Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/AP8MW40ywscAel8yI97_E2gHPsU.roa
File: AP8MW40ywscAel8yI97_E2gHPsU.roa (raw, json)
Hash identifier: VPL70atmsS5bgi7z/enz/7/iu9K4pkV0es6pl7xW1ZE=
Subject key identifier: 00:FF:0C:5B:8D:32:C2:C7:00:7A:5F:32:23:DE:FF:13:68:07:3E:C5
Certificate issuer: /CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Certificate serial: 01857139C185D0729E691C711BB16AA7E6C5
Authority key identifier: F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/AP8MW40ywscAel8yI97_E2gHPsU.roa
Signing time: Mon 02 Jan 2023 06:44:48 +0000
ROA not before: Mon 02 Jan 2023 06:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15830
IP address blocks: 91.233.52.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:c1:85:d0:72:9e:69:1c:71:1b:b1:6a:a7:e6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Validity
Not Before: Jan 2 06:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00ff0c5b8d32c2c7007a5f3223deff1368073ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:92:99:fa:cb:a0:b4:1d:86:f2:12:c5:a7:c8:
82:3f:17:e6:99:02:14:08:1f:9b:88:ee:62:66:18:
fb:0d:ff:34:92:f2:fb:b0:b5:07:45:e3:ff:60:14:
b0:c6:76:9e:cd:ea:a7:c4:a7:78:33:96:e8:df:7d:
5c:c7:94:e7:37:b9:f8:61:5c:f1:d5:f4:9a:10:06:
65:00:e8:24:bf:b6:e2:0d:1b:8a:d1:a8:88:f3:b7:
ba:12:86:44:a0:9d:40:cc:bf:79:4e:82:37:b3:fe:
4c:3e:39:55:67:19:e3:0e:e2:ad:da:7a:ab:78:be:
b9:50:ca:0d:66:14:25:95:46:b3:d3:53:c6:b5:f5:
6e:6e:b1:af:0a:29:77:d8:6d:39:4a:c2:41:b2:12:
de:a6:ec:6f:f4:c3:36:86:a5:36:e6:5d:ec:f5:56:
8f:0c:98:35:94:9c:4e:3e:9f:d7:10:5e:f1:ab:99:
68:06:2b:3c:0d:d1:2d:2e:5f:c4:39:f9:ed:5c:b9:
a3:bc:ba:dc:2e:95:d7:a1:58:c1:6a:4d:ab:ad:65:
9c:d6:1e:2d:2a:32:b6:f9:68:ef:92:95:a4:37:46:
90:5f:b4:48:d1:e7:52:37:d1:09:bb:0b:81:7e:54:
d7:ab:00:b0:6d:51:d0:d0:30:b2:52:16:b8:9d:bd:
79:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FF:0C:5B:8D:32:C2:C7:00:7A:5F:32:23:DE:FF:13:68:07:3E:C5
X509v3 Authority Key Identifier:
keyid:F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/AP8MW40ywscAel8yI97_E2gHPsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.52.0/23
Signature Algorithm: sha256WithRSAEncryption
38:9e:10:01:c2:86:9c:af:8f:20:85:06:84:87:eb:13:51:e3:
6d:8f:6b:b9:ec:cc:19:19:62:ab:80:a7:62:53:07:51:6a:7b:
41:2f:75:38:6a:13:5e:3b:0f:3a:2b:81:72:63:96:aa:b4:9d:
14:17:1b:e0:3e:8e:03:5e:02:cc:08:14:49:ad:05:91:4b:d4:
86:4b:e0:a9:3d:a2:46:ad:55:10:f9:31:8e:99:a6:58:bc:0f:
fb:dc:c2:45:bb:6e:41:7f:75:f1:6b:8f:aa:64:fe:ed:11:36:
3e:0d:da:15:3d:2f:ae:be:dd:f6:58:58:1e:65:7b:09:3a:a0:
91:07:30:de:16:04:7e:8d:2e:ec:53:bd:b1:bb:ec:6b:8d:02:
a8:b7:ec:21:d5:53:5c:36:12:c0:02:5e:b8:92:a3:2c:98:9e:
b7:6b:6d:b6:c9:30:36:88:09:2a:1c:13:96:3a:c8:54:7e:1e:
f3:3c:c2:a4:81:f0:e6:1e:e3:47:47:c6:5a:c6:64:01:ae:a5:
84:6d:5f:62:6a:ca:b2:c4:38:c2:04:fe:30:d1:74:7f:1b:e8:
7a:17:c8:80:19:ce:85:2c:62:1c:17:ee:4b:2e:a6:ec:51:1f:
ff:c3:ba:7c:ef:d2:04:d0:ac:61:eb:25:68:e0:c4:53:94:a6:
22:53:c9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:15 2024 by rpki-client on console-fra.rpki-client.org