Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/JH56q45qfJdOjkDqtoXKBPHa7q8.roa
File: JH56q45qfJdOjkDqtoXKBPHa7q8.roa (raw, json)
Hash identifier: oGBvedEcSs95KjjtXIOgBYX8lAgrcC2KVZ1SM/ByqBQ=
Subject key identifier: 24:7E:7A:AB:8E:6A:7C:97:4E:8E:40:EA:B6:85:CA:04:F1:DA:EE:AF
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 018CD868FCD9C84B517A4651789B623D30FD
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/JH56q45qfJdOjkDqtoXKBPHa7q8.roa
Signing time: Fri 05 Jan 2024 06:56:48 +0000
ROA not before: Fri 05 Jan 2024 06:56:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.102.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jan 2024 20:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d8:68:fc:d9:c8:4b:51:7a:46:51:78:9b:62:3d:30:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Jan 5 06:56:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=247e7aab8e6a7c974e8e40eab685ca04f1daeeaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:34:94:3a:d7:38:19:f6:de:0e:1a:ce:90:38:
91:fb:dc:ed:29:66:fc:ff:1e:d5:85:ea:5c:55:18:
ac:a1:40:57:68:2a:28:95:16:c1:b6:52:43:67:6e:
b7:5d:ed:58:bc:a9:f6:f6:fe:77:6b:ed:05:94:e2:
05:2f:c6:e0:68:0e:eb:c1:f7:84:75:3d:4c:0a:ca:
24:5c:d4:35:e9:c7:9b:fb:4f:40:d5:92:8f:58:cc:
ac:d3:4c:9c:34:4b:0a:df:b1:8e:8a:5f:6b:af:58:
e4:52:4b:d4:04:c6:fd:2c:71:ca:b5:3a:49:22:a3:
2f:97:21:1f:df:13:d7:11:29:00:37:d7:9e:1a:cc:
23:a5:df:c8:3a:ea:dd:38:ee:6a:9d:a4:7d:cf:95:
53:57:65:73:2c:63:dd:55:d7:9f:71:ee:ec:21:4c:
57:23:66:b1:5a:71:fd:2e:b6:d6:e7:40:1b:de:5a:
9b:e5:1f:dd:f7:44:9a:d2:62:dd:2e:32:3c:0a:8e:
87:58:f3:dc:a6:f1:70:39:3a:b7:a6:63:3b:d8:d4:
41:03:f5:87:96:df:dd:f3:8b:ea:6d:0b:74:78:78:
f9:68:f7:ea:1e:f9:8d:d4:22:c7:c1:88:cc:15:5d:
89:63:6f:32:58:dd:65:a7:f5:5f:b1:85:1d:45:1b:
2f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7E:7A:AB:8E:6A:7C:97:4E:8E:40:EA:B6:85:CA:04:F1:DA:EE:AF
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/JH56q45qfJdOjkDqtoXKBPHa7q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.165.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:22:84:5c:5c:58:53:59:a6:e3:04:7d:d5:ba:6c:b7:52:58:
13:52:57:6b:bf:2c:6d:ae:9a:a1:b8:c3:3c:d3:2f:52:45:35:
c6:5a:e7:e6:be:36:e8:61:35:bc:1e:36:f1:aa:9e:f5:18:d8:
4e:51:d7:8e:91:91:81:d4:73:50:3d:e2:46:aa:63:56:0c:e0:
45:90:b4:1b:83:d2:e3:5b:cb:88:56:0c:0e:e7:7a:3b:20:42:
65:74:85:9b:94:1e:01:14:67:66:15:1e:b3:d5:bb:34:c9:bb:
e8:30:05:60:ea:24:a4:39:cc:72:6c:82:e4:4a:b2:a2:23:55:
d4:0f:47:dc:79:92:9c:b5:29:30:c8:0e:82:c4:7b:3a:8d:d7:
ec:35:d4:42:f0:55:62:eb:7d:0c:cd:24:3e:3c:5b:b3:18:b6:
0b:2f:b2:30:e5:57:85:6f:ad:06:e8:5a:50:a6:1e:cb:61:f8:
48:7c:11:4f:ab:79:d3:73:c5:c2:10:84:04:8b:62:3c:35:88:
37:a9:69:0d:54:8b:3d:cf:ad:ff:93:78:99:72:0c:d9:a8:d2:
b8:62:be:36:11:f3:68:e1:18:36:92:c4:de:a9:6b:9c:dc:77:
d2:81:cb:1b:84:1c:b6:9b:71:78:34:cf:9e:bb:b7:8c:22:46:
25:d9:fa:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:51 2024 by rpki-client on console-ams.rpki-client.org