Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/jjLkqwqfyx_OScwXQEOdNhCjr2k.roa
File: jjLkqwqfyx_OScwXQEOdNhCjr2k.roa (raw, json)
Hash identifier: OozKL5H2UueGyRctKWmg3cn111dy3UBsZG9wX8CDjIg=
Subject key identifier: 8E:32:E4:AB:0A:9F:CB:1F:CE:49:CC:17:40:43:9D:36:10:A3:AF:69
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0186C802847059932F7C830477D2DF13536C
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/jjLkqwqfyx_OScwXQEOdNhCjr2k.roa
Signing time: Thu 09 Mar 2023 20:14:13 +0000
ROA not before: Thu 09 Mar 2023 20:14:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213305
IP address blocks: 91.147.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c8:02:84:70:59:93:2f:7c:83:04:77:d2:df:13:53:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Mar 9 20:14:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e32e4ab0a9fcb1fce49cc1740439d3610a3af69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1e:97:b9:b0:5f:82:9d:67:35:4e:a7:bb:e9:
f7:e1:c8:69:d4:bf:17:4a:45:0f:e6:08:4c:4c:d0:
7e:8c:d5:fb:15:cf:01:cf:2c:33:1d:01:f4:05:fc:
07:db:4c:4b:ac:50:7d:a4:42:fc:f1:ed:4f:3b:d3:
e9:ea:7d:51:c9:69:6c:69:f3:19:bb:da:1e:d5:0e:
00:da:a8:f7:d8:e1:15:66:d0:56:da:2b:3e:71:b2:
12:b7:b3:e7:38:0a:ba:b5:c6:08:7b:37:fb:c2:c7:
0a:2c:a9:73:b2:b0:0d:23:fd:17:2c:c8:5b:df:02:
ed:ce:b7:44:a2:b5:06:5d:94:50:7f:88:24:a6:6c:
48:d7:56:85:23:4d:50:db:58:ad:97:83:b2:fb:05:
54:89:fa:4b:f3:80:a2:8f:4d:2f:37:22:dd:cd:67:
ed:a6:c6:3f:bb:57:8c:ef:0f:b2:65:ef:d7:f3:f2:
4b:d9:c9:3f:3e:cd:c6:60:da:7a:63:aa:82:3c:04:
e4:ce:c9:de:d0:e2:ed:66:ca:ed:9e:b8:6c:78:af:
38:5e:e6:ca:95:03:a9:1b:82:4e:44:ea:23:fd:11:
d4:32:24:0c:52:a5:ef:f7:64:b8:ef:23:4c:8e:b4:
4a:c9:b4:72:b4:3b:22:a3:55:0d:44:a8:a0:0f:ff:
3e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:32:E4:AB:0A:9F:CB:1F:CE:49:CC:17:40:43:9D:36:10:A3:AF:69
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/jjLkqwqfyx_OScwXQEOdNhCjr2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.118.0/24
Signature Algorithm: sha256WithRSAEncryption
55:41:c8:0d:21:29:dc:42:03:71:e5:72:7c:cc:b6:cf:0f:82:
90:c0:bb:a8:51:61:0a:82:37:1f:4a:c3:c4:9c:00:1c:81:b0:
f2:91:db:e0:5a:27:75:9e:f2:0e:20:7f:a7:c0:67:7a:8a:4b:
46:bc:30:15:c8:09:17:58:24:44:20:e3:7a:b1:30:82:2c:c6:
2b:0f:c9:ab:5c:47:8b:1b:2c:38:93:22:48:a7:e7:84:20:fc:
5b:c8:2b:bf:e3:00:e9:dd:c9:6f:d0:6e:01:5a:69:e8:eb:7b:
64:22:3a:c3:82:f9:fa:ad:c0:4f:3a:4f:1f:97:3d:ac:1f:60:
05:dd:2f:6f:eb:52:2f:c4:34:c2:a9:3a:cc:db:e8:b0:b0:a6:
43:8e:1a:72:60:24:c3:4f:a4:6e:14:a6:26:8a:0b:7d:45:25:
13:03:56:65:fa:d2:11:70:51:e8:5c:39:aa:81:90:2f:84:4b:
d0:2a:9e:35:d2:fa:2b:f2:5e:5f:19:47:d0:23:5c:ab:02:42:
8a:d1:6b:ff:5f:2a:13:9c:49:13:eb:b2:4c:ef:52:56:47:68:
74:58:6c:c7:aa:51:e3:34:6c:a5:0b:a3:2b:e7:4f:c4:87:8b:
b6:00:b0:4d:22:ae:ce:90:11:20:33:a4:55:67:03:f6:1d:b0:
0e:20:3d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:52 2023 by rpki-client on console-ams.rpki-client.org