Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/jTYVqfimTP6bfVnkHyNJrUZv2xs.roa
File: jTYVqfimTP6bfVnkHyNJrUZv2xs.roa (raw, json)
Hash identifier: aZTSbGoXz6grLk6CNsH+5OwZWK6ezLs2OLtThubFchw=
Subject key identifier: 8D:36:15:A9:F8:A6:4C:FE:9B:7D:59:E4:1F:23:49:AD:46:6F:DB:1B
Certificate issuer: /CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Certificate serial: 018571D7AC814EAD69A3D26771AEC15BE70B
Authority key identifier: 72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/jTYVqfimTP6bfVnkHyNJrUZv2xs.roa
Signing time: Mon 02 Jan 2023 09:37:17 +0000
ROA not before: Mon 02 Jan 2023 09:37:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197579
IP address blocks: 185.92.232.0/22 maxlen: 22
91.223.113.0/24 maxlen: 24
2a13:6b40::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:ac:81:4e:ad:69:a3:d2:67:71:ae:c1:5b:e7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Validity
Not Before: Jan 2 09:37:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d3615a9f8a64cfe9b7d59e41f2349ad466fdb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:ca:6b:ad:cf:1e:95:29:49:4b:e9:4b:7c:
1f:7d:0e:b8:c3:77:0c:bc:63:18:74:9b:66:83:3e:
34:f9:18:52:78:98:7b:e5:b4:a6:f9:2e:e9:5b:6c:
a3:c8:b2:45:c5:f1:a2:e2:41:92:e2:fd:2e:6b:93:
70:35:93:c4:c6:96:d4:dc:51:02:ed:39:ad:ad:51:
77:62:01:d5:c0:c6:fc:ae:94:17:8c:f5:7f:d2:db:
8e:74:d6:14:1f:98:1f:c0:ca:65:c7:b9:11:fb:7b:
64:79:bd:3e:a9:51:fd:26:38:0c:3e:03:c5:4d:ef:
bd:c0:7b:6b:24:08:69:86:04:66:76:55:55:5d:fa:
df:ac:eb:ba:2c:f8:7c:07:cd:6d:e3:48:e2:dc:48:
e8:06:9c:21:28:98:3b:bf:8d:7b:a4:66:a3:5c:05:
75:c6:ad:c6:37:2f:4d:aa:5e:b9:59:f1:e2:3b:64:
ba:57:73:80:ea:a5:39:bd:22:6b:5a:79:70:5e:a1:
29:c6:00:a0:e6:11:8d:66:49:37:b3:a5:79:ad:78:
2a:51:69:c3:58:15:2a:23:43:4b:36:ff:7c:b8:05:
d9:cd:0a:70:60:5f:50:6c:1c:8e:e9:b0:c3:29:a3:
56:69:9f:18:29:a0:65:56:30:46:f0:5f:bd:19:20:
fa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:36:15:A9:F8:A6:4C:FE:9B:7D:59:E4:1F:23:49:AD:46:6F:DB:1B
X509v3 Authority Key Identifier:
keyid:72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/jTYVqfimTP6bfVnkHyNJrUZv2xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.113.0/24
185.92.232.0/22
IPv6:
2a13:6b40::/29
Signature Algorithm: sha256WithRSAEncryption
05:0b:5b:f3:7a:b6:6d:28:ac:1a:ed:0a:2b:d4:68:3a:53:c3:
01:6a:8e:73:ec:a6:6f:ed:50:9d:a9:66:b6:3d:f3:17:d8:bb:
62:eb:bb:7c:3d:2e:ac:c4:95:ef:b8:81:6f:6a:7a:f9:6a:df:
e7:8b:8a:32:9b:3a:c5:2d:cc:fa:a5:00:5f:fc:ae:f6:7c:6b:
e8:f5:6b:72:36:88:37:92:23:79:65:43:c3:df:ed:ca:fa:a2:
7a:fc:a7:49:8a:bf:24:91:a5:26:50:11:ae:d5:7a:36:88:aa:
d9:1e:a7:89:ba:2e:2d:fc:12:ae:b9:20:79:fa:33:e7:6c:fc:
09:77:d7:0b:7b:ce:0f:5a:18:46:0d:cf:01:34:c9:27:f4:04:
ab:f5:c7:2e:44:7b:6e:9c:c7:95:28:14:bf:69:17:2d:28:60:
94:fe:64:9b:94:a8:80:a2:00:2c:27:1c:c4:96:0a:be:87:c3:
58:26:99:93:5a:8f:86:e7:a3:74:01:5a:f7:e5:9f:37:44:75:
ed:bd:ff:75:45:9c:7e:5b:3b:29:83:b4:07:2e:70:7e:92:a4:
b6:bd:78:38:7e:56:4a:b8:17:22:ec:88:5e:ad:1f:d3:d2:20:
d9:29:18:ad:ef:3c:30:cd:d0:d7:66:53:31:56:96:b1:8a:37:
54:51:58:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:44 2024 by rpki-client on console-ams.rpki-client.org