Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/JyVS-FypHxbyix7RoPNe8xb0k5k.roa
File: JyVS-FypHxbyix7RoPNe8xb0k5k.roa (raw, json)
Hash identifier: wfC2na1FQ/moap0aYPciJCSvt+YrMb66enEUTetjgDM=
Subject key identifier: 27:25:52:F8:5C:A9:1F:16:F2:8B:1E:D1:A0:F3:5E:F3:16:F4:93:99
Certificate issuer: /CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Certificate serial: 01856D9D154FEC9D317D10AA8621BDC7DD9B
Authority key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/JyVS-FypHxbyix7RoPNe8xb0k5k.roa
Signing time: Sun 01 Jan 2023 13:54:49 +0000
ROA not before: Sun 01 Jan 2023 13:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 91.227.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:15:4f:ec:9d:31:7d:10:aa:86:21:bd:c7:dd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Validity
Not Before: Jan 1 13:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=272552f85ca91f16f28b1ed1a0f35ef316f49399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ed:e9:b3:f0:90:ab:f1:32:3f:87:29:ce:84:
98:31:15:00:d5:ac:b5:7c:1f:46:1c:7b:da:10:68:
12:64:f6:bb:46:60:93:a5:59:c9:9d:19:7f:6a:37:
dd:5b:37:7e:7d:ac:44:6b:61:87:b8:cd:1b:91:53:
c8:7d:4b:b3:4a:25:d0:f9:b0:9f:55:ee:7d:89:4d:
65:47:ae:42:da:9b:cd:de:65:43:50:01:39:c6:8a:
88:c4:47:71:85:85:ab:08:28:40:e3:ca:aa:4a:92:
dc:3e:b7:ee:cd:e8:b5:ea:ed:c5:45:f3:4c:30:bd:
41:4c:1c:c5:a3:24:df:dd:ad:8d:38:5a:d2:25:13:
da:2f:c5:94:e1:6a:36:58:2b:a5:f2:40:09:00:e1:
6b:c8:42:e4:e9:4f:80:cf:15:ab:6b:04:5c:72:3e:
77:69:91:d9:07:44:ba:aa:24:b9:11:ea:a0:22:57:
dc:ce:97:8e:b9:31:c5:29:5a:2b:c4:da:ce:55:6c:
3d:c3:1a:b1:e7:1a:02:51:53:c1:77:2b:7f:d2:0d:
08:15:df:ae:87:6a:29:c7:8d:7a:ed:3c:a8:40:b9:
ba:20:3c:34:c2:1e:89:a3:1a:70:f8:a6:72:a3:39:
c0:8c:25:51:bc:cb:52:28:3f:86:7a:46:e8:5a:39:
41:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:25:52:F8:5C:A9:1F:16:F2:8B:1E:D1:A0:F3:5E:F3:16:F4:93:99
X509v3 Authority Key Identifier:
keyid:37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/JyVS-FypHxbyix7RoPNe8xb0k5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.75.0/24
Signature Algorithm: sha256WithRSAEncryption
51:5c:31:a6:26:57:96:ba:8f:da:63:26:cb:a3:d7:8f:c0:43:
ab:93:ee:a0:ab:b8:00:0b:8f:71:bb:02:ae:78:b1:29:f8:44:
2d:6c:8e:06:ff:59:1f:8c:c7:7f:b6:65:69:65:2a:56:6f:ba:
e3:e9:02:ab:93:05:c3:a8:77:2d:87:ab:67:63:63:18:c1:13:
1a:f8:d6:0e:6c:ae:3e:ff:f0:1c:f6:0d:2a:a0:a9:7e:f9:dd:
f5:95:28:23:6d:58:7a:47:42:40:5b:c0:67:be:03:2e:87:e2:
83:54:bb:dd:a4:cb:ba:69:eb:ae:46:de:c7:fd:83:71:ad:09:
91:01:2d:6c:20:22:13:1b:5d:ca:65:04:a0:80:b7:e7:ac:e7:
d8:46:c6:53:d3:22:54:61:26:5e:4c:73:7f:18:f5:68:65:4c:
44:c9:a9:d5:69:ee:06:56:5f:03:e1:95:59:88:84:28:d8:cf:
cc:6f:79:ee:49:36:e4:1c:a8:55:bb:10:d4:d7:0c:b2:48:ed:
28:39:04:22:f1:41:e7:bb:88:7a:03:22:af:b5:30:cb:df:83:
42:43:e8:3c:5a:21:54:7c:99:a9:6d:93:3c:00:28:46:7f:a0:
33:d9:ea:a6:cc:58:05:ba:d3:3c:a6:bd:83:39:0a:e6:e9:3c:
e1:0e:dc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:04 2024 by rpki-client on console-fra.rpki-client.org