Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/Eya1srz1g0tRMkLEsnhwZPE7oy4.roa
File: Eya1srz1g0tRMkLEsnhwZPE7oy4.roa (raw, json)
Hash identifier: G4WdC9vJABquy8PVq+YN74OkV46qFWz+beKZm+aKEYU=
Subject key identifier: 13:26:B5:B2:BC:F5:83:4B:51:32:42:C4:B2:78:70:64:F1:3B:A3:2E
Certificate issuer: /CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
Certificate serial: 01856D53C8351F71D25D6FF94D9AF5CE0F61
Authority key identifier: DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/Eya1srz1g0tRMkLEsnhwZPE7oy4.roa
Signing time: Sun 01 Jan 2023 12:34:45 +0000
ROA not before: Sun 01 Jan 2023 12:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50673
IP address blocks: 91.216.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:c8:35:1f:71:d2:5d:6f:f9:4d:9a:f5:ce:0f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
Validity
Not Before: Jan 1 12:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1326b5b2bcf5834b513242c4b2787064f13ba32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5f:13:50:f7:15:20:0c:65:af:c2:c4:59:31:
62:a4:c9:23:ec:3a:4a:5c:b2:60:6b:ac:88:e2:d5:
c2:b6:04:90:6a:e1:97:f3:71:82:21:40:af:75:e9:
d8:89:2e:2d:8e:55:25:a0:63:1d:32:48:3b:f5:c8:
05:db:09:56:3a:8b:81:0f:4d:12:93:56:b1:e5:61:
81:39:1b:2b:df:76:93:e6:1f:4a:64:36:b9:3e:62:
bd:ab:4f:1f:cd:ed:f3:d2:e0:b7:28:3f:e2:87:0c:
7c:31:54:bd:9a:0a:3a:2c:ff:aa:3b:5f:65:8d:78:
c6:09:f6:03:90:ec:d7:cc:e2:13:63:bd:8f:f8:e1:
8d:a4:88:73:99:67:55:94:fa:4a:d5:b4:f9:0a:15:
14:bb:d6:ea:ed:13:ed:ea:33:6b:1d:75:f6:d4:ce:
66:71:57:7d:54:04:89:97:bb:b0:b6:3c:23:11:23:
56:68:77:c0:39:94:a2:71:8c:22:e5:78:03:8c:b2:
cb:c0:28:8d:07:d2:e2:a8:79:12:81:bd:95:fb:82:
ec:36:e6:b7:bd:25:3e:4f:af:1d:73:56:6c:bd:53:
71:e1:4b:e9:c7:7b:52:c0:78:57:a6:8e:f7:70:9d:
17:2d:44:aa:b4:f7:49:8a:79:44:eb:e8:50:42:07:
8c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:26:B5:B2:BC:F5:83:4B:51:32:42:C4:B2:78:70:64:F1:3B:A3:2E
X509v3 Authority Key Identifier:
keyid:DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/Eya1srz1g0tRMkLEsnhwZPE7oy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
10:2d:1b:2a:17:af:17:c2:ec:cd:d9:30:91:12:25:4c:87:02:
88:b5:b4:9d:03:63:ad:4f:60:e8:ba:e4:52:67:06:67:b0:f4:
ab:05:98:db:ed:a5:7a:81:9e:d2:68:cb:91:7d:c7:f2:e5:c8:
91:40:9b:41:4e:3e:fb:2b:34:43:c2:50:f0:9f:e9:42:00:6e:
7f:09:32:5a:e6:b2:26:28:8f:ea:4d:d2:e3:96:36:d4:25:e7:
bb:b8:07:1e:18:94:a1:93:c1:36:56:a0:11:b1:21:9b:3d:3a:
d6:41:8b:05:8d:47:da:06:a6:ce:0e:8c:e1:9e:e9:08:a9:26:
78:2f:29:ac:4f:00:76:60:ea:4c:c9:09:07:d2:d0:a5:d8:97:
50:05:8c:93:f7:07:1c:b8:db:26:2a:75:be:7d:f5:99:12:58:
c9:7e:f4:ae:fc:fd:e8:d7:87:e6:82:96:c7:49:75:21:53:de:
09:05:37:82:b0:47:0c:26:a2:73:23:3f:f6:d7:bf:8a:b6:44:
a7:1b:d8:e1:48:48:8e:a7:66:9e:99:31:27:99:17:84:a6:ca:
77:af:27:d4:80:62:59:95:a4:c7:2e:a3:66:9d:9b:51:c8:a3:
34:b2:ce:de:e5:4c:48:85:98:de:58:fc:39:07:1a:43:ef:3a:
52:80:00:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:50 2024 by rpki-client on console-ams.rpki-client.org