Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/J2ggNrPtvghSVfjkseWMc-F_ZLU.roa
File: J2ggNrPtvghSVfjkseWMc-F_ZLU.roa (raw, json)
Hash identifier: TvgnH3tlGjVus/ngoAnMZE47JY+U+9WQT4hTvlID39U=
Subject key identifier: 27:68:20:36:B3:ED:BE:08:52:55:F8:E4:B1:E5:8C:73:E1:7F:64:B5
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 0187B8A19D45B5FD547C6B91E9CD71976C3D
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/J2ggNrPtvghSVfjkseWMc-F_ZLU.roa
Signing time: Tue 25 Apr 2023 13:36:51 +0000
ROA not before: Tue 25 Apr 2023 13:36:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56902
IP address blocks: 91.92.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Aug 2023 17:19:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b8:a1:9d:45:b5:fd:54:7c:6b:91:e9:cd:71:97:6c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Apr 25 13:36:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27682036b3edbe085255f8e4b1e58c73e17f64b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bc:5c:a3:0b:f2:2a:4f:ce:11:31:46:87:ae:
91:3d:14:2a:cb:c6:0a:69:8c:3c:66:2f:63:01:0b:
07:2f:63:d4:57:e0:46:43:61:9f:6d:a5:91:98:ab:
a7:f3:c3:ea:49:15:1b:84:eb:42:c6:c7:ec:86:d5:
56:29:c1:d4:c6:90:29:46:f8:7d:9a:0b:ff:5a:d9:
fa:a8:e4:ce:57:57:d2:82:a7:62:ca:0c:9d:ed:e9:
04:ed:42:44:54:c9:c2:8e:30:23:69:bf:6f:22:a0:
32:1d:1f:4d:57:e0:f0:49:61:54:57:99:16:62:83:
2d:4a:5b:93:5b:e6:7f:f0:ae:96:e8:0a:ac:a5:f2:
da:31:67:66:d2:05:c8:39:5d:9b:4b:73:c4:df:03:
10:9c:71:a6:6d:1e:82:aa:56:f8:0a:40:3c:63:06:
2a:8b:61:bc:d7:19:39:a7:54:fd:47:c1:99:43:48:
ed:8b:2d:90:eb:0b:05:f8:f3:a5:46:27:1a:0c:17:
40:a7:a5:1b:19:3d:c4:6e:8e:53:23:1b:81:82:61:
54:65:42:79:0b:1f:eb:f6:7c:21:bb:94:4f:3e:17:
ce:79:14:30:32:80:dd:d4:9f:ee:13:22:14:fa:e5:
60:0e:75:9a:d5:9f:af:5a:95:92:d0:fa:ef:25:c2:
5a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:68:20:36:B3:ED:BE:08:52:55:F8:E4:B1:E5:8C:73:E1:7F:64:B5
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/J2ggNrPtvghSVfjkseWMc-F_ZLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.115.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:4a:db:50:10:16:7f:14:ff:24:18:8a:97:77:bf:e5:2b:aa:
00:36:38:50:3e:4a:a7:48:32:7f:90:aa:f3:73:e8:d1:2b:55:
28:0b:7b:dc:fd:35:97:7f:c6:a4:53:df:2c:01:8a:65:93:f7:
ee:53:bb:71:9b:2e:be:13:d9:73:4e:e5:00:f1:a6:89:f5:a1:
fe:ed:38:be:47:9a:89:28:e4:05:06:b4:06:3f:bd:28:eb:a0:
e5:af:a8:94:55:79:f3:ae:49:ab:a7:39:b9:14:53:2e:4b:ad:
c4:c6:ba:f9:9d:ef:61:f3:2e:5d:49:10:21:7a:b7:7a:22:89:
20:13:6c:04:cb:7d:e5:db:12:ec:0c:4d:27:af:22:95:24:43:
a5:c7:57:84:98:c5:cf:8a:66:8d:34:c3:39:40:6c:11:c6:8a:
8d:82:42:25:9a:dd:1e:3b:58:0b:07:ab:f1:23:a2:be:fe:58:
bd:e5:ba:db:d4:cc:3f:99:c5:1d:3f:7b:d8:1f:2c:48:31:0e:
8d:9b:15:22:ff:8e:2c:ed:de:0a:50:6e:7f:57:fa:ed:0c:a7:
35:23:ad:b7:05:60:6e:0b:ef:b9:38:f5:62:19:27:dc:53:b7:
4e:3a:6a:1b:e2:55:b7:22:2e:ee:0f:8c:c1:ce:2e:fb:05:93:
c9:d7:95:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:20 2024 by rpki-client on console-ams.rpki-client.org