Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/hJKTslq8D5RBScv97zQm98JBXAE.roa
File: hJKTslq8D5RBScv97zQm98JBXAE.roa (raw, json)
Hash identifier: EdiDqsJFsRUf3hnbP4b+0k2KwnUwkI1xgQ5GmonE3Dc=
Subject key identifier: 84:92:93:B2:5A:BC:0F:94:41:49:CB:FD:EF:34:26:F7:C2:41:5C:01
Certificate issuer: /CN=5d370a48b59fb811495f11c49734482f22b1a392
Certificate serial: 018644C553E719BFD598B5EBD6C7D5605E23
Authority key identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/hJKTslq8D5RBScv97zQm98JBXAE.roa
Signing time: Sun 12 Feb 2023 08:37:07 +0000
ROA not before: Sun 12 Feb 2023 08:37:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212384
IP address blocks: 91.226.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Jul 2023 12:55:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:44:c5:53:e7:19:bf:d5:98:b5:eb:d6:c7:d5:60:5e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d370a48b59fb811495f11c49734482f22b1a392
Validity
Not Before: Feb 12 08:37:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=849293b25abc0f944149cbfdef3426f7c2415c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:b5:8b:54:08:f7:4a:07:68:8d:07:a4:90:
95:9d:69:a7:5c:f6:dc:2e:f5:9b:f2:f7:79:2d:cd:
8b:38:57:db:e4:54:ab:32:3d:19:9d:e7:70:5e:31:
11:71:12:41:90:c5:df:d3:d0:bb:cc:72:2c:81:b0:
1d:d4:61:7f:72:7f:f0:d6:a0:1d:6b:35:06:11:44:
07:0e:16:b0:ab:ae:7b:78:bc:70:5e:dd:5e:7a:e5:
d0:e6:4c:7a:dc:fc:59:36:d0:f6:a5:e0:ad:8e:8a:
2d:1f:cd:3a:72:04:73:21:ab:8e:32:6a:49:ee:30:
aa:23:b1:03:53:2f:ac:f3:45:7d:38:44:3c:7d:93:
45:e2:c5:38:b4:91:f3:70:21:75:52:25:b8:95:8e:
3f:4c:65:ef:21:38:0d:0f:6f:97:72:0f:cd:30:4d:
5d:15:b9:67:4c:b3:f3:d6:3f:63:0f:73:27:85:22:
8b:ce:04:bb:3e:c5:c1:f3:95:86:35:07:67:e5:8b:
fe:68:89:0c:5d:27:7c:a2:0a:4a:ab:64:a7:e9:8a:
1c:d4:91:28:f4:e8:f3:69:4d:e4:2e:fb:33:ae:af:
4b:ae:e1:91:6b:b2:14:22:83:58:78:c6:db:c3:ba:
13:e2:e3:bd:76:fd:81:21:c6:b8:0d:74:6c:c3:74:
c4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:92:93:B2:5A:BC:0F:94:41:49:CB:FD:EF:34:26:F7:C2:41:5C:01
X509v3 Authority Key Identifier:
keyid:5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/hJKTslq8D5RBScv97zQm98JBXAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.97.0/24
Signature Algorithm: sha256WithRSAEncryption
59:c3:10:f8:07:5b:7b:ab:3d:ce:ac:aa:3c:ee:3f:3e:87:8b:
b6:7b:d9:a1:dc:23:f3:fc:08:c1:69:dc:92:b7:12:04:2f:55:
71:30:16:d5:b5:0a:c2:79:65:73:bb:83:b7:02:0d:98:9c:32:
38:25:82:9a:3f:24:43:cd:cf:4e:c5:9f:22:74:da:d8:0a:9f:
90:76:87:b5:8b:3f:75:4e:91:3f:b3:d9:94:95:0f:58:0f:c5:
40:5b:5d:ab:a6:90:3a:b1:24:46:d6:85:4a:80:ac:18:c3:1b:
d0:f8:c6:44:4f:81:28:af:a2:1a:bc:00:78:01:d1:e2:fb:aa:
7f:92:fb:63:ea:e0:6d:ff:38:dc:3b:ad:f9:e7:ef:53:4f:3d:
2d:4a:37:25:ef:1e:f8:f9:7d:89:84:2b:97:26:e8:88:06:53:
01:28:27:57:07:da:a2:2b:ba:e6:42:49:38:c3:c3:18:ff:f2:
ce:a6:4f:1f:54:f6:1e:03:44:7d:91:99:33:37:13:f5:03:cd:
3d:da:7c:27:3a:45:39:6c:be:e3:68:8f:70:c0:e3:c7:8e:e6:
e8:04:c0:05:6d:7d:3f:59:b2:ab:c2:5e:ce:f0:b6:1c:21:05:
a0:44:22:aa:3d:4e:ee:84:8d:bd:3b:a1:2a:0b:91:fe:84:87:
99:05:e6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:45 2024 by rpki-client on console-ams.rpki-client.org