Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/uw86U7gJOx3UIudweVSs1QDbSLg.roa
File: uw86U7gJOx3UIudweVSs1QDbSLg.roa (raw, json)
Hash identifier: gxcSheSTGM3x3H+66DAtfmGsmGi1j/9GtqX9tp03bSE=
Subject key identifier: BB:0F:3A:53:B8:09:3B:1D:D4:22:E7:70:79:54:AC:D5:00:DB:48:B8
Certificate issuer: /CN=c070ee8dc8378086960182e3309226717e83e407
Certificate serial: 0187340E238C345A13231CEE66A2E529493C
Authority key identifier: C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/uw86U7gJOx3UIudweVSs1QDbSLg.roa
Signing time: Thu 30 Mar 2023 19:45:54 +0000
ROA not before: Thu 30 Mar 2023 19:45:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45043
IP address blocks: 91.215.70.0/24 maxlen: 24
91.215.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:34:0e:23:8c:34:5a:13:23:1c:ee:66:a2:e5:29:49:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c070ee8dc8378086960182e3309226717e83e407
Validity
Not Before: Mar 30 19:45:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb0f3a53b8093b1dd422e7707954acd500db48b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:97:35:fd:e5:de:38:f2:82:5e:04:9e:19:68:
9d:e4:14:14:10:d0:e1:1c:54:e9:6b:8f:46:d4:8f:
35:11:8b:bc:1a:c9:7d:0f:9d:e8:0c:52:27:fc:36:
d0:ae:1f:90:4e:d3:2c:10:1e:16:cf:41:15:e8:95:
da:61:37:aa:a0:af:9a:dd:7e:6f:bc:89:f6:ac:17:
d8:c8:ea:66:c6:d9:71:ab:d6:4e:e8:29:bc:86:f4:
e1:fa:52:9c:48:d9:94:d9:86:56:dd:7b:62:b5:10:
95:ac:56:22:ba:98:3f:80:6a:e8:8a:e1:17:1c:19:
a0:cf:f6:92:1f:bf:be:29:67:b1:46:c4:1e:a0:1d:
6b:72:10:e8:22:57:00:09:5d:85:e5:8a:c0:27:50:
5f:c9:9e:92:7f:6a:3c:76:d4:ce:20:65:98:fb:eb:
78:b9:c8:47:22:4b:97:86:7e:d8:22:1a:52:78:a0:
0d:8b:c1:a7:c8:bc:4b:aa:44:0f:3f:b1:8f:c0:bf:
c6:f8:6c:cf:b8:b3:df:a1:58:86:2c:8a:7b:34:13:
4b:34:35:d1:f8:0c:4a:32:dd:4e:4e:91:6f:3e:dc:
65:64:5b:95:59:d0:a6:76:d1:2b:98:79:8c:8f:ec:
8b:04:09:84:b7:a3:3d:87:1e:e0:c3:5e:8f:fe:2a:
c5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0F:3A:53:B8:09:3B:1D:D4:22:E7:70:79:54:AC:D5:00:DB:48:B8
X509v3 Authority Key Identifier:
keyid:C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/uw86U7gJOx3UIudweVSs1QDbSLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.70.0/23
Signature Algorithm: sha256WithRSAEncryption
12:1c:7f:63:9a:b2:dc:4a:57:1a:e0:76:16:1c:03:f5:78:74:
ba:74:e5:1b:7b:ba:c1:b8:64:cc:c3:37:c9:9f:29:83:6d:f6:
a6:c9:2c:b9:1f:79:e9:c2:10:51:43:57:66:7f:9b:db:1e:20:
41:11:b8:44:43:8c:f4:fc:03:2c:98:c4:07:39:60:11:a7:6f:
66:39:74:2a:bd:c8:7b:89:29:92:f2:0f:5d:22:47:5d:16:24:
1d:ff:b1:64:eb:d9:ff:dc:ea:ad:b5:f6:21:f7:81:2e:de:24:
42:50:99:4b:bd:6f:60:ae:64:86:30:ab:53:8f:c5:8e:98:e8:
48:18:e6:38:d4:c3:d4:11:3f:6c:49:82:72:3e:45:e1:ab:46:
68:d5:f7:ed:6d:e5:7f:7a:98:3f:42:af:da:c3:57:66:7f:59:
64:6b:9a:61:60:00:ad:ea:bc:6a:d5:54:91:db:35:b8:8d:3e:
26:a8:1c:54:6c:48:7b:3c:ac:0b:de:93:2f:73:d2:7d:69:33:
51:8f:64:00:1c:c8:90:c5:d2:60:03:3d:b6:67:39:d7:ee:6c:
06:c0:f3:15:d1:5c:a0:93:ba:d8:b9:91:e6:79:72:c8:3e:8e:
cd:42:23:dc:f1:5b:2e:2a:24:4d:72:60:12:48:ac:d0:e3:72:
a1:74:a0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:48 2024 by rpki-client on console-ams.rpki-client.org