Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/60AnQfYSCAsJslbE6I2yYc-GmZA.roa
File: 60AnQfYSCAsJslbE6I2yYc-GmZA.roa (raw, json)
Hash identifier: OjMKEbGkOosUiJ4XqhEdMDTzCXNdxOYv1GqlWhr/+NA=
Subject key identifier: EB:40:27:41:F6:12:08:0B:09:B2:56:C4:E8:8D:B2:61:CF:86:99:90
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018CC79528814A28766183E097AA65A6BFA7
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/60AnQfYSCAsJslbE6I2yYc-GmZA.roa
Signing time: Tue 02 Jan 2024 00:31:30 +0000
ROA not before: Tue 02 Jan 2024 00:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196695
IP address blocks: 91.229.116.0/24 maxlen: 24
91.229.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 14:53:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:28:81:4a:28:76:61:83:e0:97:aa:65:a6:bf:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 00:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb402741f612080b09b256c4e88db261cf869990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:ae:65:72:8e:30:36:3a:b1:dc:34:c6:46:
b6:af:c4:95:82:b7:57:c3:52:4f:e9:6c:e1:b3:8b:
34:c0:1f:64:e9:59:5b:f5:50:3f:4e:e4:22:c7:2d:
41:ef:0b:29:1e:8d:c0:29:0e:94:34:f2:6e:ac:b2:
bc:8b:b0:a8:ae:68:bf:8d:c9:49:1b:2a:51:6e:2b:
2f:68:6b:ad:56:2b:ca:19:4f:d9:ae:a1:24:c7:0b:
72:81:30:e7:e2:07:d5:ca:c0:73:33:f1:ee:e9:37:
b3:11:ea:bd:04:8a:b7:69:0e:98:12:ec:cc:bd:60:
30:99:07:6d:43:a1:a2:a6:25:ab:e9:71:e5:59:c3:
f2:73:4b:cf:af:1f:dc:e9:ec:db:e8:e0:70:01:3f:
9b:b6:5a:2e:27:ad:4f:35:8e:2d:ef:11:f1:7c:21:
91:f1:32:13:d7:bb:ca:84:f0:b0:e9:06:2c:05:b6:
a9:32:e9:94:d2:ef:44:4e:f6:46:93:0e:1d:40:f7:
ab:80:bc:10:12:fd:6a:c6:fc:3c:ed:ad:3d:f3:e4:
1d:5e:78:7a:52:e7:bb:36:44:a4:5b:2d:36:ec:89:
f1:27:8c:d7:0e:66:59:aa:52:92:52:d0:80:b1:b4:
da:d5:72:8a:f1:7b:de:76:56:d1:ff:a4:6a:a4:e9:
8c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:40:27:41:F6:12:08:0B:09:B2:56:C4:E8:8D:B2:61:CF:86:99:90
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/60AnQfYSCAsJslbE6I2yYc-GmZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.116.0/23
Signature Algorithm: sha256WithRSAEncryption
49:0a:61:70:5b:40:22:2c:0a:c5:6d:53:36:1a:e8:54:ef:b9:
03:7b:b4:7d:7c:62:2e:b8:4d:0e:cd:13:5c:5b:f9:69:0c:14:
2c:e8:72:aa:fb:21:61:2e:cf:25:d8:27:c1:65:c6:6e:d3:80:
fa:f5:af:67:0f:3c:63:f3:ac:d7:df:53:62:8c:ad:c4:df:b9:
64:89:18:3f:7e:81:af:88:32:cc:3f:af:59:ec:7d:03:94:1b:
43:21:c8:85:39:4f:9d:2f:e0:20:06:a6:9d:1f:24:0f:c0:47:
c1:90:23:27:1a:ca:44:1c:b2:df:82:e9:a0:57:3c:51:9d:2f:
99:1a:36:fe:ad:e3:ce:47:08:17:72:c1:62:b4:de:c1:3e:7e:
db:bd:9f:be:8b:35:26:24:fe:c8:7b:85:0f:dc:c5:93:63:5d:
49:0f:98:cf:9e:fb:84:38:78:f5:e9:a8:7b:c3:8f:79:18:23:
44:3c:84:b9:ab:5d:54:a1:26:00:29:06:f9:95:97:1b:a3:bc:
47:6b:31:e9:84:34:c0:b5:ff:94:b0:aa:eb:f4:c1:c0:da:53:
31:3c:1c:ef:a4:e1:01:84:20:19:ba:ab:e4:06:7e:b4:ac:d4:
77:64:5c:e7:b7:12:ae:cb:00:a2:fb:7b:ed:f8:0b:fd:98:30:
46:d4:c7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 18:09:37 2024 by rpki-client on console-ams.rpki-client.org