Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/N54AkXgQ1xCNROltYZkaYjxzCwA.roa
File: N54AkXgQ1xCNROltYZkaYjxzCwA.roa (raw, json)
Hash identifier: KVs1u+woBSMCPhnfP/Wt7Vej0VH7pSS0xyFtS1PtA+E=
Subject key identifier: 37:9E:00:91:78:10:D7:10:8D:44:E9:6D:61:99:1A:62:3C:73:0B:00
Certificate issuer: /CN=7701ee4c1a226f9f62429f35756a78980a5b457a
Certificate serial: 01856E1461713A6E3850D85348C5D0000E11
Authority key identifier: 77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/N54AkXgQ1xCNROltYZkaYjxzCwA.roa
Signing time: Sun 01 Jan 2023 16:05:07 +0000
ROA not before: Sun 01 Jan 2023 16:05:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204635
IP address blocks: 91.213.37.0/24 maxlen: 24
185.244.196.0/22 maxlen: 24
2001:67c:26ac::/48 maxlen: 48
2a0d:3d80::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:61:71:3a:6e:38:50:d8:53:48:c5:d0:00:0e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7701ee4c1a226f9f62429f35756a78980a5b457a
Validity
Not Before: Jan 1 16:05:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=379e00917810d7108d44e96d61991a623c730b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:73:10:f0:f8:42:aa:61:78:7b:d6:80:bb:
10:b5:35:61:88:05:58:78:3c:03:ba:12:83:68:cb:
49:38:8f:06:11:71:ac:92:e1:2b:ed:06:5c:50:00:
8a:56:49:ab:92:fe:5f:d7:3b:c2:7c:18:3c:f0:f8:
ca:77:f1:1c:6c:ec:d5:23:68:33:f8:05:88:3b:4b:
07:10:1f:9c:bf:1d:83:56:b2:51:b8:3d:c5:28:f0:
dd:ef:83:14:3d:76:5c:d1:d3:63:21:d1:cc:dd:ed:
75:d8:f0:c3:cb:a7:e9:2d:8c:2c:b6:3c:bc:27:89:
2a:bf:0c:64:5b:c0:61:3d:dd:2b:60:d4:8b:25:67:
99:7d:de:5a:1d:44:ce:d8:2a:0a:31:0e:9c:2a:35:
4a:de:10:b8:32:67:d7:24:55:9d:92:25:a9:bc:34:
b3:80:f9:c7:c4:2f:60:29:5f:08:95:c4:ca:9a:b7:
5e:05:94:b3:23:c2:8e:45:e3:37:df:55:ec:90:a8:
58:08:e9:6d:4b:06:00:82:cf:16:34:b5:82:4f:66:
36:bb:c3:72:19:58:d3:a6:d6:b1:12:17:c3:61:27:
fe:77:f1:a0:d4:ad:e5:09:4c:bd:2e:db:36:66:eb:
d7:41:49:64:c6:5e:80:70:d6:eb:95:38:59:43:78:
fc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9E:00:91:78:10:D7:10:8D:44:E9:6D:61:99:1A:62:3C:73:0B:00
X509v3 Authority Key Identifier:
keyid:77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/N54AkXgQ1xCNROltYZkaYjxzCwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.37.0/24
185.244.196.0/22
IPv6:
2001:67c:26ac::/48
2a0d:3d80::/29
Signature Algorithm: sha256WithRSAEncryption
50:70:fb:e6:29:7a:0b:f3:1c:aa:f5:65:12:14:60:7f:77:87:
ed:f1:8a:74:ad:b0:0f:f9:14:c4:3b:88:67:34:51:e7:1a:7e:
93:6a:4c:d5:36:cf:99:c4:55:9f:09:2c:48:0f:9e:98:8c:9f:
4f:9a:49:b2:25:db:b6:45:3f:0c:1a:8a:88:54:a4:e0:b9:5a:
dc:71:14:14:0c:80:57:36:76:f5:2e:ef:8b:46:7a:7b:9a:57:
7a:ff:47:f5:15:07:a1:69:43:7b:17:a8:0d:9b:6d:55:0c:70:
5b:b6:e5:db:70:f6:c3:80:5b:d8:57:ea:0b:81:3e:23:5c:5a:
74:83:8a:31:f4:91:53:27:3e:60:d0:1f:2d:27:54:20:55:f3:
cc:b6:c8:01:55:5b:95:9d:02:27:81:96:23:ca:03:95:ac:d1:
9b:a7:ab:61:e9:01:73:89:05:3f:bc:2b:28:e3:19:ff:c2:49:
97:cd:dd:94:33:6f:13:30:b3:1a:77:49:37:56:2a:15:d5:71:
55:20:a2:50:82:d7:19:2e:a0:b5:87:42:17:27:73:77:1a:62:
41:e9:d1:d8:36:13:a4:46:71:4f:d9:64:d9:3b:18:16:70:4f:
90:f3:0c:f6:22:2b:b1:3f:32:26:74:3b:5a:01:bc:1e:1a:d4:
94:28:58:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:37 2023 by rpki-client on console-ams.rpki-client.org