Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/1XJs6Bnbis-nOSDKr_tUydlb4p8.roa
File: 1XJs6Bnbis-nOSDKr_tUydlb4p8.roa (raw, json)
Hash identifier: QAAP8V5wO7d4rivzszF1fqNa1JW7IL/yOSqcvqKsces=
Subject key identifier: D5:72:6C:E8:19:DB:8A:CF:A7:39:20:CA:AF:FB:54:C9:D9:5B:E2:9F
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 01856DD3EFE96EF8C1DEDD33B69F3450362E
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/1XJs6Bnbis-nOSDKr_tUydlb4p8.roa
Signing time: Sun 01 Jan 2023 14:54:44 +0000
ROA not before: Sun 01 Jan 2023 14:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41801
IP address blocks: 91.102.160.0/21 maxlen: 21
91.102.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Mar 2023 16:34:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d3:ef:e9:6e:f8:c1:de:dd:33:b6:9f:34:50:36:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Jan 1 14:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5726ce819db8acfa73920caaffb54c9d95be29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:6a:2a:ab:ca:09:f8:6a:d8:2b:84:da:76:86:
65:d4:83:c6:bb:2a:92:db:c8:d4:04:7e:95:cd:e6:
c5:81:1d:a7:a3:df:bf:1a:e8:65:3c:ab:92:99:bd:
f6:c4:1c:b7:eb:6c:f9:2c:c1:90:c2:e4:37:8d:82:
00:78:b0:80:08:c1:2d:a7:57:bd:7a:e2:15:0c:a6:
56:60:6e:0c:40:4a:a3:fa:da:cf:0c:71:6f:1f:f8:
ad:e4:6e:06:b4:1d:fe:d1:70:e7:53:c8:0a:d1:42:
6c:38:fc:9f:c5:78:36:22:f0:40:5b:a5:73:b4:d0:
9b:9b:ba:e6:b9:1e:4a:3a:3b:1a:97:23:7a:e2:ae:
9b:7e:a8:67:cb:2d:4f:89:7c:a9:d5:d3:6d:34:2a:
c0:03:d1:b5:33:75:90:26:20:57:d4:bd:f2:fc:0a:
5d:81:5d:cd:42:44:26:9d:13:e3:a8:36:aa:cb:a7:
8b:e3:bd:8f:39:f9:d7:de:38:01:58:26:98:35:ab:
61:8c:95:0f:ac:8a:93:3b:eb:92:ee:89:30:ff:fd:
e2:d8:c2:f1:98:47:8a:be:5f:0d:de:35:50:1b:0d:
d4:f4:76:50:8f:5b:d8:20:bb:69:72:12:a3:71:00:
56:ce:11:4f:cc:53:94:97:f9:c9:39:09:9f:f2:13:
e4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:72:6C:E8:19:DB:8A:CF:A7:39:20:CA:AF:FB:54:C9:D9:5B:E2:9F
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/1XJs6Bnbis-nOSDKr_tUydlb4p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.160.0/21
Signature Algorithm: sha256WithRSAEncryption
83:15:d0:04:47:71:cb:7a:d6:a4:3c:af:2e:68:45:37:45:21:
87:ba:2d:59:93:59:b8:d5:59:24:2c:af:d6:ea:b8:a0:17:9e:
81:e2:8e:fd:aa:86:ca:97:b7:ec:06:6b:ee:70:ab:a5:11:28:
5a:97:df:ba:ca:54:2b:2c:8b:33:e2:59:24:72:5d:f5:52:38:
e4:77:be:84:77:3b:5b:47:5d:4f:61:a2:68:ec:81:be:30:a8:
4e:ce:54:30:93:96:3f:08:4b:87:3f:0d:cb:71:12:89:32:32:
fb:28:80:1c:01:c9:77:2c:03:23:be:48:80:16:3d:3c:1b:5c:
2f:08:32:27:d5:ef:02:ad:98:9b:3f:2e:49:d8:6d:cf:fe:72:
c2:df:93:92:33:73:24:23:fc:53:4d:73:eb:61:67:cc:b9:f6:
52:82:bd:70:49:a4:4f:5c:e8:e1:f9:d2:8c:f2:b5:8a:aa:a4:
0d:20:42:32:51:72:01:9e:e7:9a:ca:be:3a:72:96:7a:dc:8f:
62:9d:3f:f5:86:fb:c3:ab:2e:82:d3:57:56:35:91:75:90:93:
d3:22:0f:33:55:be:94:50:89:0f:c5:69:f6:eb:e1:a7:88:61:
0c:38:fa:a1:f8:35:ce:a9:1b:9d:fc:c5:f2:5a:d1:7c:b9:1a:
af:0a:12:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:14 2024 by rpki-client on console-fra.rpki-client.org