Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/27CjHYn5xysYpKhGawEptRUFkGM.roa
File: 27CjHYn5xysYpKhGawEptRUFkGM.roa (raw, json)
Hash identifier: f9E7eSOUH66CkyAIBaJHoklAfMpomfDz/S6LuDW2utk=
Subject key identifier: DB:B0:A3:1D:89:F9:C7:2B:18:A4:A8:46:6B:01:29:B5:15:05:90:63
Certificate issuer: /CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Certificate serial: 018CC795451CF13AC3ECB0186E8F3E9EB468
Authority key identifier: FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/27CjHYn5xysYpKhGawEptRUFkGM.roa
Signing time: Tue 02 Jan 2024 00:31:37 +0000
ROA not before: Tue 02 Jan 2024 00:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48265
IP address blocks: 91.210.137.0/24 maxlen: 24
91.210.138.0/24 maxlen: 24
91.210.139.0/24 maxlen: 24
91.210.136.0/24 maxlen: 24
109.104.131.0/24 maxlen: 24
109.104.128.0/24 maxlen: 24
109.104.132.0/24 maxlen: 24
109.104.129.0/24 maxlen: 24
109.104.130.0/24 maxlen: 24
109.104.133.0/24 maxlen: 24
109.104.145.0/24 maxlen: 24
109.104.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 05:59:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:45:1c:f1:3a:c3:ec:b0:18:6e:8f:3e:9e:b4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Validity
Not Before: Jan 2 00:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbb0a31d89f9c72b18a4a8466b0129b515059063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4a:b1:3d:11:2f:3c:99:d7:e6:11:93:ab:a1:
a5:0b:fd:1e:47:70:b0:dd:5a:97:62:89:11:df:0c:
c6:5f:d3:2b:57:9b:08:da:87:52:8c:6f:1e:74:26:
f1:f3:e7:3a:d9:4f:ed:80:b9:c9:9f:fc:d5:c4:51:
69:f8:53:c2:16:e0:0a:3b:62:12:b7:d0:51:a2:b2:
a4:d3:dc:c0:d5:b4:75:41:00:6a:dd:dd:5b:61:19:
25:08:4d:a4:36:4b:e1:66:27:20:0d:13:e8:97:3a:
71:c5:76:d7:b8:b3:2c:f5:7c:80:2e:50:69:90:57:
cd:0e:ac:98:42:4e:4a:a0:ee:91:69:68:a7:f3:b6:
3f:ad:e5:8c:d1:4c:7e:f0:dd:71:56:06:58:cc:8d:
34:09:d5:7a:e0:b8:c3:c5:46:e9:0f:d1:53:b9:8f:
46:ee:ae:e6:4b:51:e1:ea:87:39:a4:de:e2:85:1e:
f2:a2:0e:83:4c:9d:e3:74:6c:26:be:e9:b2:a7:0e:
4b:96:34:00:61:d5:ed:7c:f6:a6:e0:8b:b3:b4:3d:
38:7a:ad:47:1d:49:52:3e:93:bd:a9:a4:26:d5:21:
77:d1:cc:e4:9f:78:97:1e:f2:c7:c5:ec:d7:4b:5e:
4d:2e:fa:0b:88:f4:ba:c2:d1:e6:0f:38:d1:98:0c:
31:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B0:A3:1D:89:F9:C7:2B:18:A4:A8:46:6B:01:29:B5:15:05:90:63
X509v3 Authority Key Identifier:
keyid:FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/27CjHYn5xysYpKhGawEptRUFkGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.136.0/22
109.104.128.0-109.104.133.255
109.104.144.0/23
Signature Algorithm: sha256WithRSAEncryption
38:ef:c1:33:51:d6:e3:d5:af:b0:8f:3f:50:60:56:8c:67:1c:
85:d2:2b:e2:18:f7:33:58:b6:9b:2a:6d:1d:92:17:bb:b7:48:
60:d9:77:6a:ef:98:06:91:c4:b8:0c:fa:e1:e0:7b:20:98:19:
bf:ab:2d:a7:f6:2d:52:61:ef:59:e8:77:d3:07:13:f9:e1:7c:
e6:7a:8d:13:58:ce:ae:2d:4d:3b:96:16:19:42:60:5c:b8:48:
b9:1a:83:cb:ba:36:e0:1a:e4:cd:5e:ef:b9:5c:95:10:b7:45:
9d:63:1e:c8:5e:5c:21:40:d9:84:91:e2:23:17:39:bd:72:00:
f2:ba:16:23:00:48:49:12:b5:85:20:9b:69:33:5d:49:90:6c:
8c:a9:a1:85:89:1c:37:73:d9:8b:ca:a3:2d:dc:3d:9b:be:ac:
73:f0:c5:d5:1f:21:45:24:d6:bf:12:df:32:d2:b7:42:6b:2c:
4e:5e:5b:25:f5:53:17:7a:c5:0e:64:3e:85:fd:93:69:95:19:
81:a3:90:e1:2b:5d:76:fc:8e:9b:85:a9:27:92:59:b3:6e:3d:
e4:d6:4e:45:82:d9:00:d7:d8:3a:69:99:4f:70:9f:22:3d:2a:
35:9a:b1:08:b1:bd:ef:52:99:60:01:d9:d6:65:24:ef:1d:f3:
89:1e:5e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 06:52:55 2024 by rpki-client on console-ams.rpki-client.org