5:f7:6a:ae:a9:01:4f:4d:1a:
be:6f:86:b7:b7:c1:12:ce:f8:78:cd:11:b7:3b:71:f5:e2:66:
ca:eb:a9:d5:ea:69:4c:8e:55:a4:88:65:20:07:49:f4:d4:da:
0f:15:5b:a0:bf:e6:1d:1b:ef:b5:93:84:3f:0b:c0:b7:cd:8d:
c6:8f:d5:d3:fb:37:55:7d:4c:16:9a:58:19:71:25:25:3f:fa:
f9:7e:74:22:e7:dd:9b:57:6a:86:fb:90:81:de:45:43:51:4a:
a1:59:93:1e:5e:06:ba:b9:97:b2:a0:6f:40:db:24:ab:cb:81:
6a:fa:b9:40:77:6b:c0:4b:d2:d5:b4:0f:e5:9c:99:41:2f:77:
b0:89:9d:bd:f9:47:83:35:d4:72:d1:57:10:bd:09:db:31:fe:
cf:3d:b3:3e:2f:1e:90:4a:19:95:b6:85:f4:cd:91:b5:63:1a:
0e:94:f9:c5:e4:af:89:c4:74:01:04:2a:52:f3:0f:f7:19:8c:
bb:60:ad:94:de:02:1b:3f:d1:1c:4f:44:50:d9:52:51:98:41:
d9:4d:a8:d0:68:c7:c3:89:79:0a:0c:b0:a4:f0:9c:6d:d7:ce:
51:b5:1d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:07 2024 by rpki-client on console-fra.rpki-client.org