Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/gW1CAFGDgH-u_R9hR9wbtJoiXIY.roa
File: gW1CAFGDgH-u_R9hR9wbtJoiXIY.roa (raw, json)
Hash identifier: v1s212oqNjmq+6l00ODVmLUNnoOLO7nOCR7FYz0uSRQ=
Subject key identifier: 81:6D:42:00:51:83:80:7F:AE:FD:1F:61:47:DC:1B:B4:9A:22:5C:86
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 01870DF058CA333482854EFC72DA9688C628
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/gW1CAFGDgH-u_R9hR9wbtJoiXIY.roa
Signing time: Thu 23 Mar 2023 10:07:47 +0000
ROA not before: Thu 23 Mar 2023 10:07:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202984
IP address blocks: 91.238.98.0/23 maxlen: 23
91.203.232.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:f0:58:ca:33:34:82:85:4e:fc:72:da:96:88:c6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Mar 23 10:07:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=816d42005183807faefd1f6147dc1bb49a225c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f5:35:a5:5a:6e:6d:cf:40:f5:49:02:4c:1a:
6d:d7:42:06:77:73:51:53:c3:0b:23:f3:be:e2:c0:
90:14:26:b8:cf:88:40:d2:72:76:aa:12:66:c2:a1:
cb:87:ca:ab:13:11:c8:2b:f0:72:2d:12:f4:8b:6a:
88:dd:46:c6:ff:99:c4:a7:11:ad:ae:8a:2a:06:b0:
0a:3c:12:cb:4c:56:d8:5b:a6:81:31:54:34:3b:86:
0d:64:79:2b:72:b0:00:ff:92:c1:70:af:27:bb:d2:
d5:6d:be:1e:ce:39:4a:3b:46:b8:4c:2f:f2:da:4c:
60:df:c5:e7:df:c8:cc:9d:ae:fb:58:e6:1e:08:8c:
dc:d3:94:64:2b:38:aa:c6:15:62:f8:84:5a:6c:8c:
d7:51:e5:05:36:c8:c0:2a:a0:14:f0:8e:17:2a:e5:
3f:da:c2:57:f3:34:3f:b6:5f:73:0b:5e:74:91:3f:
fe:28:20:28:f3:ad:30:8d:c8:3f:e5:dc:2b:9e:68:
1f:04:9a:33:75:c6:ec:fd:78:fe:50:d1:52:8b:07:
98:ff:46:26:1e:ca:2d:99:67:8c:dc:ba:5f:fc:44:
0f:af:23:25:16:f8:f1:3f:49:a1:22:65:de:6b:9e:
8c:3b:cb:88:07:7d:39:f6:5b:bc:5e:1c:41:af:28:
fb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6D:42:00:51:83:80:7F:AE:FD:1F:61:47:DC:1B:B4:9A:22:5C:86
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/gW1CAFGDgH-u_R9hR9wbtJoiXIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.232.0/23
91.238.98.0/23
Signature Algorithm: sha256WithRSAEncryption
09:b3:4a:63:6d:dd:21:41:58:d2:e4:c8:a0:8a:75:41:a5:6d:
64:1c:68:fa:d8:02:34:2b:85:d7:7d:0b:56:44:70:e1:56:b5:
51:76:e7:19:e0:fd:2c:68:e4:bb:93:71:6c:75:4f:fc:61:03:
2f:d9:43:ce:2a:df:13:c8:86:fe:93:cd:0d:33:ff:79:18:81:
68:e0:e7:2f:ee:58:d6:58:dd:ad:5e:cc:39:af:9b:8f:36:2e:
af:7b:24:35:27:2c:d1:b7:62:51:af:a0:98:e1:d3:a5:73:75:
1c:dc:d7:05:fc:e7:04:c8:90:6b:43:39:8e:20:7f:76:83:65:
15:7e:f1:32:b0:cf:91:5a:c0:21:86:8f:46:57:28:c7:4b:fa:
1e:c6:e9:e9:d7:ee:79:85:ee:e9:26:08:5b:a7:cf:df:e3:30:
65:17:75:d0:8a:bf:5a:2a:23:e0:b0:5c:b3:87:e3:e6:dd:46:
d3:53:0c:dd:9c:09:93:4a:b0:e0:88:60:74:5a:4f:11:ab:31:
d7:c7:b5:89:d9:5e:7d:d1:f1:6b:14:7c:6c:dc:8a:7d:4f:21:
7d:7e:60:4b:fa:d2:a9:14:e8:d4:b1:56:3f:1f:ac:00:56:43:
89:bc:66:f2:c0:1c:33:df:0b:fd:aa:b4:7d:36:7e:5e:7f:a8:
59:8b:88:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:27 2024 by rpki-client on console-fra.rpki-client.org