Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/sf_BjisMp-GFI5_uRCxR22uRNQw.roa
File: sf_BjisMp-GFI5_uRCxR22uRNQw.roa (raw, json)
Hash identifier: tRkwYCJeTVZEDEzMIFXYdSwYzzkahINvuXVNA+ZkKmU=
Subject key identifier: B1:FF:C1:8E:2B:0C:A7:E1:85:23:9F:EE:44:2C:51:DB:6B:91:35:0C
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 018CC64B6BCA613B7FD08DD4E2674292837F
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/sf_BjisMp-GFI5_uRCxR22uRNQw.roa
Signing time: Mon 01 Jan 2024 18:31:20 +0000
ROA not before: Mon 01 Jan 2024 18:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396356
IP address blocks: 91.238.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 17:56:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:6b:ca:61:3b:7f:d0:8d:d4:e2:67:42:92:83:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jan 1 18:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1ffc18e2b0ca7e185239fee442c51db6b91350c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1a:aa:2f:91:f4:45:e1:05:68:60:6c:a7:16:
a9:07:1e:12:25:87:cc:fa:f0:4e:8f:e7:63:e8:3d:
0d:8f:13:7b:3d:df:e0:41:84:e4:67:fd:72:f2:f2:
6f:3a:e5:67:f2:b4:fe:ef:19:10:70:82:33:74:3c:
ac:d7:62:00:ed:46:6c:bc:b5:d3:20:05:6f:3f:20:
c2:27:5b:73:49:b2:1a:e5:90:19:17:0e:23:fc:58:
11:db:f7:34:5b:c6:fa:ce:d6:4d:41:db:e1:4d:fc:
be:7c:9b:c6:67:4b:24:e2:44:31:b4:bc:d3:fa:df:
61:77:d6:a8:2f:1e:d7:7b:03:dc:cf:13:1f:c1:93:
77:52:e3:d9:f2:0a:95:be:39:7d:1a:23:9c:05:43:
7c:99:5c:ff:b4:c4:d0:5b:84:3a:0e:47:85:99:8b:
fc:48:9d:8c:e9:dd:5a:4b:87:3e:3f:08:5d:cf:6c:
3e:55:05:7e:9d:84:86:7e:e3:b0:27:da:8d:b5:3f:
41:ff:83:43:23:9b:2b:fb:60:c5:38:81:82:36:8b:
f4:fc:3e:b6:b1:f5:d6:4f:7b:01:fa:a7:65:8b:12:
94:6c:48:85:dc:1e:25:99:4f:eb:52:a8:ba:1b:9c:
05:e5:10:77:25:e8:ae:f3:15:cb:f5:b8:9f:5f:d1:
06:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FF:C1:8E:2B:0C:A7:E1:85:23:9F:EE:44:2C:51:DB:6B:91:35:0C
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/sf_BjisMp-GFI5_uRCxR22uRNQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.213.0/24
Signature Algorithm: sha256WithRSAEncryption
99:4c:0d:df:46:9d:52:74:e0:b4:f1:03:50:67:ef:e4:5f:e3:
eb:46:30:4c:55:73:8a:d4:cf:9f:d7:75:77:c2:08:c3:ba:d8:
a2:b8:6f:6d:75:62:94:f1:b1:ca:f6:f9:df:c2:80:f1:26:cd:
a6:fa:55:a1:ca:a8:24:17:85:3d:f3:a5:d5:4f:b1:81:91:84:
49:a1:87:06:e9:e9:a5:db:fe:f5:1e:7f:15:16:c9:09:f4:42:
e3:53:63:54:6a:b6:0e:7f:b3:26:4c:91:84:53:d2:cf:99:de:
52:aa:80:5b:ae:e5:ba:c6:fc:31:62:53:c3:e9:db:1f:36:a4:
4b:be:07:72:d8:a0:66:0b:80:8c:ad:7b:da:39:50:c6:4c:ea:
8c:3b:8e:bc:13:c6:fb:47:9e:0f:e8:4c:6e:ae:23:66:21:94:
7c:66:a9:76:d9:02:0b:ad:bc:6d:4d:12:fa:7e:d7:c1:ec:67:
fc:3e:d8:aa:56:40:d8:0b:86:38:fe:28:5b:72:fc:93:05:57:
01:91:9e:47:80:fc:11:99:fb:c4:26:43:09:e2:f0:71:4c:cf:
59:37:b1:5b:75:96:b2:2a:03:36:c2:18:fb:16:1b:09:df:47:
5f:9a:60:7b:f5:3a:8d:c5:22:fc:16:3e:bb:cc:45:d5:5e:2d:
d0:b4:89:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 22:54:30 2024 by rpki-client on console-ams.rpki-client.org