Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JM06sD9qddvUiysf1oMR5YQEceI.roa
File: JM06sD9qddvUiysf1oMR5YQEceI.roa (raw, json)
Hash identifier: cBkCh5dWR774S1fVsxHIDkwgw7s8cb91JcGWCFCShnk=
Subject key identifier: 24:CD:3A:B0:3F:6A:75:DB:D4:8B:2B:1F:D6:83:11:E5:84:04:71:E2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D8207AD19B65F696AE5D6850BC45D7D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JM06sD9qddvUiysf1oMR5YQEceI.roa
Signing time: Sun 01 Jan 2023 13:25:16 +0000
ROA not before: Sun 01 Jan 2023 13:25:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204281
IP address blocks: 91.92.162.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:82:07:ad:19:b6:5f:69:6a:e5:d6:85:0b:c4:5d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24cd3ab03f6a75dbd48b2b1fd68311e5840471e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a2:3f:af:d7:34:a9:80:15:ee:ac:a9:47:54:
6c:91:75:30:05:49:bb:36:49:d7:51:9d:cc:07:9d:
9a:67:67:d5:0e:60:4d:57:7d:3c:3f:d6:f8:71:d0:
bb:30:bf:cb:c3:e4:42:20:54:0f:a1:ab:78:65:82:
57:c2:ca:5a:89:44:cf:7c:87:74:e5:22:c3:22:5a:
2e:44:67:40:3a:f9:eb:61:a1:de:5e:dd:d6:67:d3:
57:a8:bc:ee:93:71:ad:5b:c9:70:75:ba:ed:9b:5f:
15:b8:a3:fe:4d:36:64:cb:cd:91:24:bc:00:5f:8c:
52:5c:6d:c9:ac:f0:de:54:0b:94:08:57:2c:b2:35:
45:76:29:2d:7e:e5:6d:96:a1:cb:51:c6:b8:ed:4c:
05:37:3a:4c:f2:29:f6:9c:2c:0d:ca:53:9f:f2:59:
3f:63:52:2a:b7:d1:17:92:c4:aa:54:d6:ff:f6:05:
e2:bb:1b:c8:20:6c:0a:4e:15:f4:7f:4a:2f:93:49:
c6:c1:30:fb:5c:7d:a9:ea:4f:fb:21:6d:84:cd:d0:
c4:bd:ea:a1:04:fd:7c:df:6d:a0:00:c0:29:74:41:
e1:a2:40:e5:73:7f:6d:af:e0:d9:85:43:ee:37:c2:
ee:41:1f:16:08:94:b9:a1:f7:9d:72:08:5f:4f:9d:
97:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CD:3A:B0:3F:6A:75:DB:D4:8B:2B:1F:D6:83:11:E5:84:04:71:E2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JM06sD9qddvUiysf1oMR5YQEceI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.162.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:5e:c8:da:4b:42:e7:cc:ec:2a:90:59:96:98:9d:42:2f:53:
fc:c3:ab:1a:fc:8a:2e:95:1d:ca:9a:e0:9d:ab:69:21:9e:13:
15:51:af:63:6e:fd:27:5e:63:fe:3b:84:c2:99:03:63:b1:15:
15:16:b4:50:8f:ee:7e:a2:ce:1b:7c:6d:18:40:5c:4a:38:45:
db:7a:a7:ea:72:c6:f5:ca:f8:c2:35:ee:1d:4f:01:2f:16:de:
eb:bf:88:e1:15:4a:14:9e:5c:0f:7f:2e:e5:5b:97:71:a0:0a:
ef:97:76:82:aa:36:3e:1e:25:1c:7a:04:cb:1b:63:47:cd:ce:
3d:d6:ed:12:64:92:79:a4:90:5e:ae:d1:6e:94:09:95:b2:b0:
e8:cc:16:f0:e7:67:6b:52:04:23:12:74:fd:3b:34:17:2c:92:
b7:96:2c:77:d6:a7:27:61:3a:92:2a:4d:5d:98:75:cc:d0:13:
60:14:f2:e3:fc:dd:04:e8:5e:2a:e0:c7:9a:73:94:98:2f:bf:
f5:85:58:2a:75:e2:b4:dd:50:a2:fe:2d:a7:f8:f2:a0:61:8d:
14:cc:7b:6c:00:ca:1f:3c:7f:8f:8e:fd:e0:92:47:4e:ce:55:
f6:99:e7:c2:37:ad:25:ec:f7:0d:b5:af:40:52:52:2c:46:27:
89:71:b2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:47 2024 by rpki-client on console-fra.rpki-client.org