Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/8oFmBJoEMxOHO-9GnwaFcwAlrFI.roa
File: 8oFmBJoEMxOHO-9GnwaFcwAlrFI.roa (raw, json)
Hash identifier: I7pW9ifsZmyIGN979obAUa296IUNl2CUQRxc8eNBg44=
Subject key identifier: F2:81:66:04:9A:04:33:13:87:3B:EF:46:9F:06:85:73:00:25:AC:52
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018679130E4C79E1E6D562E8E0038635E4F5
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/8oFmBJoEMxOHO-9GnwaFcwAlrFI.roa
Signing time: Wed 22 Feb 2023 12:22:17 +0000
ROA not before: Wed 22 Feb 2023 12:22:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44779
IP address blocks: 91.231.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Aug 2023 13:13:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:79:13:0e:4c:79:e1:e6:d5:62:e8:e0:03:86:35:e4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Feb 22 12:22:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f28166049a043313873bef469f0685730025ac52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1a:cb:13:73:e4:53:51:3a:4e:ae:dc:8a:6c:
b8:e6:34:c1:88:b3:b6:cf:91:93:5b:e1:a3:82:13:
b5:ce:fc:cf:82:c5:c8:00:36:62:23:6c:4f:49:32:
b6:c4:8e:14:05:6b:3e:b9:a3:40:9d:ba:c4:2b:e1:
f2:68:c1:df:fa:a2:4f:d9:78:c6:b8:12:e5:06:28:
e8:94:0a:e9:cf:ef:ba:e5:5b:87:b2:ee:3f:2a:3d:
69:5e:f7:77:ee:78:c0:b8:f5:39:43:70:35:df:ee:
5e:05:01:b4:94:4b:fd:1f:5f:ce:8c:90:90:80:5f:
d1:b7:a6:2d:d5:57:43:47:27:4a:1c:c1:2d:24:66:
66:2b:68:01:09:31:f4:ae:59:e5:ad:1c:2d:57:af:
88:1b:d7:ba:6f:27:b3:69:6a:80:14:51:d9:f0:82:
b3:ff:e0:33:e8:f7:39:3d:87:8e:7f:17:b5:79:a1:
76:67:7e:91:c8:08:4f:17:e2:a5:a9:be:b3:40:fe:
4c:97:3c:92:52:98:cb:f8:0b:94:07:22:76:f3:31:
eb:53:86:ce:af:27:60:97:50:74:63:1d:8d:ba:e0:
9b:65:32:85:06:2f:77:ed:fc:8f:d0:ca:65:87:02:
d5:ae:c7:3b:21:15:5a:7d:c4:68:04:7f:dc:14:f5:
a1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:81:66:04:9A:04:33:13:87:3B:EF:46:9F:06:85:73:00:25:AC:52
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/8oFmBJoEMxOHO-9GnwaFcwAlrFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.187.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:4b:c3:3f:71:28:3a:ef:09:75:1f:54:35:9d:73:ae:a6:3c:
30:dc:a6:e3:05:e1:b9:f6:b2:06:60:a7:ce:da:78:5a:79:88:
75:44:c2:33:cf:f9:73:f7:30:02:58:33:10:aa:7e:27:07:ed:
90:f6:1c:c0:e4:59:b6:c3:5f:7d:19:55:12:cb:86:56:89:fe:
a8:83:14:58:c5:dd:08:55:46:f5:ee:c5:38:2e:81:1d:04:72:
0d:ad:c4:46:fb:b4:b1:2c:3f:72:1c:cb:74:2d:de:cb:3d:f7:
32:3d:d1:7b:80:29:bb:64:6e:2b:39:e4:32:5c:67:8d:28:3e:
41:e6:32:fc:49:39:bf:da:ed:23:73:c6:5c:fb:0c:1f:2a:d0:
1f:f2:a6:dc:81:78:05:22:5d:c6:19:29:94:37:6f:00:88:06:
e0:4c:7d:53:61:73:49:ec:a3:29:76:09:e3:fd:57:dd:9e:03:
7d:ce:d9:c3:cd:8d:27:25:fb:39:b7:5e:d4:41:01:6b:f1:76:
e1:59:6a:fa:86:3d:4a:7d:3c:f5:ce:0b:fb:2f:83:67:65:e3:
c7:5c:eb:3f:16:9f:d2:79:31:aa:1e:d9:30:04:be:51:b9:a2:
e5:a1:bb:0f:c5:5d:b3:8b:eb:4e:b9:6a:26:f6:b7:fe:e0:13:
9f:9a:c8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:38 2024 by rpki-client on console-ams.rpki-client.org