Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Jmy7uAsW1uMGGLzTPGRoNeFQINU.roa
File: Jmy7uAsW1uMGGLzTPGRoNeFQINU.roa (raw, json)
Hash identifier: L+heOp7+1ZaWbm3Srs1+/ethRQWTR4SmYjQVBxlkmi8=
Subject key identifier: 26:6C:BB:B8:0B:16:D6:E3:06:18:BC:D3:3C:64:68:35:E1:50:20:D5
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 018B8F87AF7E32FB122DB5BB4357697BA588
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Jmy7uAsW1uMGGLzTPGRoNeFQINU.roa
Signing time: Thu 02 Nov 2023 10:15:15 +0000
ROA not before: Thu 02 Nov 2023 10:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 91.198.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:87:af:7e:32:fb:12:2d:b5:bb:43:57:69:7b:a5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Nov 2 10:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=266cbbb80b16d6e30618bcd33c646835e15020d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:6e:31:6c:fb:be:28:cb:6c:88:2f:4b:26:
8c:1f:9e:91:ab:a2:5e:e7:b9:e2:9c:40:97:5c:00:
e5:f6:4c:54:68:b6:99:a4:a0:0d:ea:e6:0b:0b:f4:
37:e6:2e:98:aa:f0:9f:5b:50:a1:cd:06:39:5c:fa:
1a:be:e3:3a:db:b4:e3:6d:59:96:c6:4e:00:7d:41:
4a:f8:96:32:94:d5:00:92:65:97:ad:e8:1d:00:b7:
91:2b:54:b2:84:b0:8a:3d:92:0c:f9:f5:91:07:e4:
f8:04:6e:ee:66:d9:87:57:3d:76:82:fc:2d:4f:7f:
8e:26:a8:64:4b:1e:c9:01:86:ec:10:d0:5c:9c:b1:
ed:b7:fb:3b:ed:0e:aa:c6:c3:79:15:05:00:08:f2:
4a:a4:c5:1b:d9:a7:a4:c6:05:25:81:19:86:78:43:
03:bd:8c:5a:49:0d:4b:dc:5e:69:ad:4b:62:20:d6:
55:a9:73:c1:61:2c:6e:83:1b:3e:f3:90:c0:94:d4:
3d:bf:17:bd:6c:f5:dc:4a:ad:da:63:94:f8:1e:2a:
10:0d:55:04:f7:78:53:09:09:5d:e9:a7:c4:71:98:
b5:02:be:32:0c:dd:f3:73:e8:d2:59:5c:03:61:c0:
b8:79:b5:3f:6d:9b:b4:97:68:39:63:b6:51:eb:59:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6C:BB:B8:0B:16:D6:E3:06:18:BC:D3:3C:64:68:35:E1:50:20:D5
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Jmy7uAsW1uMGGLzTPGRoNeFQINU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.81.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:a9:09:df:84:79:bc:aa:e7:17:0a:17:8d:38:b8:1e:0a:67:
df:ef:94:e9:3b:3e:06:50:22:d8:f5:bd:95:74:b8:62:03:59:
cb:01:ff:2e:22:1c:c7:ce:d1:3a:c8:e1:02:56:09:a4:aa:18:
7f:41:34:00:73:6f:34:fc:4c:93:d2:69:d9:fc:67:10:4e:c7:
e4:b7:41:09:55:4b:5e:d0:b0:83:e8:f0:f0:19:28:b7:64:7b:
5b:25:4e:1a:85:b9:b1:51:aa:08:81:4a:72:80:cc:e8:3a:0d:
49:04:f5:c3:13:5f:04:ec:ae:c2:d0:9a:96:e7:50:96:51:30:
ac:a5:4a:e6:7f:47:db:f8:6f:e4:dc:41:8a:ba:1b:40:35:56:
32:d1:de:03:cb:0d:35:61:15:89:68:35:70:74:b9:b5:c2:27:
62:ee:f4:d0:ae:a3:ae:07:83:ee:14:68:63:ca:6f:2f:c5:92:
b4:19:78:5f:f6:c6:67:72:bf:78:a2:dc:d0:19:e6:c8:1e:65:
69:17:3e:ec:74:67:6e:41:d3:f1:31:6d:eb:52:c8:12:8b:43:
73:00:7b:73:34:2b:74:e2:09:ba:21:34:2c:05:84:df:3f:f0:
8b:7f:6f:5a:a1:9c:41:16:fb:c7:f9:41:8e:73:69:3a:39:f8:
fb:07:9a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:31 2024 by rpki-client on console-ams.rpki-client.org