Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/J3gM3D9XyMg0_YhFEzLWDaMqa2g.roa
File: J3gM3D9XyMg0_YhFEzLWDaMqa2g.roa (raw, json)
Hash identifier: MuQ0eRDjSqYqo14SiWXV2gDCb9ZDxMSNiXBacfh7IhA=
Subject key identifier: 27:78:0C:DC:3F:57:C8:C8:34:FD:88:45:13:32:D6:0D:A3:2A:6B:68
Certificate issuer: /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Certificate serial: 018CC5012AC8DF8E19450912074D1B33B4C2
Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/J3gM3D9XyMg0_YhFEzLWDaMqa2g.roa
Signing time: Mon 01 Jan 2024 12:30:37 +0000
ROA not before: Mon 01 Jan 2024 12:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197928
IP address blocks: 91.229.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:2a:c8:df:8e:19:45:09:12:07:4d:1b:33:b4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Validity
Not Before: Jan 1 12:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27780cdc3f57c8c834fd88451332d60da32a6b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:72:d5:fa:b9:7f:9a:5e:4e:47:9e:25:d9:be:
f5:c1:02:f7:02:1a:f9:ee:e0:ac:16:20:9b:d5:45:
89:88:64:4d:b8:cb:44:7a:90:19:e3:c9:57:c6:45:
fa:f9:10:36:ee:f6:72:de:3c:44:05:de:95:05:cf:
0c:3b:4f:94:1b:c1:73:cd:3f:df:ab:61:47:30:b7:
45:56:5d:45:0d:6c:15:15:33:74:04:4d:e9:84:c2:
72:77:d4:e5:3a:1e:8c:96:b4:09:2b:48:97:fa:3b:
52:9d:9d:79:86:d0:74:63:06:41:b7:3b:17:4a:d6:
22:f9:60:0c:7a:b4:61:e5:b7:62:6a:ce:82:f5:da:
6a:61:6f:bf:af:06:cf:46:66:e0:25:57:17:f3:c7:
9e:96:63:10:9d:5d:03:a7:63:ad:e1:95:ad:d3:b7:
1e:83:c0:2f:69:cb:f1:62:9c:b5:0f:11:65:26:9d:
e2:19:c4:88:eb:c5:10:63:49:f4:9b:c9:d8:a5:12:
ae:63:bf:13:f5:e4:f9:8b:ac:7f:2d:d0:eb:ef:ee:
b2:19:d6:2c:4e:9a:47:e3:c2:3c:ad:19:e2:f6:c9:
98:e2:74:c8:d1:5d:de:f1:ec:06:2f:bb:b3:30:04:
3f:c7:74:52:53:e0:2c:2d:f0:11:a2:4a:34:d2:b6:
f7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:78:0C:DC:3F:57:C8:C8:34:FD:88:45:13:32:D6:0D:A3:2A:6B:68
X509v3 Authority Key Identifier:
keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/J3gM3D9XyMg0_YhFEzLWDaMqa2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.238.0/24
Signature Algorithm: sha256WithRSAEncryption
77:00:92:07:c1:47:a3:f5:96:05:ec:3b:71:99:86:e9:db:23:
a6:35:39:f3:1d:fb:c9:9d:0a:b4:06:25:3c:8d:ad:87:d8:a7:
ba:b0:b5:41:2d:e2:5d:0a:ef:e6:59:de:00:a4:05:f8:36:4b:
62:66:10:9a:38:4e:13:35:60:6b:7f:59:51:f0:c5:b6:03:dc:
96:06:5b:14:98:6a:99:50:27:5a:26:ad:96:f5:53:79:77:04:
21:ed:ba:31:89:8c:96:bc:55:dc:f5:88:ab:63:70:eb:52:60:
d0:06:f0:58:3f:f9:20:ce:a9:7c:e4:73:63:9f:f2:cf:c3:68:
c5:80:01:88:00:d4:e9:0c:65:c7:1a:98:67:8b:bf:4d:d1:51:
38:27:15:1c:4a:c0:ee:a7:c3:37:35:2a:0e:ad:05:d0:5a:11:
91:77:d8:a1:3a:ff:c7:b1:d4:ca:40:31:c5:01:8d:3a:58:17:
a7:91:76:e6:73:e6:38:3b:bf:fc:3c:6a:74:19:96:7f:ea:f2:
3e:27:69:11:69:38:12:f3:2e:66:ae:a8:c8:86:f1:44:f9:de:
1c:3e:72:6a:36:b1:e2:16:45:34:04:c5:c2:11:77:dc:70:c8:
30:b4:1b:95:f3:e9:79:bb:a5:80:05:8d:e3:9d:4d:31:fd:8a:
05:b7:82:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:28:14 2025 by rpki-client