Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/Jf2YsR_hsJvDZLZrp0IZrL93CZ4.roa
File: Jf2YsR_hsJvDZLZrp0IZrL93CZ4.roa (raw, json)
Hash identifier: fpxGkJRWwsXbjwyKYa84mJCZlZPyJBTeMU/Odt0fgUI=
Subject key identifier: 25:FD:98:B1:1F:E1:B0:9B:C3:64:B6:6B:A7:42:19:AC:BF:77:09:9E
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 018C8C9D74AFC08C8A61814FE1ADE53B8C58
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/Jf2YsR_hsJvDZLZrp0IZrL93CZ4.roa
Signing time: Thu 21 Dec 2023 13:42:58 +0000
ROA not before: Thu 21 Dec 2023 13:42:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31863
IP address blocks: 45.91.224.0/24 maxlen: 24
194.126.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Dec 2023 16:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8c:9d:74:af:c0:8c:8a:61:81:4f:e1:ad:e5:3b:8c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Dec 21 13:42:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25fd98b11fe1b09bc364b66ba74219acbf77099e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:a6:0e:4e:55:98:8c:26:b5:74:78:7f:65:
e9:0e:85:93:c7:3a:60:2b:27:32:d7:91:d6:fd:32:
19:c3:c8:63:13:8d:10:a6:fd:44:1c:79:6a:39:e0:
68:84:75:7f:3e:1e:d7:11:fa:29:71:e8:2d:39:11:
ec:3f:b7:87:db:06:fd:17:50:95:04:d7:2d:0e:4c:
3f:fd:c6:98:06:d2:ee:ff:0d:ae:93:54:d5:32:42:
24:f1:da:a3:31:18:45:2b:7e:66:2a:13:45:ef:69:
12:83:d6:d4:44:a7:a1:ff:52:06:14:1f:85:c1:8f:
5c:a0:c4:1e:db:60:78:a7:f4:6c:02:23:f7:fe:e2:
a4:1f:05:e7:14:7e:ff:81:e5:bb:07:c7:3d:70:9b:
be:99:2a:1d:ad:26:33:88:65:93:f2:98:48:16:a1:
82:23:4a:36:b5:42:d8:ad:28:ca:ad:f2:09:f3:9a:
15:6d:c8:52:72:23:46:18:c3:99:7c:b6:38:4a:fd:
6c:38:2e:e7:92:26:04:da:4c:39:66:77:56:e6:01:
90:22:ab:78:2e:02:4e:c0:a2:e9:3a:9a:23:6a:97:
f2:c0:0f:9b:34:ff:f2:f8:a5:08:b6:10:10:79:c4:
07:e8:1b:5d:b1:7f:ec:49:9e:80:39:a2:78:6a:a5:
5c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FD:98:B1:1F:E1:B0:9B:C3:64:B6:6B:A7:42:19:AC:BF:77:09:9E
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/Jf2YsR_hsJvDZLZrp0IZrL93CZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.224.0/24
194.126.227.0/24
Signature Algorithm: sha256WithRSAEncryption
68:79:26:c7:e4:69:cd:fc:92:d0:e4:58:d7:1d:dd:11:f0:44:
8c:c3:6f:b5:a0:47:ae:7c:07:e5:ff:b0:9d:d0:3e:74:08:20:
a0:9c:53:ff:f0:ab:65:8c:aa:62:6d:ff:b4:68:98:44:cb:1f:
a2:ff:c7:5b:92:b9:59:ea:29:03:1c:99:71:bd:76:e1:0d:6a:
99:e2:f3:5a:9e:01:bb:15:0d:46:4f:c7:3d:01:23:22:88:bb:
d9:78:11:cc:b7:44:e0:72:94:35:86:65:6d:e4:a4:e3:d4:72:
10:01:fb:b9:37:78:f5:78:ff:37:fb:d6:b5:d6:7c:2f:0b:c4:
05:90:83:d1:25:e2:75:2f:56:1f:d7:da:9c:75:cd:50:11:1f:
0a:e2:68:5e:07:81:34:30:b5:f5:1d:99:5a:d1:ef:07:fb:6b:
d5:87:02:ba:11:06:d3:ed:4e:05:e9:a8:6f:8a:22:3a:01:60:
90:50:e0:ec:10:c3:7f:da:70:d4:18:15:1f:77:c5:aa:30:eb:
78:39:f0:55:4e:f1:c1:a7:54:dd:ea:d3:d3:7d:aa:68:e1:c7:
71:c8:a6:05:8b:89:66:fb:1e:51:c2:98:7a:65:35:d3:11:56:
2d:6e:d1:98:db:69:e8:55:36:94:f3:bf:85:b8:0d:c6:d5:e1:
22:1c:29:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:02 2024 by rpki-client on console-ams.rpki-client.org