Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/rkaJwcUpnsWmdq-5LB-vhG4iMOM.roa
File: rkaJwcUpnsWmdq-5LB-vhG4iMOM.roa (raw, json)
Hash identifier: qRG8ja2iyfYqDbYztlp+PdtRDddvBsQSdfm/PiNjUmw=
Subject key identifier: AE:46:89:C1:C5:29:9E:C5:A6:76:AF:B9:2C:1F:AF:84:6E:22:30:E3
Certificate issuer: /CN=af85bb8a50443e504c4853cce025ef58341c1d50
Certificate serial: 01856C25AA822E2EFF969E5561D091F5698B
Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/rkaJwcUpnsWmdq-5LB-vhG4iMOM.roa
Signing time: Sun 01 Jan 2023 07:04:45 +0000
ROA not before: Sun 01 Jan 2023 07:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34376
IP address blocks: 91.199.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:aa:82:2e:2e:ff:96:9e:55:61:d0:91:f5:69:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50
Validity
Not Before: Jan 1 07:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae4689c1c5299ec5a676afb92c1faf846e2230e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:f1:04:9b:e6:1a:03:dc:44:94:be:b8:32:
39:00:df:09:f5:49:a3:0b:36:ef:2c:cc:b9:2c:f2:
02:e3:a2:19:c7:ed:fd:ee:cd:28:38:96:19:e9:02:
7d:21:02:f1:da:20:78:4c:08:f3:23:62:97:80:f4:
7a:e3:4c:3d:fc:6b:83:2a:7b:c1:25:97:f5:2e:f7:
02:28:50:8e:2f:fb:d9:29:24:9c:e6:72:b9:c8:07:
d8:ad:20:d6:89:6d:21:26:75:c5:98:97:72:2d:eb:
6a:97:75:66:2d:19:62:07:98:10:5e:2a:11:da:e5:
06:3d:9f:ee:65:bd:38:f2:c9:ff:33:72:1f:8e:41:
77:9d:f4:51:e8:b7:7a:4e:78:b5:34:85:50:e8:42:
59:73:90:12:d0:08:69:76:90:1e:c7:10:cd:2e:fd:
de:8f:ed:c9:f3:11:8a:54:68:22:8c:7c:be:55:60:
9b:a5:ad:ff:68:d6:a2:f4:a5:41:05:da:36:08:e9:
b8:e7:69:7f:93:02:01:fa:69:96:31:e6:0b:3e:39:
17:90:40:2f:83:48:a3:69:18:08:02:5e:67:6d:1d:
78:58:9c:3d:8c:9a:2d:4e:de:06:e9:03:c0:b0:53:
7a:07:62:7b:68:f9:31:21:d4:ea:e6:8e:b5:98:83:
f4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:46:89:C1:C5:29:9E:C5:A6:76:AF:B9:2C:1F:AF:84:6E:22:30:E3
X509v3 Authority Key Identifier:
keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/rkaJwcUpnsWmdq-5LB-vhG4iMOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.128.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:c7:79:f3:10:23:f3:f0:bf:6c:3a:6b:0b:4c:9a:1e:89:26:
10:20:a6:a3:41:fc:82:62:12:f5:82:9d:bc:a9:1d:21:2d:d8:
04:0a:73:54:a8:ee:b8:20:ab:df:a0:90:f4:8d:28:80:c9:73:
6a:a6:12:15:6d:cb:0c:95:62:f4:31:de:aa:c4:9b:f7:c6:bf:
af:72:18:e2:02:08:d3:bc:34:db:bb:1f:36:16:14:1b:49:20:
c1:43:16:ea:95:a8:ca:cd:a7:70:b1:14:d0:ff:3f:da:9e:9c:
8e:81:24:91:41:8f:c8:40:2f:b7:86:78:cd:13:2f:d4:36:24:
3c:e9:23:3e:93:6c:64:ba:e8:68:d4:16:a1:00:cb:9b:06:ca:
0a:16:38:c1:d1:f2:72:e6:82:0f:1f:25:d0:b5:cb:42:2f:ee:
e3:61:1e:d9:9f:bd:60:fd:0e:e3:86:4e:6e:a3:67:0a:d8:fd:
9f:c8:39:ba:66:e2:eb:60:a1:37:62:7c:28:66:44:9e:ad:96:
84:d8:03:bf:ab:f4:eb:01:39:0a:73:7e:02:ff:0d:40:61:f3:
02:72:ca:c4:cd:e6:d9:da:c3:cf:91:b1:0d:32:be:f0:f8:68:
8b:38:67:58:72:7a:f3:89:2c:06:f2:82:3b:5b:4c:47:d4:0c:
54:d0:91:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:07 2024 by rpki-client on console-fra.rpki-client.org