Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/i6zxk5dZrpiY1SP0MTzTt1EcGNE.roa
File: i6zxk5dZrpiY1SP0MTzTt1EcGNE.roa (raw, json)
Hash identifier: izS/j7KYwb7SJ/dD7F14XaKmGAfO9k/WpfogXIk1uGM=
Subject key identifier: 8B:AC:F1:93:97:59:AE:98:98:D5:23:F4:31:3C:D3:B7:51:1C:18:D1
Certificate issuer: /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Certificate serial: 018570FB9D081AB6ABAFA6E196E14B4D24E6
Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/i6zxk5dZrpiY1SP0MTzTt1EcGNE.roa
Signing time: Mon 02 Jan 2023 05:36:56 +0000
ROA not before: Mon 02 Jan 2023 05:36:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51815
IP address blocks: 91.226.177.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:9d:08:1a:b6:ab:af:a6:e1:96:e1:4b:4d:24:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Validity
Not Before: Jan 2 05:36:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bacf1939759ae9898d523f4313cd3b7511c18d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:e1:a0:6b:19:05:83:96:01:f1:52:d7:43:
96:79:74:95:45:5a:75:48:24:1d:3e:33:11:b4:1d:
66:68:ab:3b:15:c3:62:30:9e:65:33:18:21:9e:40:
d6:77:b4:e4:7e:ad:8c:38:76:4e:c0:8a:fe:0f:e3:
ca:c0:e2:3b:a0:b9:12:92:d4:b9:46:c4:1e:78:e0:
90:ea:49:20:4e:a4:e1:65:7c:c2:bf:71:c3:fa:d3:
79:4e:92:76:6d:d9:de:43:88:f7:f0:68:5a:ef:49:
89:21:1b:7c:16:16:8f:85:91:ca:e5:3b:59:5d:08:
84:8e:14:60:fa:36:1a:e3:3c:1f:40:f6:9b:af:7f:
5a:4c:8c:a1:c6:43:e3:b0:b4:0f:0d:1d:cd:8e:b2:
f2:1b:0e:6e:81:a8:5f:cc:51:f1:c5:02:c2:96:46:
d3:7a:16:84:90:63:87:22:87:ae:d6:ed:9d:4d:e0:
d0:ec:db:e2:c8:48:2f:0e:37:d9:87:a1:cc:e4:fa:
9a:33:c0:c4:05:3f:90:a4:19:d6:77:48:cc:a0:e3:
9a:30:5f:c9:78:6d:f6:b8:17:60:20:0f:df:c7:c2:
47:5a:35:1a:7b:02:f5:01:78:bd:f6:dd:66:33:34:
59:da:23:2f:fd:f5:1e:c8:4c:14:fe:c7:2a:f0:65:
71:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AC:F1:93:97:59:AE:98:98:D5:23:F4:31:3C:D3:B7:51:1C:18:D1
X509v3 Authority Key Identifier:
keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/i6zxk5dZrpiY1SP0MTzTt1EcGNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.177.0/24
Signature Algorithm: sha256WithRSAEncryption
65:b3:5d:15:78:b3:fa:b9:20:e4:9f:1d:df:ed:d2:f2:1e:7d:
28:6a:d0:2f:8f:4a:e3:fd:a8:7d:7e:93:34:24:b5:b9:64:9a:
36:01:d7:37:3a:9a:8d:85:d5:9d:03:e3:d7:12:45:b0:ec:84:
63:18:3d:ef:10:82:8b:1b:29:90:f2:91:6c:97:97:00:9b:c8:
6a:08:12:a3:2e:23:87:54:5b:21:0c:3a:d5:0a:7a:58:f7:47:
6a:43:47:e3:43:ac:7b:0e:a5:f3:cb:78:18:f6:d7:b8:5e:00:
c6:fc:e9:9b:c3:bc:c4:5e:89:1e:34:3b:aa:d1:6e:60:17:c0:
f8:79:88:ce:55:72:a4:c7:07:e3:b7:b8:11:86:4c:55:8b:64:
a5:dd:db:b7:48:78:57:45:e1:d6:f1:d3:23:16:f5:eb:29:05:
b0:fe:a1:d1:41:45:33:2c:da:c1:40:34:20:29:d8:f3:cb:0b:
c0:af:40:8c:b5:e5:7a:c6:74:fb:8e:05:d8:ed:54:6d:c3:da:
46:e2:48:0f:20:b3:f5:5a:d8:9e:40:de:2f:da:7a:fb:ae:0c:
f9:6c:a6:c2:c3:1c:75:ff:5d:da:fb:45:c9:43:23:c4:e7:35:
56:f7:c8:ca:af:cf:1b:f9:be:39:01:a6:ba:20:4c:d3:b5:2a:
be:11:24:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:41 2024 by rpki-client on console-ams.rpki-client.org