Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/e0rGLhwzthbM0fzvUqva-8HS6xA.roa
File: e0rGLhwzthbM0fzvUqva-8HS6xA.roa (raw, json)
Hash identifier: GbHQYbxNFvXwSEj9Ya9DP/I7Lmeq160+7KcTjj/T2/w=
Subject key identifier: 7B:4A:C6:2E:1C:33:B6:16:CC:D1:FC:EF:52:AB:DA:FB:C1:D2:EB:10
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 01856C53A5D5AA8EB51A4962277C8830C553
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/e0rGLhwzthbM0fzvUqva-8HS6xA.roa
Signing time: Sun 01 Jan 2023 07:54:59 +0000
ROA not before: Sun 01 Jan 2023 07:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9050
IP address blocks: 91.201.83.0/24 maxlen: 24
91.201.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:a5:d5:aa:8e:b5:1a:49:62:27:7c:88:30:c5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Jan 1 07:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b4ac62e1c33b616ccd1fcef52abdafbc1d2eb10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b8:6c:61:5e:08:7f:40:9e:60:b2:55:5f:e3:
fc:9b:e4:50:bc:4d:56:8f:b2:58:d5:61:4a:77:03:
7e:96:d4:4c:79:f8:6f:b2:21:72:d0:30:26:6e:ba:
8d:31:15:7f:10:8f:b6:7c:98:b5:c4:fd:d7:dd:8d:
84:e9:dc:7e:f1:85:77:6d:63:5c:e1:ad:70:62:15:
54:3c:84:58:9b:6f:b4:a3:48:a4:de:ed:8b:60:2e:
c0:49:dc:50:91:04:7e:bf:37:f5:a7:64:0c:db:bb:
1c:3b:9f:9e:11:ed:21:4a:70:ad:b5:57:2e:85:5e:
2b:49:16:ac:0d:96:4e:5e:11:3c:72:de:7a:cc:99:
ce:51:53:8f:6b:c1:21:c8:3e:bc:33:e7:c0:6f:9a:
db:91:a2:27:15:a2:b1:54:fe:81:71:6f:55:d8:55:
80:d5:e8:55:29:dc:d8:27:30:ad:78:ed:85:55:cc:
4c:84:f9:2e:c3:eb:68:74:14:25:cc:5b:1c:db:1b:
b5:3f:9b:0a:c8:45:d4:57:2c:26:e7:6b:e6:cf:db:
ee:5c:9c:84:32:b4:7a:8a:e1:b7:01:4b:93:f5:94:
88:ab:4f:33:e6:c0:88:41:1b:98:02:43:85:f3:a3:
dd:08:6c:06:ec:3c:ba:aa:0b:e6:38:2b:8c:82:fd:
dd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4A:C6:2E:1C:33:B6:16:CC:D1:FC:EF:52:AB:DA:FB:C1:D2:EB:10
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/e0rGLhwzthbM0fzvUqva-8HS6xA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.82.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:ed:e3:e4:2c:23:81:8b:20:e5:35:b6:36:c7:a2:46:d3:11:
c9:d0:b2:7f:7e:53:92:aa:80:71:34:ac:65:79:9c:51:56:a7:
f8:2f:be:17:fd:bd:f1:69:d9:50:1f:00:6c:21:c3:f5:fa:c6:
e6:a2:ba:b8:28:0b:19:01:21:75:04:9a:b4:27:61:b2:74:af:
33:c0:53:e7:a7:e1:97:0b:11:05:d3:3f:cf:e6:09:5f:1c:6f:
31:b9:b8:3c:c2:9b:bd:97:60:93:00:2f:91:4f:85:04:58:ca:
28:a9:87:a5:a9:e8:df:88:34:e7:e3:f3:22:02:b1:81:83:02:
32:43:41:e4:96:d8:27:bf:32:6d:9d:79:87:fb:71:15:56:bf:
68:24:e3:fb:c2:7b:b0:22:7c:7f:dc:14:73:57:5a:9d:3d:f7:
59:25:64:ac:cb:3f:63:7e:a2:ce:b5:0a:aa:b6:d7:88:4a:2f:
8e:41:da:f5:c1:ec:bb:5d:8a:ba:c8:24:c6:8b:43:71:d4:45:
2f:bf:f1:4f:26:b0:09:28:81:af:b7:8f:40:63:f3:9d:a4:a0:
fc:27:0a:f9:4f:8d:54:19:0d:2f:7b:fc:35:2f:2a:af:fc:bd:
4a:c7:ca:ca:96:fe:bb:1a:13:55:38:fc:9d:23:11:7e:7a:7c:
98:4e:96:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:04 2024 by rpki-client on console-ams.rpki-client.org