Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/6j5F94x6dgEE7DygVSy0VgDVGlA.roa
File: 6j5F94x6dgEE7DygVSy0VgDVGlA.roa (raw, json)
Hash identifier: GmX+k8LpwBjEWPmC82e8vCgHWgDmR0EbkEwjwjoZpZM=
Subject key identifier: EA:3E:45:F7:8C:7A:76:01:04:EC:3C:A0:55:2C:B4:56:00:D5:1A:50
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01869ED9F680F75A70D4C2C6459A0691485C
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/6j5F94x6dgEE7DygVSy0VgDVGlA.roa
Signing time: Wed 01 Mar 2023 20:25:29 +0000
ROA not before: Wed 01 Mar 2023 20:25:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201786
IP address blocks: 91.239.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9e:d9:f6:80:f7:5a:70:d4:c2:c6:45:9a:06:91:48:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 1 20:25:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea3e45f78c7a760104ec3ca0552cb45600d51a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:ec:89:50:ae:e5:a6:db:b5:1d:58:30:06:
ce:81:d3:b7:46:1c:4f:09:40:ac:bf:8c:83:0c:d4:
80:ad:01:af:a5:41:4b:84:fc:80:59:70:36:82:50:
ff:19:a3:29:71:8b:7c:74:88:11:d5:84:af:f4:7f:
62:d0:e6:9c:4c:99:b9:77:86:62:a2:17:29:5e:2c:
08:1d:b2:6d:25:f5:9b:1b:74:cd:63:56:4a:9c:5b:
c7:7b:4f:c9:69:5d:76:00:6b:3c:71:b0:a7:0f:b9:
08:ba:4c:8f:d2:20:d0:29:6a:e8:5e:0c:07:aa:2d:
f9:8c:1f:18:6a:ab:c2:8b:a8:f7:9f:19:b0:bc:c4:
b6:b6:23:f9:51:76:ea:fb:ff:10:4f:e4:97:a5:2e:
4d:1b:70:21:74:3c:a0:fb:23:66:93:00:8b:d7:cf:
fd:ee:2e:a0:9d:a0:f4:bd:40:f7:40:47:6a:a2:5f:
d3:44:68:c7:dd:ee:da:85:cd:98:21:f8:8d:64:42:
02:52:49:9b:b6:91:93:18:ba:f5:88:81:ff:36:a9:
56:48:c8:96:09:46:c7:a7:42:97:98:1b:8f:32:f8:
48:6b:95:8e:41:d5:30:1b:75:bc:17:35:88:14:d7:
86:86:97:d7:80:f6:f8:c1:2d:8c:51:37:b0:20:e3:
90:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3E:45:F7:8C:7A:76:01:04:EC:3C:A0:55:2C:B4:56:00:D5:1A:50
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/6j5F94x6dgEE7DygVSy0VgDVGlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.227.0/24
Signature Algorithm: sha256WithRSAEncryption
21:0b:6d:b3:f7:98:2d:61:b7:d8:69:12:87:28:a8:5e:ec:57:
81:5d:06:c8:8f:74:ea:a6:24:9e:90:50:c2:5c:6f:dc:c0:53:
83:5f:8c:08:94:ae:84:92:fb:9c:7c:d7:d2:f1:72:81:78:c4:
60:9a:67:73:dc:3c:fb:5e:02:ed:90:80:77:53:3a:54:2f:af:
dc:2d:ce:27:10:d7:70:87:49:91:fc:c1:d1:cf:03:ff:23:d2:
dd:e8:f9:83:dd:37:cf:59:87:15:df:cf:d0:8b:8e:7c:a2:d4:
26:e0:cc:96:07:fb:73:74:00:bf:67:2e:ba:1d:0d:04:a0:42:
2c:12:b5:36:a0:1f:5f:a7:3c:33:a1:f3:16:47:d7:f8:66:ff:
f3:8f:27:ac:99:b3:8e:34:bd:72:34:ab:d8:67:85:de:7b:7a:
02:a5:73:75:22:5a:de:c4:79:b0:e3:e9:1c:95:6e:b9:b5:eb:
c0:5d:04:09:22:21:4e:1c:92:57:7b:32:76:53:6d:55:f1:a4:
37:ab:bb:10:44:78:9d:72:27:66:d3:eb:9a:9d:e5:01:e1:27:
49:17:7e:f0:e8:32:19:6e:1c:e6:12:d8:5b:28:eb:3d:45:4f:
8f:a8:ad:da:0c:dc:a9:41:0b:04:4a:83:53:03:ae:b8:dc:27:
bb:ee:5a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:48 2024 by rpki-client on console-ams.rpki-client.org