Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0b709f-53ab-49c9-8b83-5ae957f2cdbb/1/jaLW95HpoRix5ZZFLjdxcn-tQpg.roa
File: jaLW95HpoRix5ZZFLjdxcn-tQpg.roa (raw, json)
Hash identifier: tEzRvsBxySJkVwCqKRqQ/5bXJ9ILMFmd0n52hyYuOGE=
Subject key identifier: 8D:A2:D6:F7:91:E9:A1:18:B1:E5:96:45:2E:37:71:72:7F:AD:42:98
Certificate issuer: /CN=cb6927b169e3d0f5cb94b343381992f48536c855
Certificate serial: 01856B934CCC4BF35517D16A24160E6629EB
Authority key identifier: CB:69:27:B1:69:E3:D0:F5:CB:94:B3:43:38:19:92:F4:85:36:C8:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2knsWnj0PXLlLNDOBmS9IU2yFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0b709f-53ab-49c9-8b83-5ae957f2cdbb/1/jaLW95HpoRix5ZZFLjdxcn-tQpg.roa
Signing time: Sun 01 Jan 2023 04:24:53 +0000
ROA not before: Sun 01 Jan 2023 04:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210644
IP address blocks: 91.193.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Nov 2023 13:22:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:4c:cc:4b:f3:55:17:d1:6a:24:16:0e:66:29:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6927b169e3d0f5cb94b343381992f48536c855
Validity
Not Before: Jan 1 04:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8da2d6f791e9a118b1e596452e3771727fad4298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8a:8a:64:b2:e0:ce:83:a6:9d:af:c3:30:9e:
1e:b8:05:4c:6e:fa:b4:bb:f3:f9:dd:6d:00:8b:2a:
f5:c1:da:73:f1:b1:42:89:8b:60:bc:8d:2e:18:6e:
1a:b2:07:50:ce:19:ad:c3:e9:b4:91:5e:56:9a:11:
29:61:8f:58:bc:71:f0:4a:6e:05:67:09:8d:9c:4e:
0d:59:5c:d9:cc:a5:6f:75:29:a3:7d:58:ad:66:2f:
e1:5c:b9:31:33:fa:cc:1d:2d:47:db:4f:1c:52:58:
23:77:d2:90:cf:6d:5f:07:03:ec:d9:ea:0e:1a:c3:
13:74:58:0e:5a:8f:e1:49:88:f5:2d:8f:21:c2:9d:
a5:0a:80:7e:c4:1b:ac:86:6e:0f:a0:aa:91:12:ef:
42:a1:9c:d8:26:ae:53:ce:bf:ac:a3:c5:7e:6c:f2:
4d:3d:e9:5a:b8:93:12:85:0e:17:32:2d:38:ca:f3:
a7:bb:20:46:bd:81:4c:0c:56:78:b9:37:b3:7f:0f:
bf:9f:d7:f8:7b:d3:3d:f7:25:ca:8d:ef:6b:dc:da:
73:2c:0e:33:ed:5d:00:55:f5:dc:3b:05:1b:2b:d1:
ed:dc:84:83:92:7a:cd:e0:d9:0d:25:97:8a:21:e7:
08:26:d4:d0:28:f2:2a:8c:81:77:60:59:e8:fa:fa:
a2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A2:D6:F7:91:E9:A1:18:B1:E5:96:45:2E:37:71:72:7F:AD:42:98
X509v3 Authority Key Identifier:
keyid:CB:69:27:B1:69:E3:D0:F5:CB:94:B3:43:38:19:92:F4:85:36:C8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2knsWnj0PXLlLNDOBmS9IU2yFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0b709f-53ab-49c9-8b83-5ae957f2cdbb/1/jaLW95HpoRix5ZZFLjdxcn-tQpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0b709f-53ab-49c9-8b83-5ae957f2cdbb/1/y2knsWnj0PXLlLNDOBmS9IU2yFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.43.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:4d:f6:fe:50:26:b1:4a:09:ff:aa:e8:4d:85:63:4e:be:c6:
37:cf:74:dc:bc:0d:51:88:f1:07:e0:50:cc:4d:92:71:c5:94:
45:a8:aa:17:03:8b:e2:49:5a:2d:a4:3f:86:37:42:c8:f7:26:
40:3a:e5:37:41:05:19:42:85:26:94:09:bc:e9:b9:2d:13:41:
b1:87:34:dd:cd:d7:f1:fb:56:fc:5d:f8:e6:01:ae:4d:20:fa:
79:65:54:ec:be:ff:9f:04:a8:24:39:ef:ca:7c:04:f1:87:c4:
6f:fc:78:5a:de:7d:41:58:e7:69:ad:48:ae:c3:fe:83:ee:43:
99:d6:c0:fa:5f:f2:a0:11:3d:aa:5e:65:1a:fc:5a:08:25:3c:
40:06:9d:3f:34:95:70:80:f2:8c:f9:67:9f:7e:7a:bf:44:7c:
a2:fc:6e:55:9a:1c:fc:75:3a:d1:b6:a7:65:0a:f8:55:8d:8b:
59:07:7c:ec:80:3c:f7:32:11:d6:ed:a4:de:b3:59:3d:5c:42:
2e:eb:20:c0:d9:18:f5:1c:9d:78:7d:cf:1b:9f:3d:7f:32:2a:
f4:e6:07:56:28:e1:9f:62:88:4c:4b:57:cb:d0:da:6b:fd:3e:
17:b1:a2:9c:f3:0b:db:98:ce:b9:6a:7b:e9:25:56:c5:d7:e2:
c6:54:4a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:49 2024 by rpki-client on console-ams.rpki-client.org