Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/CtcOfRYl2dGQq07hVtvQzVMRHGk.roa
File: CtcOfRYl2dGQq07hVtvQzVMRHGk.roa (raw, json)
Hash identifier: kGgluG4IIMY8DXYnubDJt0f8HvCbYec0yKwFDp+qVLc=
Subject key identifier: 0A:D7:0E:7D:16:25:D9:D1:90:AB:4E:E1:56:DB:D0:CD:53:11:1C:69
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0186C507E02CF1E6DAE7C2A41A49CC1725BB
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/CtcOfRYl2dGQq07hVtvQzVMRHGk.roa
Signing time: Thu 09 Mar 2023 06:21:13 +0000
ROA not before: Thu 09 Mar 2023 06:21:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 91.234.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:07:e0:2c:f1:e6:da:e7:c2:a4:1a:49:cc:17:25:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 9 06:21:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ad70e7d1625d9d190ab4ee156dbd0cd53111c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5f:ca:f1:09:76:72:95:8d:03:3e:62:f4:d3:
f3:75:30:11:f2:09:38:93:2e:5c:26:32:73:41:f0:
7e:26:ed:62:82:9d:c2:3e:87:2f:13:d5:7d:06:63:
af:42:0d:b7:c7:73:01:c3:e3:58:31:6c:11:28:1a:
cb:91:86:76:a2:52:bf:d8:1c:1d:8d:ba:8f:da:af:
a7:6c:cf:97:7a:57:7d:70:f0:71:41:04:00:2d:1a:
74:25:a3:81:a1:aa:2f:79:ee:75:c2:0a:b7:d7:b8:
00:35:5a:ed:28:e8:af:a7:59:8d:5a:7f:fa:50:f8:
97:44:dd:1b:4b:c1:66:ec:db:40:49:3f:62:cc:62:
e6:d7:03:49:06:42:8d:6e:44:98:70:38:11:de:c7:
2d:cd:04:cb:eb:ad:61:14:51:b4:cf:15:5f:e1:3a:
56:55:e4:31:be:93:db:d2:15:fe:2e:7e:1a:fb:95:
eb:a8:98:49:50:1e:41:b4:f6:b5:32:0e:7f:cf:dd:
dd:18:10:ff:f1:7d:a8:e3:31:d2:a6:c6:4b:88:21:
a5:32:2e:cb:c7:51:26:90:78:2b:29:45:75:90:d2:
45:22:e8:c3:ff:a9:09:64:64:ca:e8:b0:7e:87:75:
a9:41:55:81:35:aa:8f:a9:9f:83:07:32:bc:83:5b:
47:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D7:0E:7D:16:25:D9:D1:90:AB:4E:E1:56:DB:D0:CD:53:11:1C:69
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/CtcOfRYl2dGQq07hVtvQzVMRHGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.254.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ff:51:15:34:86:78:c6:51:95:d8:8b:f6:86:1d:02:88:c7:
d6:b3:b0:9d:dc:e7:dc:6e:64:a2:79:e5:41:8b:5f:eb:cb:b4:
5a:e9:ee:62:3d:ef:c4:dc:96:ec:6f:40:41:3e:01:d8:a8:15:
7e:26:e1:60:6e:49:19:a7:ff:10:ed:19:2c:4f:57:70:e2:66:
41:b1:5a:1b:e2:a9:b6:a8:98:9a:e1:72:bb:fc:8c:0a:a6:b4:
61:61:7e:0d:b0:f8:10:25:9b:77:5d:10:05:f0:4c:02:6e:04:
8b:43:2c:86:6a:5c:1c:c2:5a:36:96:79:55:e9:6f:10:a5:f6:
2a:b2:91:47:78:0f:96:96:8e:42:fe:76:c0:0b:de:35:06:82:
28:ec:d9:08:95:9a:16:4d:2d:28:19:cf:c2:cf:c2:de:20:63:
57:33:48:62:8d:e6:32:4e:39:94:79:9a:a4:5a:a3:ba:06:16:
b7:b9:15:dd:bc:5e:6c:d3:93:7a:c3:17:1e:9e:80:4b:ed:11:
5c:3b:87:18:c8:3f:ec:35:a6:0c:3b:7a:53:fd:fa:14:ad:bc:
ab:2a:cd:27:3d:76:d2:2e:15:1b:3d:86:f6:56:71:f8:42:a9:
82:75:c3:76:84:4d:ed:57:2a:98:fe:2f:a3:01:42:c6:c6:c8:
a8:f1:6d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:38 2024 by rpki-client on console-ams.rpki-client.org