Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/JAHCG0qPqGCdHBDzbSBhXOJvZ9A.roa
File: JAHCG0qPqGCdHBDzbSBhXOJvZ9A.roa (raw, json)
Hash identifier: H9/0UYQezGjrLnEd1sQbn+qE9Nwakpbdc53EfnJlpI4=
Subject key identifier: 24:01:C2:1B:4A:8F:A8:60:9D:1C:10:F3:6D:20:61:5C:E2:6F:67:D0
Certificate issuer: /CN=52e41f4806ce48fc398842381f2ffbe04b294818
Certificate serial: 0185708CBB899A0312CF722E603CB7695C52
Authority key identifier: 52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/JAHCG0qPqGCdHBDzbSBhXOJvZ9A.roa
Signing time: Mon 02 Jan 2023 03:35:49 +0000
ROA not before: Mon 02 Jan 2023 03:35:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41247
IP address blocks: 91.222.184.0/24 maxlen: 24
91.222.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:bb:89:9a:03:12:cf:72:2e:60:3c:b7:69:5c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e41f4806ce48fc398842381f2ffbe04b294818
Validity
Not Before: Jan 2 03:35:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2401c21b4a8fa8609d1c10f36d20615ce26f67d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:58:11:39:3e:3a:46:c1:5c:11:31:77:2b:f5:
c1:53:11:16:d2:59:fa:56:e0:5d:01:4d:95:16:d8:
5b:df:29:3c:0d:a8:5f:13:df:08:d9:ce:87:84:74:
2b:1e:83:09:e3:59:85:82:fe:51:92:e9:ae:0e:20:
db:c9:af:05:11:db:42:22:31:18:66:6a:82:8c:40:
6d:d8:70:68:c2:a9:be:74:7f:94:5a:23:fa:b0:cb:
30:1c:7e:9f:e3:07:a4:c0:22:44:82:14:f3:42:96:
91:8d:2a:7c:3c:90:14:31:5d:a9:73:24:2b:42:07:
ee:25:0e:97:6b:69:74:f3:8b:7d:9d:53:83:7a:cc:
6a:45:03:fc:b8:ad:46:2e:98:3c:83:30:3c:df:c1:
4f:e3:da:24:07:31:94:d5:9a:e4:99:63:ba:15:58:
6d:7c:3d:25:77:88:00:a4:6d:37:7c:cb:ad:56:71:
86:1f:19:ad:b5:f3:20:a8:de:55:57:46:92:d0:b3:
bb:98:44:f3:32:fa:84:6b:ad:09:bf:a2:6d:6d:88:
f1:21:ff:eb:63:b3:cb:1e:a6:c1:9c:0a:c7:ca:29:
a6:8e:12:a6:6e:b4:01:dd:05:70:6a:43:b8:e3:cf:
52:70:0e:ca:09:2d:31:b8:0b:c4:3d:74:0c:0f:b1:
9b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:01:C2:1B:4A:8F:A8:60:9D:1C:10:F3:6D:20:61:5C:E2:6F:67:D0
X509v3 Authority Key Identifier:
keyid:52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/JAHCG0qPqGCdHBDzbSBhXOJvZ9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.184.0/24
91.222.187.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c9:91:76:e3:29:7e:20:7a:2a:d5:2f:33:69:0b:f7:c2:67:
1d:bd:33:34:e3:2a:26:a0:54:65:68:40:b2:29:0e:dd:ac:b9:
9e:24:c0:c5:9b:99:31:4b:50:72:fe:d6:14:2a:d0:a5:b7:f9:
99:de:3c:ab:74:5b:9e:d5:64:e6:89:ce:f5:b0:ea:63:37:11:
6a:be:77:b2:b7:79:d6:15:79:0e:6a:d7:17:58:d1:f8:95:90:
92:80:bc:19:20:9c:c1:3c:df:6a:bf:a6:b4:04:e4:49:a2:53:
af:a9:bc:2b:10:dd:20:14:65:08:22:67:4c:4e:17:2e:e7:c5:
31:74:2c:a2:f6:6d:ed:bd:74:66:91:90:c2:1b:e3:4c:e1:85:
16:3e:35:87:56:7b:85:ec:5d:a5:45:dc:b4:1b:bf:c2:1d:1c:
ac:ab:a2:90:7f:75:d3:9d:2a:b6:a7:96:53:91:95:61:51:c7:
23:0b:4a:7e:f9:68:f2:33:63:05:00:a4:04:ea:87:1b:fd:a7:
2c:c5:69:0c:b7:a0:f9:59:59:6e:4f:d8:4a:b0:8d:bd:9d:58:
26:db:2d:92:4f:97:75:11:ba:4d:db:9c:34:0b:3d:00:81:e4:
f9:bb:eb:b5:f6:8f:fb:18:9d:2a:d2:41:f7:0b:61:65:55:cc:
fc:91:ff:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:43 2024 by rpki-client on console-ams.rpki-client.org