Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/JrRv17XhbZ3p-MBZiwKCwSfZ1Wg.roa
File: JrRv17XhbZ3p-MBZiwKCwSfZ1Wg.roa (raw, json)
Hash identifier: Xp1U5jIRs0icrxC/Zq58U7Zi15ebE+pkRBUPtVOWnsE=
Subject key identifier: 26:B4:6F:D7:B5:E1:6D:9D:E9:F8:C0:59:8B:02:82:C1:27:D9:D5:68
Certificate issuer: /CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Certificate serial: 018573439EF45B74B8CBBD7293600103F938
Authority key identifier: 97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/JrRv17XhbZ3p-MBZiwKCwSfZ1Wg.roa
Signing time: Mon 02 Jan 2023 16:14:49 +0000
ROA not before: Mon 02 Jan 2023 16:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41816
IP address blocks: 185.209.44.0/22 maxlen: 22
91.143.16.0/22 maxlen: 22
91.143.24.0/22 maxlen: 22
91.143.24.0/24 maxlen: 24
91.143.20.0/23 maxlen: 23
91.143.22.0/23 maxlen: 23
91.143.31.0/24 maxlen: 24
91.143.30.0/24 maxlen: 24
91.143.26.0/24 maxlen: 24
91.143.25.0/24 maxlen: 24
91.143.28.0/24 maxlen: 24
91.143.28.0/22 maxlen: 22
91.143.27.0/24 maxlen: 24
91.143.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:43:9e:f4:5b:74:b8:cb:bd:72:93:60:01:03:f9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Validity
Not Before: Jan 2 16:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26b46fd7b5e16d9de9f8c0598b0282c127d9d568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1d:f5:8f:e5:00:32:ba:a0:d1:2a:d0:98:22:
b4:13:ea:c7:8e:a7:18:ae:a8:6e:56:cc:42:07:d0:
20:e7:1c:2b:92:09:e6:0e:df:5d:02:5d:75:6c:c3:
3b:74:39:6a:7c:96:96:96:2c:30:f1:ac:bb:c3:75:
05:da:cb:09:75:a2:a2:16:d4:21:eb:bf:8f:c6:15:
25:da:ab:dc:84:ff:f8:df:34:83:87:24:61:aa:32:
e1:85:c8:c4:36:39:c8:fc:3a:48:11:61:41:d8:67:
94:c5:40:6e:3f:0c:b8:3d:48:95:ad:33:c0:a4:fc:
12:dc:8a:80:e3:c2:ca:da:22:bf:3f:8d:aa:5c:4a:
89:0b:64:4a:73:7e:7a:87:5e:41:df:ce:e1:a6:5e:
19:7b:e1:b2:47:db:9a:78:a3:11:c5:bd:47:45:4b:
9d:f6:92:2f:e9:ea:db:90:04:46:a3:9f:f5:4d:f1:
26:78:c7:fc:11:0b:71:6f:57:70:f9:d8:94:ce:2f:
fd:ba:03:a7:52:60:ba:1b:7c:c2:5b:82:3b:3a:0f:
16:13:5c:9f:08:19:5c:83:d4:18:a5:34:2b:d3:ae:
73:2b:10:68:1d:27:73:36:b2:35:3b:7d:2f:8e:8f:
57:9b:ff:2c:ff:4b:eb:71:e1:f9:90:09:9d:03:af:
e4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B4:6F:D7:B5:E1:6D:9D:E9:F8:C0:59:8B:02:82:C1:27:D9:D5:68
X509v3 Authority Key Identifier:
keyid:97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/JrRv17XhbZ3p-MBZiwKCwSfZ1Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.143.16.0/20
185.209.44.0/22
Signature Algorithm: sha256WithRSAEncryption
95:b5:e2:21:5b:5b:b9:48:20:ab:ad:a0:9b:40:31:07:bb:ba:
83:f9:fc:e7:2f:c5:d1:49:09:f1:85:fc:49:6e:94:21:16:4f:
26:aa:40:3d:de:99:c0:dc:cb:fb:ab:99:a8:ae:4e:0d:b6:36:
3d:30:e6:01:8e:87:75:0d:18:48:2f:69:bb:18:c1:78:1a:e5:
88:5f:b8:c0:98:3f:c9:05:31:38:a8:7a:db:28:49:3f:f3:1b:
30:1c:12:fe:ea:2d:db:1d:00:1c:86:3a:80:3e:06:83:c7:07:
eb:da:83:9c:3b:61:0b:27:1c:5a:d2:f3:a7:8e:d7:34:5e:d6:
1c:20:a5:a6:65:d5:c8:78:cf:4a:43:46:6d:cf:47:f4:fe:c6:
13:c0:18:ab:84:a4:98:bc:2c:ac:5c:4d:f3:f6:3f:c2:ff:63:
9c:40:30:3b:af:45:2f:1f:b7:d2:f4:6d:b0:6f:e9:58:45:48:
ed:fc:6f:c4:37:6b:65:30:7e:1e:97:3a:6c:2e:23:23:1e:e4:
5f:88:c4:96:97:8f:86:2c:01:b9:35:4b:05:a7:29:ac:37:1d:
71:26:0b:d2:61:84:87:02:e9:ad:ad:cb:b3:9a:02:2c:a5:b3:
f3:2a:e0:19:73:bc:e6:3a:67:fb:94:5d:28:42:f2:c7:6c:93:
e4:68:e6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:14 2024 by rpki-client on console-ams.rpki-client.org