Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/JXxsw61_at7Zz9v9s9DVYTA_3QA.roa
File: JXxsw61_at7Zz9v9s9DVYTA_3QA.roa (raw, json)
Hash identifier: 8RFmDICVgnvEmO2c8Gnrik3dngRS0KFRC8ZAcN+NVx8=
Subject key identifier: 25:7C:6C:C3:AD:7F:6A:DE:D9:CF:DB:FD:B3:D0:D5:61:30:3F:DD:00
Certificate issuer: /CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Certificate serial: 01908DE90AF4D4FF51D2AAD840EE33188F65
Authority key identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/JXxsw61_at7Zz9v9s9DVYTA_3QA.roa
Signing time: Sun 07 Jul 2024 15:56:18 +0000
ROA not before: Sun 07 Jul 2024 15:56:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15830
IP address blocks: 91.244.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8d:e9:0a:f4:d4:ff:51:d2:aa:d8:40:ee:33:18:8f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Validity
Not Before: Jul 7 15:56:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=257c6cc3ad7f6aded9cfdbfdb3d0d561303fdd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:02:5b:26:13:95:fe:56:13:43:c8:04:e4:f5:
e7:9c:fc:06:8c:78:59:a7:fb:2e:9d:77:bc:9b:42:
6e:ac:64:92:16:59:b8:b2:1a:a5:d1:a8:bc:d2:84:
51:ee:db:79:c5:b2:37:3e:23:e5:38:20:b5:60:81:
3c:ec:96:e6:a7:bd:08:f1:d9:63:80:a3:6f:4e:ba:
6b:38:ca:24:8a:e6:56:9e:d0:96:fd:c4:b7:d8:52:
bf:b9:a2:57:d2:c3:f1:60:f9:de:d5:5d:de:ea:57:
b6:23:a0:7b:f3:ac:63:64:2f:8c:85:ca:c5:a4:95:
09:93:f6:4a:a0:43:88:00:34:ba:d4:54:53:70:ba:
ce:2f:ad:8e:59:5d:27:26:19:38:ba:68:cc:29:a3:
0a:bf:ce:0a:d5:d6:38:a7:8e:01:e9:f7:b6:cc:17:
2e:76:44:d8:3c:2c:84:04:21:6d:cb:f6:93:a4:b4:
63:3e:f2:df:cf:83:36:a8:7f:07:f2:92:00:d3:b3:
7d:09:fa:fd:e8:32:b9:13:18:e7:b8:b3:da:90:8e:
cc:92:63:9a:1d:74:f5:61:85:c6:d2:d5:09:83:ed:
25:44:ec:63:8f:0b:06:82:e1:2b:81:fa:e4:bd:eb:
1d:0f:cb:69:39:31:d2:74:ba:f6:9c:3d:3c:a7:14:
00:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7C:6C:C3:AD:7F:6A:DE:D9:CF:DB:FD:B3:D0:D5:61:30:3F:DD:00
X509v3 Authority Key Identifier:
keyid:AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/JXxsw61_at7Zz9v9s9DVYTA_3QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.236.0/24
Signature Algorithm: sha256WithRSAEncryption
80:6f:b2:a5:bf:c9:a3:b5:45:9c:3a:ab:55:d4:72:83:58:3b:
c1:57:92:28:36:48:4e:61:f3:d2:49:af:ad:ca:9f:11:8b:fd:
ba:1d:71:4c:a4:c6:3e:26:0e:ff:f6:97:d7:7f:3b:61:bd:3d:
31:ad:75:81:6d:f1:f4:6f:8e:79:09:cf:aa:79:1a:8f:5c:4b:
c9:8c:92:ff:ac:99:f5:ee:dc:69:b6:fa:99:18:5c:25:a9:ef:
e6:6a:73:bf:21:67:45:4d:83:53:41:f1:21:9a:71:f4:fa:1f:
87:72:cd:4f:7d:4f:e6:30:70:ef:11:10:78:5c:38:d2:82:07:
75:7a:4e:40:21:b2:dc:a9:ae:26:eb:f4:d3:b0:2f:ad:3b:7b:
12:e1:7b:7d:17:c0:28:7e:de:90:b1:b3:4e:a6:37:94:fa:4b:
6f:28:c1:27:f1:c5:85:12:6c:24:f9:3a:00:22:5b:ea:95:06:
f0:15:b1:8e:ef:af:4d:a3:39:4f:ca:89:d6:fd:ed:b4:a1:33:
c3:84:3e:ef:bd:8d:77:63:6c:8d:ad:ef:6a:a1:8a:8f:38:b6:
21:98:00:98:cf:33:43:c8:e4:48:00:df:8c:c9:54:b2:d1:63:
b8:25:d6:86:ca:c5:0c:24:47:4f:4b:e5:fa:90:d8:cb:fd:86:
41:30:0b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:20 2025 by rpki-client