Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/w-JqOU0qj1TgCsiX-aFhbq-9JGM.roa
File: w-JqOU0qj1TgCsiX-aFhbq-9JGM.roa (raw, json)
Hash identifier: x6VRovdzjs76ThKMootHe/hnoyz8e4IlCzjBRD57FFU=
Subject key identifier: C3:E2:6A:39:4D:2A:8F:54:E0:0A:C8:97:F9:A1:61:6E:AF:BD:24:63
Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Certificate serial: 018CC94D770DA4A371D89426EDFE4450810E
Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/w-JqOU0qj1TgCsiX-aFhbq-9JGM.roa
Signing time: Tue 02 Jan 2024 08:32:26 +0000
ROA not before: Tue 02 Jan 2024 08:32:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51824
IP address blocks: 91.221.85.0/24 maxlen: 24
91.221.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 00:23:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:77:0d:a4:a3:71:d8:94:26:ed:fe:44:50:81:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Validity
Not Before: Jan 2 08:32:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3e26a394d2a8f54e00ac897f9a1616eafbd2463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:97:30:ba:8c:f4:0b:eb:12:df:a3:93:f6:83:
85:33:4e:42:8e:2d:45:69:f8:88:2a:5c:1c:78:a8:
80:e5:1c:a1:42:3e:5e:81:04:a0:95:48:d4:58:12:
a4:7b:f1:3e:90:db:37:cc:fd:dc:ce:57:10:ad:b9:
38:80:aa:20:29:ad:b2:fd:e9:8f:43:35:cd:d0:c9:
4d:9b:17:d5:54:49:98:cc:93:9a:4c:e4:40:7d:c3:
68:f4:e4:91:5a:2c:9f:cd:94:97:8b:0d:5d:1d:94:
d4:34:da:bd:18:e7:56:89:c2:2f:73:cd:d3:10:b6:
c6:c2:16:19:e9:f2:d5:4f:55:c8:7e:08:ca:6b:d0:
95:69:50:d3:b9:7b:ec:22:46:d3:35:bb:16:c1:ac:
9d:bf:2c:ea:71:ac:56:96:7c:ed:c9:5f:34:b0:6c:
91:07:5c:40:40:fe:6e:6d:b5:0e:33:a3:2f:b4:b7:
99:10:13:e6:6b:7a:c8:db:f1:3c:8c:ef:ef:71:b4:
8e:a4:1b:61:c7:f5:1e:1e:37:46:96:dc:f4:db:70:
fe:67:a4:0a:48:39:16:9d:f5:43:95:50:6b:52:cf:
4d:86:57:60:d4:36:6e:ed:c0:52:0f:2a:da:d8:18:
fa:59:1b:1c:1e:39:6d:f6:45:53:da:7e:bf:7f:60:
3c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E2:6A:39:4D:2A:8F:54:E0:0A:C8:97:F9:A1:61:6E:AF:BD:24:63
X509v3 Authority Key Identifier:
keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/w-JqOU0qj1TgCsiX-aFhbq-9JGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.84.0/23
Signature Algorithm: sha256WithRSAEncryption
35:ee:44:c6:97:57:23:3c:c1:78:1e:50:27:b1:61:a3:42:63:
48:9e:33:1d:bc:b4:2a:3f:c3:5d:2c:f0:93:4d:4c:90:ce:9b:
ba:39:e3:1d:75:42:6c:84:43:2f:18:59:4b:41:03:17:fc:b6:
2f:29:33:e6:25:cf:a0:c5:ca:bd:6c:a5:c5:d9:42:7e:ca:d2:
83:20:54:87:8b:b2:5d:aa:ab:0c:22:bc:72:82:c1:a1:76:3b:
17:e1:dd:1c:5e:3b:b5:a3:75:dc:82:09:e4:d1:5d:e6:44:6a:
9b:bd:50:75:d2:bb:50:83:ff:a9:0f:6c:a4:b5:5f:f0:25:66:
20:93:2a:73:be:0a:cc:82:99:ea:82:30:bf:63:b3:36:cc:9e:
fa:ae:a7:eb:77:0b:62:41:07:2c:11:79:aa:f6:f3:ec:2e:13:
f6:e8:13:b7:33:ba:12:f6:32:9d:d4:12:7c:1d:43:b5:4f:94:
ee:76:d1:f0:ad:c9:fe:a4:bd:d9:ac:ba:ce:8b:ad:53:a7:55:
2c:48:1c:40:87:0b:9f:41:24:72:b9:75:aa:92:6e:ea:cb:87:
1b:14:6c:96:ce:9d:ad:a0:86:46:94:37:cc:d0:ff:47:17:3a:
1f:be:32:ec:ba:bd:6e:49:0a:32:88:b8:a3:83:3e:ff:f3:13:
7f:53:22:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:44 2024 by rpki-client on console-fra.rpki-client.org