Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/EYx6fVK9tjkEWJuj31KYE6EVUTY.roa
File: EYx6fVK9tjkEWJuj31KYE6EVUTY.roa (raw, json)
Hash identifier: GqY1eKoYeWFXqJZHFUJQ/i+Hxbi1+ZvqJPSKK2tEp60=
Subject key identifier: 11:8C:7A:7D:52:BD:B6:39:04:58:9B:A3:DF:52:98:13:A1:15:51:36
Certificate issuer: /CN=de87d35bdcab123affc1a91d1736867969709a23
Certificate serial: 0185A4D200615F9932445C34F39CFB5D9372
Authority key identifier: DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/EYx6fVK9tjkEWJuj31KYE6EVUTY.roa
Signing time: Thu 12 Jan 2023 07:11:44 +0000
ROA not before: Thu 12 Jan 2023 07:11:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43399
IP address blocks: 91.194.226.0/23 maxlen: 24
91.218.132.0/22 maxlen: 24
212.233.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a4:d2:00:61:5f:99:32:44:5c:34:f3:9c:fb:5d:93:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de87d35bdcab123affc1a91d1736867969709a23
Validity
Not Before: Jan 12 07:11:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=118c7a7d52bdb63904589ba3df529813a1155136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:85:5a:10:59:be:77:67:8e:4b:f7:bb:e9:1c:
d5:8a:69:09:a1:d8:83:f3:5b:55:60:70:0d:47:3f:
71:e8:fa:cd:90:96:8e:af:f1:06:62:fd:75:5f:55:
22:11:cc:f0:b4:cc:ad:23:8f:9b:32:62:dc:89:a6:
6b:a6:a9:ae:79:4c:b2:d2:32:90:db:92:26:8a:0e:
34:98:b4:2f:4c:33:14:09:40:f2:a5:6d:6d:bf:72:
e9:3f:4c:9f:6f:c3:4c:c7:b3:c3:71:b7:8e:35:bb:
1a:6b:90:d3:90:66:ce:f0:a9:d0:d9:80:73:d4:70:
5d:3e:7a:52:5a:bc:14:b0:0f:e2:5e:f5:32:85:21:
84:0d:9b:d3:9d:7d:6e:b6:8f:86:88:cc:21:5e:db:
e1:a9:58:f8:f9:a8:a1:9c:57:b9:25:d3:2f:9e:ab:
f6:7c:0b:f5:7a:01:01:1a:4e:db:78:7d:e6:79:e0:
92:98:5e:f2:c3:e0:d4:19:01:80:a9:03:d3:48:f8:
87:fc:bd:8a:ba:ea:8c:03:00:3f:80:16:78:4f:19:
e0:43:c7:98:bd:f0:94:90:4b:b9:e4:8d:e1:ef:d8:
3e:ca:44:4e:c6:9c:88:94:57:fd:06:94:d3:be:10:
04:b1:54:60:0b:3e:63:2f:b8:ad:29:b5:23:3e:4e:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8C:7A:7D:52:BD:B6:39:04:58:9B:A3:DF:52:98:13:A1:15:51:36
X509v3 Authority Key Identifier:
keyid:DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/EYx6fVK9tjkEWJuj31KYE6EVUTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.226.0/23
91.218.132.0/22
212.233.80.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:4c:66:0a:18:1e:b5:e4:8d:03:36:41:4f:85:0e:8f:b1:78:
9d:c9:44:90:64:9d:99:02:49:ef:fa:99:8a:bb:d2:91:98:81:
9b:1b:5a:91:9f:2e:2d:35:43:39:a0:16:ee:0d:1f:3a:c8:07:
e3:43:8a:30:db:6e:f6:22:27:28:d1:5d:f5:d6:8f:5f:61:62:
21:89:1d:6b:46:e5:6f:21:69:16:d9:23:6f:a5:f2:20:85:65:
f8:c7:30:2c:77:e1:5d:c4:d8:e6:04:41:c1:03:a5:d4:43:84:
1d:43:7f:26:a2:6c:aa:2d:86:32:e9:91:a8:c7:b7:ad:a9:d1:
eb:c6:ca:74:60:13:5f:c6:82:cd:21:be:68:d4:8f:df:d5:26:
dc:87:8a:3f:cd:37:7d:73:1e:f2:1f:67:d5:c5:96:14:5d:30:
82:e8:86:33:b7:ae:49:e3:10:95:56:fc:e0:fd:23:af:22:90:
8b:48:ca:0b:c1:e4:ff:4a:b5:51:0b:57:ec:ea:8b:04:66:16:
be:21:54:4b:6a:cf:05:2c:3c:18:0b:32:bf:7c:d6:b6:a6:28:
d0:4f:7d:90:0b:4f:ef:00:3d:7f:22:ff:e4:4d:ba:7e:56:3f:
cf:5e:6d:d5:93:38:86:4f:7a:60:0a:3b:a9:a7:d6:a9:d5:87:
47:fb:93:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:50 2024 by rpki-client on console-ams.rpki-client.org