Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e91cd1-3d0c-454c-9e41-d7fd8f46f463/1/g1AczL8idyRzQKtPO-0OSV_hcgU.roa
File: g1AczL8idyRzQKtPO-0OSV_hcgU.roa (raw, json)
Hash identifier: kVEdHS4w8VB7LnYGDHR0Yp78nbuIFHNYuT2y/GAjRPA=
Subject key identifier: 83:50:1C:CC:BF:22:77:24:73:40:AB:4F:3B:ED:0E:49:5F:E1:72:05
Certificate issuer: /CN=5730ced8971732d36c84f55d52d32859886c8963
Certificate serial: 018570951EA32DA7413E25F134E38FC98D98
Authority key identifier: 57:30:CE:D8:97:17:32:D3:6C:84:F5:5D:52:D3:28:59:88:6C:89:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDO2JcXMtNshPVdUtMoWYhsiWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e91cd1-3d0c-454c-9e41-d7fd8f46f463/1/g1AczL8idyRzQKtPO-0OSV_hcgU.roa
Signing time: Mon 02 Jan 2023 03:44:58 +0000
ROA not before: Mon 02 Jan 2023 03:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48059
IP address blocks: 91.208.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:1e:a3:2d:a7:41:3e:25:f1:34:e3:8f:c9:8d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730ced8971732d36c84f55d52d32859886c8963
Validity
Not Before: Jan 2 03:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83501cccbf2277247340ab4f3bed0e495fe17205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:28:86:62:2b:5c:03:66:2a:9c:a2:df:54:70:
3c:b5:ff:27:01:ec:0a:7c:e4:f9:b3:6e:5f:00:84:
d8:c3:08:57:1e:81:94:45:b0:6b:0f:ec:0d:3f:ba:
dc:36:0a:83:66:25:16:3c:7d:22:f3:5f:34:3b:31:
f5:2a:cc:da:e3:ed:60:08:22:cd:57:76:55:b4:2f:
d9:48:19:d1:5b:e1:70:1f:fa:b7:e6:0e:21:bd:b2:
97:8b:29:c1:26:e0:3b:a0:4b:e8:bb:34:57:b2:a4:
c0:e3:28:5d:32:42:a7:21:b5:31:9b:0c:68:22:90:
6f:63:75:36:47:b9:ff:a7:72:66:fa:ea:18:ad:10:
79:64:3f:8e:76:ce:11:98:92:5f:ea:d8:bb:65:de:
99:d1:58:ff:e9:18:9a:85:9c:2d:65:a8:ee:86:2f:
c1:de:a8:b3:ac:b2:76:4f:20:79:d4:68:c8:d8:eb:
c4:df:53:f8:a0:e9:03:9e:11:22:00:9a:e5:d3:85:
3e:91:7f:52:c8:55:98:a8:ba:a2:49:96:e2:e9:17:
4d:4e:7b:54:6a:5f:61:aa:6b:92:0d:c4:49:0f:74:
b0:19:cd:e1:39:26:ea:17:26:ee:4d:b3:aa:ca:bd:
d8:80:33:40:47:8f:5f:f5:d5:41:2b:f1:ab:c7:41:
6d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:50:1C:CC:BF:22:77:24:73:40:AB:4F:3B:ED:0E:49:5F:E1:72:05
X509v3 Authority Key Identifier:
keyid:57:30:CE:D8:97:17:32:D3:6C:84:F5:5D:52:D3:28:59:88:6C:89:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDO2JcXMtNshPVdUtMoWYhsiWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e91cd1-3d0c-454c-9e41-d7fd8f46f463/1/g1AczL8idyRzQKtPO-0OSV_hcgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e91cd1-3d0c-454c-9e41-d7fd8f46f463/1/VzDO2JcXMtNshPVdUtMoWYhsiWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.255.0/24
Signature Algorithm: sha256WithRSAEncryption
40:98:c0:13:74:fd:b9:53:55:45:70:d4:46:2e:ca:ee:d3:8c:
75:7c:55:d8:7e:ec:84:c3:5d:a1:58:85:58:77:62:49:33:a6:
52:c0:8d:84:f2:4b:9c:ab:d3:80:ff:c6:4d:d6:17:22:b1:07:
55:c0:3d:d3:a0:29:8f:e1:37:37:a3:e9:97:02:d1:7c:de:86:
7f:87:fe:f1:4c:6f:5d:85:9d:e4:75:69:3e:2d:f7:a9:01:16:
a6:73:56:ef:10:10:5e:28:99:a2:0b:57:2e:eb:dc:eb:2b:87:
b7:10:d5:e7:aa:23:fd:85:6b:d8:f4:ec:c7:ee:7f:73:d8:ee:
50:17:e3:0f:11:47:b4:2d:b7:d3:22:83:9a:83:f7:a0:51:ad:
fc:a6:8f:e3:11:04:de:e4:e4:dc:24:aa:36:a4:68:43:83:c1:
af:b5:4a:f0:95:ef:e6:52:89:81:b6:d9:1c:48:e9:9c:fd:67:
84:2c:b2:b4:75:2d:9d:8c:c3:b8:3f:9c:6c:8a:58:91:51:e8:
d7:5f:39:66:27:aa:95:35:8a:2f:a3:c8:9d:ba:76:00:9e:73:
17:90:26:bc:2b:f0:ee:ee:1c:51:db:68:55:39:83:c9:ef:dd:
0e:f8:52:01:02:9e:57:01:2d:0b:f4:ba:ca:d0:8e:1d:9a:d4:
b3:c0:e1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:04 2024 by rpki-client on console-ams.rpki-client.org