Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/aDcUSvTQhZuTyklWoXRucM7qXeQ.roa
File: aDcUSvTQhZuTyklWoXRucM7qXeQ.roa (raw, json)
Hash identifier: rJXWE+VtV//JFQ6WqIMyya0UERHKxv9jhXRefX4M2NQ=
Subject key identifier: 68:37:14:4A:F4:D0:85:9B:93:CA:49:56:A1:74:6E:70:CE:EA:5D:E4
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0185701ED3B28821DF55D5ABE711626CFD98
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/aDcUSvTQhZuTyklWoXRucM7qXeQ.roa
Signing time: Mon 02 Jan 2023 01:35:46 +0000
ROA not before: Mon 02 Jan 2023 01:35:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50204
IP address blocks: 91.197.236.0/22 maxlen: 22
195.214.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 04 Feb 2023 13:28:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:d3:b2:88:21:df:55:d5:ab:e7:11:62:6c:fd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jan 2 01:35:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6837144af4d0859b93ca4956a1746e70ceea5de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ce:ed:3d:f1:63:5b:5a:3b:28:20:d4:e3:c0:
54:9b:e1:f9:d3:98:84:7c:57:26:8a:75:91:49:b4:
a7:e5:1c:22:10:b0:99:89:dd:11:b7:7a:59:9c:56:
5e:ae:ee:9c:01:9a:e2:64:22:e4:4a:a1:29:a6:da:
24:59:9f:27:54:fc:15:db:bb:ca:90:64:3f:a7:73:
84:a3:8c:25:67:5b:6d:79:da:76:fb:fa:0a:e2:35:
10:ca:b4:7e:37:d8:60:2e:90:8f:64:22:e8:88:20:
82:ff:bc:dc:a0:b2:a2:93:cc:47:2b:f6:f0:1f:ef:
22:3c:bb:63:b9:1c:d8:b5:5a:dd:c2:fa:be:f0:38:
42:f3:78:4c:5f:02:82:4f:69:cc:a3:00:4a:f4:00:
00:bc:0f:f8:c5:63:e2:5f:ab:75:16:4b:05:1d:ea:
57:97:25:6f:48:9a:bd:50:c6:25:2b:0a:58:4b:2d:
0e:e1:87:1f:7e:ba:63:28:1c:60:45:5d:1f:a7:f7:
da:9b:98:3d:4a:59:0d:32:dc:09:77:72:62:a5:04:
a2:4e:ba:a1:fd:b5:e4:5a:e8:10:33:dc:cd:1f:72:
77:53:c5:9f:43:ba:39:97:d6:7c:6d:d0:97:12:a6:
ee:5e:57:db:83:d8:f5:fa:a8:64:b3:9c:a5:29:49:
8d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:37:14:4A:F4:D0:85:9B:93:CA:49:56:A1:74:6E:70:CE:EA:5D:E4
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/aDcUSvTQhZuTyklWoXRucM7qXeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.236.0/22
195.214.236.0/22
Signature Algorithm: sha256WithRSAEncryption
02:06:cd:3d:ef:ff:98:4e:79:27:ba:47:75:e7:87:49:4d:fe:
fa:33:d2:e3:5e:95:a5:7d:8e:b2:64:b5:09:1b:2a:9e:a5:da:
ad:9b:a7:79:46:20:a4:c6:9d:ba:73:01:24:78:43:aa:dd:cd:
05:d9:89:76:a0:28:3d:cd:71:c8:48:0a:6c:2b:cb:5b:29:bb:
f0:02:2c:75:32:77:1d:fd:c6:e0:8d:d6:f0:af:c4:40:a2:42:
40:3b:94:16:29:31:f6:37:aa:ad:a4:9c:16:b8:ba:b2:93:66:
5d:99:59:8c:99:f8:9b:ff:c7:ad:65:2f:92:7f:f1:ac:2c:15:
35:a4:a3:d7:80:3a:10:24:b8:14:df:fa:9c:f4:e9:78:2f:02:
52:db:c9:7d:e6:9c:28:80:cf:1c:26:fd:a0:23:86:a8:4e:50:
ac:db:9b:00:47:e9:c1:bf:29:5d:0a:38:4f:bf:24:14:ef:1e:
b8:69:64:75:42:47:c0:78:27:d3:a6:72:41:ec:cf:18:11:33:
6a:a7:57:fe:76:fa:1f:b2:7a:bf:73:39:e1:86:3c:d5:9c:6b:
ad:4a:1a:5a:2f:24:01:22:10:4e:06:79:16:05:4d:7c:21:4e:
f5:0c:28:d9:d2:91:98:72:59:0b:a5:cc:e0:09:d1:93:48:a3:
1d:92:6e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org