Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/GarBD6OiLs-ff4lXVEFGqukOLhg.roa
File: GarBD6OiLs-ff4lXVEFGqukOLhg.roa (raw, json)
Hash identifier: LSlP/ispch9Xb599CazHzITOX2ZdvFZpJM/F/SIyKwg=
Subject key identifier: 19:AA:C1:0F:A3:A2:2E:CF:9F:7F:89:57:54:41:46:AA:E9:0E:2E:18
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 018CCA29CBEAC1C138E71EE4FCB492456D1F
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/GarBD6OiLs-ff4lXVEFGqukOLhg.roa
Signing time: Tue 02 Jan 2024 12:33:05 +0000
ROA not before: Tue 02 Jan 2024 12:33:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 91.102.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 11:36:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:cb:ea:c1:c1:38:e7:1e:e4:fc:b4:92:45:6d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Jan 2 12:33:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19aac10fa3a22ecf9f7f8957544146aae90e2e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8a:8d:b4:0d:26:ed:86:61:ac:71:8e:9e:df:
d7:92:a0:ef:e4:f9:73:10:7d:b5:b7:5c:b3:02:bc:
76:7f:11:41:5b:86:c0:58:17:9c:d0:97:b8:7f:84:
74:58:4a:f7:80:2e:b8:50:e6:21:95:3f:ca:f4:1a:
a7:ef:b2:51:ff:2a:f9:31:42:f7:59:66:d4:5e:ea:
ac:41:e9:7b:9d:0f:29:37:43:e5:15:66:3f:c3:b6:
ab:ac:c9:21:9d:ff:51:9c:76:1f:11:56:09:ee:af:
d3:14:ed:96:af:f0:c1:79:c9:40:c0:0d:3c:39:21:
de:21:38:95:93:97:54:5d:18:20:0e:fa:01:5f:f5:
a6:91:d2:7d:29:11:15:6a:09:3e:36:c6:ba:25:0e:
48:f4:e8:57:87:29:39:0a:e4:ac:34:e9:6c:d7:80:
68:1c:ae:15:75:7b:3d:18:87:06:84:d4:bf:91:9c:
7b:c5:2f:a6:48:f7:ef:a3:17:a8:00:a9:57:47:cb:
33:95:1d:21:55:7a:04:86:24:2d:8a:8b:40:9d:af:
ca:62:e2:e2:c4:87:f6:56:f9:90:8f:b3:77:02:3b:
80:4b:0b:70:3c:89:d4:6f:b8:f3:0a:ae:5e:76:23:
e1:70:25:7a:fd:f8:2b:20:1f:13:d7:12:09:45:7a:
13:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AA:C1:0F:A3:A2:2E:CF:9F:7F:89:57:54:41:46:AA:E9:0E:2E:18
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/GarBD6OiLs-ff4lXVEFGqukOLhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.163.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:95:c1:48:fd:5e:75:ab:f0:1e:1f:66:34:bb:0c:bd:81:01:
b7:b0:c6:03:dc:e4:5b:3a:99:8f:d3:b1:f9:47:b4:ca:42:48:
7b:cc:ca:c9:e4:74:ee:12:73:01:a5:2b:e5:b8:fb:6d:dd:1d:
d4:df:1e:96:4b:f4:06:73:b0:35:32:a5:de:0a:7b:88:4b:c7:
cc:1a:87:af:e0:31:f7:d5:8e:87:da:47:56:aa:84:3b:ad:81:
e2:a7:5b:c5:c0:f1:57:1b:4a:3f:62:0d:fe:ad:e6:9c:ca:df:
81:93:9f:6d:50:57:85:56:3a:62:d8:93:62:52:b6:7a:51:ab:
90:95:e3:e1:ce:6d:7a:05:68:18:75:b3:b7:34:28:3f:6a:87:
e3:1b:fd:b3:f1:e0:0e:2a:bd:b3:e6:0b:87:f6:4d:98:f3:9d:
3b:c8:34:cc:c6:43:bf:2c:b4:7d:52:aa:ed:72:9b:54:4a:fe:
07:b4:d0:1b:9a:0c:58:a1:c2:e5:fb:a0:64:8d:82:73:de:27:
8e:d0:a0:fc:0a:dc:77:4e:70:57:5d:74:1a:86:b7:28:31:25:
d1:ba:eb:57:91:88:7f:c1:5e:c1:58:57:92:b7:51:e9:a4:4f:
97:9f:dd:69:13:01:39:0d:47:04:e0:24:6f:8d:c1:4e:aa:62:
1e:6c:f2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:14 2024 by rpki-client on console-fra.rpki-client.org