Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/iFqr8H4zGCybG4WYJFZvXbOFFkc.roa
File: iFqr8H4zGCybG4WYJFZvXbOFFkc.roa (raw, json)
Hash identifier: SS7ResDzftnOtnQN8wXH+2r+HCir40BtWCVYHH7j6KE=
Subject key identifier: 88:5A:AB:F0:7E:33:18:2C:9B:1B:85:98:24:56:6F:5D:B3:85:16:47
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 018C155ACCFF5EE019BD223B9179BD9B547D
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/iFqr8H4zGCybG4WYJFZvXbOFFkc.roa
Signing time: Tue 28 Nov 2023 09:55:21 +0000
ROA not before: Tue 28 Nov 2023 09:55:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57152
IP address blocks: 91.102.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:15:5a:cc:ff:5e:e0:19:bd:22:3b:91:79:bd:9b:54:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Nov 28 09:55:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=885aabf07e33182c9b1b859824566f5db3851647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4a:bd:a4:af:2c:81:bb:ac:db:31:41:4d:df:
57:fc:ee:65:f4:0b:bc:fd:d3:5c:36:6e:ea:01:3a:
9d:d8:77:f6:36:44:5f:ba:d6:a6:98:60:ed:44:6b:
88:8e:cb:29:97:13:29:a2:ba:c1:aa:a9:4d:6d:ef:
8b:e6:80:46:bb:74:56:f5:f5:13:0c:be:c9:98:71:
57:c1:47:fc:bc:dd:a3:83:80:d7:35:6b:29:f0:3b:
81:2d:36:47:6c:b4:f7:77:18:90:c4:4d:84:0d:41:
c1:0e:cb:75:95:7f:5e:11:f4:3d:c4:8b:9d:b6:76:
78:75:1a:a9:56:aa:2e:1c:ba:d7:9c:62:e4:75:33:
96:24:70:65:db:34:27:11:f7:3c:f8:a7:12:fa:ef:
ab:56:76:ec:8e:e9:a0:cf:33:b2:1f:77:7b:61:c0:
4e:45:ad:9e:78:37:ca:19:8e:7a:4a:36:72:69:ce:
04:24:ae:5a:2a:fa:bd:bd:45:58:7f:df:14:83:8c:
4a:53:30:f6:bb:95:07:44:fe:cf:03:6e:cf:10:b4:
53:d4:f1:e5:46:b6:d8:77:83:85:c5:ad:66:19:6f:
3b:03:d0:4c:c1:2a:31:25:93:91:b2:04:53:9e:99:
b5:1d:11:84:ed:15:23:7d:fb:28:88:9e:1e:30:c4:
b6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5A:AB:F0:7E:33:18:2C:9B:1B:85:98:24:56:6F:5D:B3:85:16:47
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/iFqr8H4zGCybG4WYJFZvXbOFFkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.163.0/24
Signature Algorithm: sha256WithRSAEncryption
50:5f:6e:d7:4d:c2:2f:77:d3:88:17:ea:af:0b:19:cc:23:12:
cb:bd:1f:92:2c:43:1b:40:74:c4:2b:38:8b:db:56:37:1d:98:
30:fd:6c:9c:76:6f:8c:0d:fd:38:40:74:60:e2:9b:c5:5b:0f:
8b:d3:ce:18:ff:98:b7:fe:a9:b4:11:67:a2:1f:37:0b:14:1c:
df:ff:6e:73:3f:46:c5:90:48:8d:04:e1:5d:a2:25:4d:6b:93:
6c:56:86:c4:23:18:9c:7f:b4:a5:ba:bd:bf:29:81:af:4a:87:
48:80:d2:8f:5f:d7:e1:2c:35:4d:6a:18:3f:80:74:b9:26:ca:
ad:31:00:02:80:42:da:99:b7:f9:57:13:9a:73:08:23:4c:6e:
8e:e8:87:a7:dc:b3:f0:fd:6a:fd:7c:34:b1:30:41:75:44:ea:
c1:53:51:8a:e6:71:9f:10:3d:13:77:cf:dc:66:7f:e7:5c:a9:
75:52:6e:4f:5d:fa:d7:7a:d4:f7:d5:2b:2a:96:9d:05:ab:a5:
6d:7d:9b:79:22:f9:69:6c:1f:98:42:32:29:2a:72:5b:32:60:
bf:4a:a7:ef:ee:16:6a:08:01:f6:f4:33:2d:93:97:ff:ea:08:
44:5f:5c:3a:de:63:ff:de:9e:33:10:bd:8b:3b:26:dd:9c:91:
4b:5e:9f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:14 2024 by rpki-client on console-fra.rpki-client.org