Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/cditH5u70m7IinWL-ksKf8Jk10g.roa
File: cditH5u70m7IinWL-ksKf8Jk10g.roa (raw, json)
Hash identifier: IYusoIfF1W8IQ+9/RORsxpA94bOA+IT9w9vJNUsHjRc=
Subject key identifier: 71:D8:AD:1F:9B:BB:D2:6E:C8:8A:75:8B:FA:4B:0A:7F:C2:64:D7:48
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 018C3DFC9DE6502BDC7D0F2F3A7003562B16
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/cditH5u70m7IinWL-ksKf8Jk10g.roa
Signing time: Wed 06 Dec 2023 07:16:54 +0000
ROA not before: Wed 06 Dec 2023 07:16:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 814
IP address blocks: 91.102.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Dec 2023 09:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3d:fc:9d:e6:50:2b:dc:7d:0f:2f:3a:70:03:56:2b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Dec 6 07:16:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71d8ad1f9bbbd26ec88a758bfa4b0a7fc264d748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:75:ba:3e:65:d8:46:ee:7b:1e:14:6a:13:c7:
05:d0:23:ee:8f:35:9c:6e:fd:81:da:37:80:ef:24:
08:e4:f4:3e:7e:dd:8e:a9:83:7d:c0:95:fe:52:70:
2d:af:e9:2b:82:6f:a9:8d:1c:c4:82:c6:2d:bb:28:
ed:76:3d:91:90:a1:2c:af:3a:c2:57:1b:d0:e6:ea:
c3:9e:dd:12:27:c8:bf:f6:b3:38:59:1e:13:5b:76:
5c:2f:e6:52:60:98:dd:bf:88:0d:67:d8:a5:3d:62:
4f:ea:30:13:97:47:47:eb:a9:97:f2:20:e8:a5:a3:
8a:15:43:0f:4a:aa:ce:7c:95:44:14:8f:a5:38:2c:
5d:b3:56:ad:79:ff:b8:3a:32:38:27:9a:3d:b2:86:
37:38:18:f6:03:b6:8e:99:13:83:6d:b9:95:26:a5:
fe:ae:ad:fc:53:f0:e3:ef:3f:0e:28:b3:03:12:63:
95:9e:b7:9f:f8:04:7e:bc:46:56:8d:4c:35:17:ff:
91:c3:a9:49:7b:98:91:03:d7:f2:fb:97:5f:00:03:
72:ba:1e:16:a3:68:8e:c7:17:07:39:13:08:cb:a9:
aa:cc:e5:0e:03:7e:60:e2:d3:89:0d:6d:a9:5e:e0:
19:82:22:79:cd:c5:0b:c2:9b:25:cb:e9:a8:b9:5d:
72:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D8:AD:1F:9B:BB:D2:6E:C8:8A:75:8B:FA:4B:0A:7F:C2:64:D7:48
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/cditH5u70m7IinWL-ksKf8Jk10g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.164.0/24
Signature Algorithm: sha256WithRSAEncryption
47:f4:67:c2:a0:0a:31:6f:d7:29:b3:37:15:65:1b:ec:9e:f1:
b6:9a:c1:4c:f8:c6:eb:a4:af:6e:a4:36:2d:a6:02:12:45:87:
a2:b5:23:ba:0d:6b:54:96:4e:c0:ab:6c:a5:78:48:ee:c2:46:
99:6b:f5:14:94:55:f7:c5:7a:1e:34:21:e0:7c:74:42:55:63:
e3:79:55:e5:3e:51:dc:51:28:0f:5a:de:01:06:4b:1c:90:a3:
b6:b6:1d:d9:b9:70:27:0a:61:c9:fc:82:62:c7:42:7c:af:b1:
b5:00:54:f3:27:b3:d5:5b:75:43:62:52:8d:39:45:2a:31:d9:
13:ae:64:8b:91:44:8f:f1:25:ba:dc:9a:53:1a:2d:a2:69:5d:
aa:81:cf:2a:3e:8d:a9:38:a7:98:31:17:6f:b4:05:13:41:e3:
0b:7a:5b:a7:75:fa:38:b4:55:f4:af:42:36:ca:55:d3:fb:5a:
4f:b4:d0:6a:78:c2:30:08:30:1a:71:d8:e3:58:94:45:9a:ac:
32:50:0d:d3:b6:38:29:64:0b:02:1e:79:ff:1b:c0:bd:ed:5b:
a0:28:d6:23:2b:f5:1e:43:a1:0a:61:9e:35:8a:cd:26:51:f1:
c4:82:5b:bb:67:4f:98:0d:a3:16:8e:c1:1c:5c:3f:f0:84:30:
f5:76:17:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:51 2024 by rpki-client on console-ams.rpki-client.org