Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/WzBlsG4qno8GIaxwlGU559G9v1g.roa
File: WzBlsG4qno8GIaxwlGU559G9v1g.roa (raw, json)
Hash identifier: nGHy0nhcQAScFCfg0kP9uvIbUCOcwnUewoHgMz8SGpY=
Subject key identifier: 5B:30:65:B0:6E:2A:9E:8F:06:21:AC:70:94:65:39:E7:D1:BD:BF:58
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 01856F14A7ED9137464134911AE94BCD984C
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/WzBlsG4qno8GIaxwlGU559G9v1g.roa
Signing time: Sun 01 Jan 2023 20:45:02 +0000
ROA not before: Sun 01 Jan 2023 20:45:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35381
IP address blocks: 91.207.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:a7:ed:91:37:46:41:34:91:1a:e9:4b:cd:98:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jan 1 20:45:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b3065b06e2a9e8f0621ac70946539e7d1bdbf58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a8:ed:d9:28:b8:4e:50:24:c8:65:35:fb:3d:
07:62:62:91:d6:cf:05:fd:75:95:ae:34:b8:63:af:
f5:d1:cf:2c:c9:70:94:84:3f:54:51:47:a9:1c:e3:
e3:8c:5e:77:63:81:3c:d7:74:4c:9b:3b:a2:f9:19:
a1:d5:50:63:fb:ef:43:a1:e6:35:00:21:40:14:14:
e4:26:15:2c:21:61:1f:2b:e5:12:56:b0:53:8c:2c:
63:b2:24:e9:01:8e:2c:94:ec:5f:6e:b9:69:a8:4f:
e7:9a:ac:09:30:c3:03:03:95:ed:0a:75:6b:ca:d5:
e4:d5:4e:d3:2b:41:f2:80:7d:7d:c3:23:dd:68:c4:
49:3c:dc:cd:95:90:1f:c1:70:6f:62:c1:c2:81:f0:
70:cc:1f:f4:17:6d:9e:f9:04:d9:88:cb:fd:b9:1a:
5a:66:5c:f9:ea:7b:3c:6e:58:dc:4e:1d:d2:90:61:
e7:b9:50:8b:7e:0a:1c:11:8b:20:9b:f9:5d:aa:7f:
24:60:a2:c7:7c:e0:d0:65:aa:1e:bb:44:b8:c7:1f:
aa:e7:07:ab:f0:24:c7:4a:18:37:68:d2:07:44:df:
f8:dd:f2:0f:0a:44:db:d8:b1:70:7c:82:f5:46:4b:
c1:66:3d:a1:f5:f9:a5:c9:03:90:3f:02:87:11:79:
98:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:30:65:B0:6E:2A:9E:8F:06:21:AC:70:94:65:39:E7:D1:BD:BF:58
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/WzBlsG4qno8GIaxwlGU559G9v1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.107.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:aa:f6:ec:2f:90:68:84:4b:15:22:21:03:f6:58:c4:99:c1:
ae:ff:43:bc:b4:99:a5:57:93:ae:2c:60:3d:c1:67:76:65:45:
bc:2f:bf:e9:a7:7e:32:62:57:34:e4:af:ed:7e:c0:2d:90:be:
2b:d4:c4:14:33:77:05:76:e8:73:a0:95:8c:9a:2f:59:fe:b5:
5e:8d:49:80:d7:5f:b8:44:8e:b1:09:64:b7:6d:37:e6:be:e5:
8b:60:36:04:ee:29:b3:17:ed:80:b3:77:e5:78:6e:ee:45:9b:
53:54:6e:d5:19:8c:5d:73:54:d6:56:ec:6d:5c:78:4a:c8:9c:
2c:94:bf:c2:5a:bd:f5:cc:43:7a:7b:09:c1:60:0b:ff:3d:22:
23:a0:f8:0a:2d:a2:65:c8:42:72:64:ea:8f:23:b2:4f:3c:f6:
6c:dd:d2:a2:87:7e:79:8a:2f:a6:df:df:0e:c9:d9:d8:56:c3:
05:3b:42:d4:6b:e7:53:09:ee:e5:ca:27:f8:49:79:11:e9:24:
cc:25:82:16:95:1c:6b:ff:64:fb:11:25:af:ad:8a:92:81:73:
a1:22:d2:d9:a9:6b:44:58:84:ed:97:50:fa:39:eb:2e:5d:53:
cb:d3:5b:b9:53:b8:d4:c5:8a:99:61:97:53:fe:b1:e3:26:a6:
f4:55:ff:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:53 2024 by rpki-client on console-ams.rpki-client.org