Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/_JbcekybevbIC-lxAiriFKUHqb0.roa
File: _JbcekybevbIC-lxAiriFKUHqb0.roa (raw, json)
Hash identifier: QYCi5FBCjSwgVuYNnIG8TH0PkTADJnX0C22Au0CnrVE=
Subject key identifier: FC:96:DC:7A:4C:9B:7A:F6:C8:0B:E9:71:02:2A:E2:14:A5:07:A9:BD
Certificate issuer: /CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Certificate serial: 0188955D2E4D0181EED61B64C666970F6FBF
Authority key identifier: D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/_JbcekybevbIC-lxAiriFKUHqb0.roa
Signing time: Wed 07 Jun 2023 10:18:11 +0000
ROA not before: Wed 07 Jun 2023 10:18:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34858
IP address blocks: 195.238.246.0/24 maxlen: 24
91.195.100.0/23 maxlen: 23
2001:678:bf4::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:5d:2e:4d:01:81:ee:d6:1b:64:c6:66:97:0f:6f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Validity
Not Before: Jun 7 10:18:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc96dc7a4c9b7af6c80be971022ae214a507a9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e5:bb:d7:54:c6:da:d5:53:4b:83:0c:84:1a:
a0:40:79:5d:12:53:f6:f7:18:e4:87:c0:f3:7d:9b:
4c:b2:e3:70:6e:fc:24:66:4a:f8:72:f8:5d:9b:f4:
88:17:28:95:29:44:29:46:7e:98:fe:23:e4:3f:d6:
df:ea:1d:b8:cd:dc:55:b9:c5:0a:4c:9c:41:62:1d:
94:5e:f8:31:79:e0:28:9c:fc:82:00:b3:86:f5:7b:
8d:8c:a3:73:e5:80:4c:84:a3:39:2a:e6:d7:98:eb:
af:88:05:88:d0:e4:08:7c:02:ab:93:7d:41:04:ce:
36:27:d9:65:d8:04:19:cd:92:04:ff:3d:1c:8c:02:
08:1c:1d:96:1a:87:fa:11:4c:60:e2:81:2a:00:50:
28:08:07:d4:75:ee:b5:98:12:1b:5e:84:77:94:a4:
62:b7:80:37:e2:10:2a:97:3f:e4:70:97:52:97:f5:
30:e1:30:71:67:d3:23:6d:fc:ab:94:e8:98:0e:41:
9c:7f:da:fd:7e:a9:18:79:2a:8d:10:38:08:27:2a:
e7:b6:02:be:1c:60:ef:22:d3:e8:9f:04:ff:4b:24:
e0:cb:38:16:a8:2e:bb:42:df:51:d5:2a:4d:c8:04:
08:a5:37:57:0d:b0:51:33:2b:e9:92:79:c8:04:3e:
a2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:96:DC:7A:4C:9B:7A:F6:C8:0B:E9:71:02:2A:E2:14:A5:07:A9:BD
X509v3 Authority Key Identifier:
keyid:D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/_JbcekybevbIC-lxAiriFKUHqb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.100.0/23
195.238.246.0/24
IPv6:
2001:678:bf4::/48
Signature Algorithm: sha256WithRSAEncryption
77:56:45:5f:18:74:52:c9:ad:4f:64:7c:f3:b9:ad:fb:e9:43:
00:54:e9:61:9b:88:15:b7:2a:68:88:a6:1f:e1:be:36:35:e4:
d1:9d:a7:13:dd:2a:0a:4c:fe:b9:29:f5:a2:68:1a:68:a6:e9:
ae:1e:32:b9:04:c2:ff:5e:6f:d5:9b:40:c9:cd:50:41:b1:57:
91:00:f4:e3:c7:69:17:08:22:02:05:9d:3f:d2:75:f0:da:0a:
98:c3:98:2a:e7:52:06:49:77:98:45:09:0e:c5:13:82:18:a1:
e8:f4:c8:cd:cb:e9:2c:95:28:2c:10:a6:3e:49:ed:86:f4:d0:
08:cb:aa:0c:e9:8b:59:9b:b9:25:cb:2e:84:71:48:81:a9:72:
10:28:fd:ee:39:ff:08:d6:02:69:cd:76:b6:b2:21:4f:07:52:
5a:07:81:d6:4e:a3:62:ca:7b:57:af:98:46:31:cb:a7:f6:fe:
16:9d:a0:a7:26:6e:9a:75:f4:2c:1a:a6:b1:10:97:43:10:ce:
07:3e:ac:49:ce:a6:b0:af:42:3f:92:f2:60:4a:ea:8e:21:8e:
c9:61:f6:3e:ee:22:b7:2c:60:de:ab:51:ca:89:6c:13:bb:22:
b2:ae:89:cf:f3:8a:61:d0:3d:4d:b2:71:c8:0c:73:75:20:bf:
0c:02:52:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:00 2024 by rpki-client on console-ams.rpki-client.org