Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/goYl-7ObuStUZTmrndrOiH3dV-w.roa
File: goYl-7ObuStUZTmrndrOiH3dV-w.roa (raw, json)
Hash identifier: x3r4fl7m+PV8VZcnMP2F+FgaAxM7J1MzOnE7L/VkQlY=
Subject key identifier: 82:86:25:FB:B3:9B:B9:2B:54:65:39:AB:9D:DA:CE:88:7D:DD:57:EC
Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial: 018790DF5E5BEF1910679899F99169A3E991
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/goYl-7ObuStUZTmrndrOiH3dV-w.roa
Signing time: Mon 17 Apr 2023 20:19:30 +0000
ROA not before: Mon 17 Apr 2023 20:19:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203059
IP address blocks: 45.91.120.0/24 maxlen: 24
91.218.77.0/24 maxlen: 24
2a13:5080::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 12 Aug 2023 08:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:90:df:5e:5b:ef:19:10:67:98:99:f9:91:69:a3:e9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Validity
Not Before: Apr 17 20:19:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=828625fbb39bb92b546539ab9ddace887ddd57ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:41:b5:fa:13:de:e4:47:c6:62:9e:16:1a:
bb:f7:9d:1d:3f:1a:61:af:a3:38:19:58:57:41:56:
7f:2f:72:5c:cf:d8:95:e9:1d:97:07:35:dd:fc:61:
f6:14:20:0c:6c:bb:02:dd:b9:d1:ee:80:e9:de:25:
80:d6:07:33:81:b5:f9:55:f3:e4:08:62:3a:8f:2b:
4b:c4:0c:f3:4a:19:51:54:4e:e4:c1:11:c4:c5:43:
6a:60:d8:67:5d:00:ae:01:41:94:d3:90:5e:1c:a4:
d9:9a:dc:74:55:37:0e:78:df:95:ad:41:0b:02:4d:
e1:17:ed:28:f1:20:04:44:6e:2d:16:0e:c5:70:47:
cc:92:4a:e8:96:a2:ec:31:15:da:13:0b:5b:42:9a:
31:11:49:c4:62:f9:bf:4d:72:82:31:47:2a:13:35:
49:8f:d2:9b:ae:4c:b1:c2:89:5b:00:2f:57:f3:7c:
b7:55:b8:59:a5:fd:1e:56:d3:2a:4f:b9:a6:85:e1:
54:f0:d4:77:04:65:e1:37:79:47:ae:87:e3:df:85:
a0:7a:0c:a8:ef:b2:55:93:7b:19:d7:0b:9a:38:08:
a0:0c:9c:c1:fb:a9:1b:9e:62:22:9c:36:14:f2:70:
e9:c2:92:76:cb:2b:61:14:fa:d5:07:c7:16:12:47:
d4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:86:25:FB:B3:9B:B9:2B:54:65:39:AB:9D:DA:CE:88:7D:DD:57:EC
X509v3 Authority Key Identifier:
keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/goYl-7ObuStUZTmrndrOiH3dV-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.120.0/24
91.218.77.0/24
IPv6:
2a13:5080::/29
Signature Algorithm: sha256WithRSAEncryption
6d:bb:a0:df:c1:f7:56:38:9f:36:df:9d:ea:19:b1:f3:1d:29:
2e:ad:5d:11:ae:c8:82:7f:2e:3e:79:d4:67:69:da:43:23:fd:
5a:d5:cd:72:f6:b5:9d:ce:43:f1:52:ae:25:fc:d9:15:38:a3:
36:59:8a:8b:c4:8f:bd:6e:9e:d7:da:af:b2:14:95:5a:54:9d:
3f:10:1e:0d:cb:bf:7c:3f:95:2f:96:37:c2:29:7e:a3:3d:2a:
ea:d4:00:a6:81:9f:8f:f7:f6:64:91:a6:6a:ad:d1:2e:c2:10:
df:e9:3c:ec:db:74:be:12:b1:ed:0c:7f:55:13:b4:fb:7a:1f:
81:c8:df:fa:9a:1e:42:bf:fb:7c:51:c8:ec:af:f1:26:23:93:
32:1a:7f:3e:73:34:a5:5f:88:b9:28:35:4e:ae:c8:0c:34:a2:
a6:ee:2a:3d:eb:13:ca:17:ac:58:4a:25:9d:49:25:7b:dd:8d:
98:99:3a:19:d8:c8:cc:c7:65:f1:22:dc:84:39:c8:57:69:9f:
d4:24:08:64:53:45:bf:e3:a3:92:d5:c9:bb:c8:3e:4b:57:ac:
49:2b:5b:9c:1b:b0:82:db:9f:9a:21:7d:d1:e2:91:a7:da:bf:
bf:fb:a9:0f:6e:9b:37:66:19:6d:26:c7:53:5b:7c:8e:2f:0f:
69:30:39:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:25 2024 by rpki-client on console-fra.rpki-client.org