Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/fn89JXcxo1W0BYbIJWSX3ZdPVC8.roa
File: fn89JXcxo1W0BYbIJWSX3ZdPVC8.roa (raw, json)
Hash identifier: eAkTlVwcqK1aaCI5fEG70BskhAsQZUJKBqakXQ5OJAs=
Subject key identifier: 7E:7F:3D:25:77:31:A3:55:B4:05:86:C8:25:64:97:DD:97:4F:54:2F
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 018C4E90C8FF445A80D9EF21024887F2AB34
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/fn89JXcxo1W0BYbIJWSX3ZdPVC8.roa
Signing time: Sat 09 Dec 2023 12:32:40 +0000
ROA not before: Sat 09 Dec 2023 12:32:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 91.102.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4e:90:c8:ff:44:5a:80:d9:ef:21:02:48:87:f2:ab:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Dec 9 12:32:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e7f3d257731a355b40586c8256497dd974f542f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b4:1d:40:a2:61:4c:02:07:d4:46:32:57:5c:
c1:b6:87:14:7f:e0:27:6d:b4:09:3f:92:6c:91:c8:
36:21:91:d9:91:54:3b:10:1f:35:95:54:04:30:04:
7a:be:e1:57:79:41:ed:fa:22:1f:15:14:be:3a:f0:
63:a7:63:54:28:75:3a:f6:26:81:0b:73:cc:77:45:
10:15:00:40:f9:8e:d1:d3:47:f2:be:f5:c4:e3:e6:
f2:8d:d9:a9:42:81:0c:a4:9c:26:5d:fb:54:d9:fe:
f6:51:91:00:9d:00:fe:e9:54:63:72:2c:dd:87:8d:
29:09:03:be:8f:7d:a5:0e:7e:2e:07:41:ff:24:e8:
c8:4f:67:6a:28:22:cb:7b:b8:d2:f8:a4:54:2b:11:
a8:a8:3d:40:97:20:06:49:ff:55:7c:a1:05:af:45:
29:3a:20:d4:66:be:5d:db:48:35:41:f9:16:0c:1f:
88:05:78:3b:f2:37:4e:92:8a:8b:c5:cb:91:94:f2:
06:a5:d7:35:17:df:4e:63:88:6f:84:fa:4e:a9:4b:
58:48:91:f4:00:4a:55:23:bc:a0:64:1d:af:80:64:
2b:e2:3b:1a:9a:5d:e0:af:9a:c8:95:33:12:43:b6:
68:1f:cd:44:07:16:c3:c3:d6:5b:d7:b2:f5:62:3d:
5f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7F:3D:25:77:31:A3:55:B4:05:86:C8:25:64:97:DD:97:4F:54:2F
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/fn89JXcxo1W0BYbIJWSX3ZdPVC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.164.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:7f:a4:85:4b:ed:73:48:ec:4d:d0:0b:8f:cf:5a:be:3e:4b:
4f:b9:79:32:04:39:40:53:eb:a2:f7:68:84:23:0c:92:0f:ff:
fe:6c:b0:c7:22:7c:91:93:11:26:b8:ab:36:26:82:22:e8:c7:
c1:64:dc:9d:e3:82:79:48:e0:67:60:6f:3d:55:29:9c:36:13:
17:f4:ba:4b:1d:97:d0:15:6c:a0:0a:ae:14:70:a4:7f:f5:a3:
2d:f1:c4:c4:51:a4:aa:b4:c6:2c:fb:32:71:ab:78:a7:b4:61:
65:1b:f6:67:14:d5:fb:a7:09:36:87:73:63:c9:6a:a9:94:85:
35:05:1a:80:1a:9f:4b:b4:bf:ff:a0:88:e3:2b:63:44:22:f6:
0a:a3:fa:35:a3:c2:66:62:3a:01:d1:3e:d9:23:55:69:1f:df:
94:87:c3:30:aa:a9:b2:76:37:5c:9f:5f:f6:1f:5a:80:67:f4:
5e:37:c3:f5:20:8a:f2:65:85:69:c0:a7:1e:6f:63:7b:c4:42:
83:5d:dd:09:79:50:dc:57:2f:47:60:ab:40:c9:b7:f8:1e:ac:
1c:6c:94:d1:78:28:c7:f3:92:33:5c:b9:be:a5:f1:d6:45:fd:
f5:d0:21:46:a6:90:61:56:d6:e2:27:ca:de:2f:43:76:66:9e:
db:4c:b6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:14 2024 by rpki-client on console-fra.rpki-client.org