Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/JUAyp9jdqFcxPK6MUpxq3KuHg9k.roa
File: JUAyp9jdqFcxPK6MUpxq3KuHg9k.roa (raw, json)
Hash identifier: MzwBjdxjYACj4o6idsscc68LXnp1B0EApRI9mdKlOhw=
Subject key identifier: 25:40:32:A7:D8:DD:A8:57:31:3C:AE:8C:52:9C:6A:DC:AB:87:83:D9
Certificate issuer: /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial: 018BCE63A01DAC9725F05A97B734444190EA
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/JUAyp9jdqFcxPK6MUpxq3KuHg9k.roa
Signing time: Tue 14 Nov 2023 15:11:57 +0000
ROA not before: Tue 14 Nov 2023 15:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35332
IP address blocks: 91.220.21.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ce:63:a0:1d:ac:97:25:f0:5a:97:b7:34:44:41:90:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
Validity
Not Before: Nov 14 15:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=254032a7d8dda857313cae8c529c6adcab8783d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7c:05:b8:d2:5d:8e:27:0b:79:76:b0:61:83:
ea:6a:ae:42:7e:cb:c9:39:0d:29:41:b1:79:90:4b:
8e:3c:ee:c3:ed:f8:34:fd:d9:30:70:7c:56:78:84:
49:92:78:76:75:0a:2d:5c:39:68:5e:4d:da:70:0d:
2e:b8:ba:8d:fc:ab:96:f8:4c:6c:e3:00:d6:16:c9:
71:ce:da:19:09:80:e1:51:9a:e5:cf:f8:30:e2:43:
c4:0b:48:01:56:0a:31:7e:ce:9f:34:33:f4:39:5a:
32:37:24:63:34:e9:8a:04:0e:27:85:c3:ce:c0:26:
09:b4:7c:d7:dc:24:d1:ce:99:a2:df:2b:90:46:27:
ab:94:dd:62:fe:2e:ca:6c:23:18:9a:13:f6:cc:ed:
cb:56:94:f4:55:14:b8:6a:be:ee:20:3f:98:91:20:
6f:3c:01:bd:27:54:53:e7:db:c4:96:89:59:32:1c:
73:47:84:0c:23:c1:33:7f:b6:d9:d0:ee:69:06:2c:
29:b2:15:ba:44:d9:14:50:2c:54:21:4c:3a:13:51:
32:22:72:a9:47:64:2e:89:88:70:50:c7:14:4a:df:
6c:cc:b1:f6:80:1b:76:d2:3c:fc:b6:3c:35:4c:00:
04:27:ae:3a:f9:4a:56:0e:24:7a:3b:40:66:fc:8f:
42:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:40:32:A7:D8:DD:A8:57:31:3C:AE:8C:52:9C:6A:DC:AB:87:83:D9
X509v3 Authority Key Identifier:
keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/JUAyp9jdqFcxPK6MUpxq3KuHg9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.21.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:15:2b:5f:19:23:34:af:44:67:c7:7e:f3:f4:57:04:d7:44:
67:f1:6f:f5:61:b8:39:ed:9e:2a:66:f4:94:e0:5e:3e:fe:b1:
bd:5b:2d:5c:16:cf:80:16:69:81:2b:0c:59:57:55:77:9d:07:
f4:00:b6:2a:ea:07:9e:8d:92:bf:d5:a0:e2:96:77:d1:fe:67:
d9:60:d7:65:60:a8:b3:dc:46:f8:e6:56:fe:1b:02:e8:e0:a9:
b5:88:69:5b:8d:55:ed:8f:4e:31:94:dd:e2:30:91:f9:6e:37:
2c:ad:be:d5:3f:72:5f:6b:bd:38:a3:96:73:ae:b1:b4:27:79:
30:71:04:3e:f1:fa:22:22:31:c6:8d:4e:dc:46:e2:0f:1c:a8:
0d:b5:f9:79:e0:f0:a7:e4:f4:c9:89:70:ba:63:1f:43:5e:e7:
33:c7:c1:cd:b3:88:bf:0d:c8:f6:e7:19:58:33:08:b3:ae:e5:
6f:04:85:7b:b2:dc:d0:25:76:d2:58:d4:38:f1:30:ad:49:54:
6e:6b:86:19:20:1b:b5:74:cc:21:da:8f:7a:99:54:fe:62:cd:
97:3e:e9:68:39:05:65:99:2c:83:15:21:3b:94:66:3c:f4:c4:
bd:e7:4c:bd:2f:3e:36:07:3e:94:d5:87:03:c6:7e:26:ff:f9:
a4:ae:b8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:42 2024 by rpki-client on console-fra.rpki-client.org