Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/JsfrvbJiB1G5oNbklrL-0rPOByM.roa
File: JsfrvbJiB1G5oNbklrL-0rPOByM.roa (raw, json)
Hash identifier: hwRXvww2tOVaZX6YvIaRRtZgu6VjgSO+bja8BM6eyMo=
Subject key identifier: 26:C7:EB:BD:B2:62:07:51:B9:A0:D6:E4:96:B2:FE:D2:B3:CE:07:23
Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial: 018AFB454EBC44E1E269835B2A1629E1F10B
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/JsfrvbJiB1G5oNbklrL-0rPOByM.roa
Signing time: Wed 04 Oct 2023 15:18:57 +0000
ROA not before: Wed 04 Oct 2023 15:18:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1241
IP address blocks: 91.230.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fb:45:4e:bc:44:e1:e2:69:83:5b:2a:16:29:e1:f1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Validity
Not Before: Oct 4 15:18:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26c7ebbdb2620751b9a0d6e496b2fed2b3ce0723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a9:d3:17:70:6a:d6:7f:6d:e7:67:4a:ef:74:
99:76:63:78:a9:7a:63:c6:12:04:26:64:27:25:e7:
f4:40:43:7b:c8:b8:c8:e1:f7:33:67:d8:77:5c:3b:
2a:79:a4:e8:bc:ef:03:30:12:6d:78:ac:f2:0a:62:
8a:9f:a5:e3:e9:ed:47:a3:d9:11:42:81:65:81:7f:
8a:6d:5a:8e:32:2e:ec:c2:1f:95:44:1d:63:95:a8:
33:53:7e:17:85:19:eb:ba:36:7d:4a:36:cc:5f:ed:
c3:3a:47:44:8d:35:b2:64:90:82:f9:62:af:50:a2:
ab:fb:a9:d0:3e:52:2f:03:74:66:03:81:30:22:9b:
f2:c9:e5:ca:17:b7:24:26:eb:02:ea:5d:96:94:33:
94:c7:5b:17:b4:14:ae:48:96:cc:8f:36:4a:31:07:
d2:cb:41:3f:a0:e8:c2:16:35:ec:87:66:ac:6a:10:
e3:eb:54:d7:91:29:c0:8b:fe:8c:bf:dc:3b:30:95:
c9:7e:40:31:6a:50:ae:19:ee:de:2d:ea:62:2e:05:
3a:49:9a:4b:74:5d:37:16:29:bd:4b:1c:c2:96:ef:
e8:4e:72:90:32:2d:ef:76:7d:bf:23:32:2a:cc:82:
01:bf:e4:c2:76:24:75:bd:ad:a8:52:96:a8:b0:0f:
6a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C7:EB:BD:B2:62:07:51:B9:A0:D6:E4:96:B2:FE:D2:B3:CE:07:23
X509v3 Authority Key Identifier:
keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/JsfrvbJiB1G5oNbklrL-0rPOByM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.247.0/24
Signature Algorithm: sha256WithRSAEncryption
14:9f:22:6a:8e:3b:72:de:a7:58:39:9b:26:dd:11:f6:44:61:
c8:c0:9d:32:23:6d:5d:20:58:99:19:07:c6:27:d6:5d:c6:60:
95:5a:dc:95:d0:cd:b3:5a:47:a0:6e:4d:82:04:b6:68:b9:f8:
93:49:7a:80:0a:df:65:3b:5b:c3:b1:03:d5:3c:35:14:ee:38:
b8:92:06:a6:33:7d:95:55:98:f5:3a:d8:04:5c:b5:d8:74:ba:
c6:bc:de:75:63:95:f4:7e:16:0f:a5:cc:ae:f6:a9:3a:07:68:
9b:b5:20:22:a5:52:a5:0e:8e:8e:6c:60:9c:14:1a:54:0c:7c:
45:ce:d4:c3:1b:b3:e5:41:6a:a1:ab:46:61:7a:f9:de:f6:20:
30:7e:1f:e9:c8:dc:6a:a5:79:60:92:24:bd:65:b7:72:c2:2d:
d5:79:cc:da:3c:1a:0f:29:ba:b2:0b:e6:06:6e:b2:55:a7:ce:
8a:04:07:04:e9:81:66:1c:9f:95:64:f0:f0:86:f5:9b:e1:f6:
be:3e:24:4a:e0:43:53:bb:e3:4d:8e:6b:02:8b:53:06:d8:2d:
99:92:69:90:56:8b:c8:27:cc:3e:e6:42:ac:64:37:9c:d3:2f:
12:c4:2c:31:a1:95:e9:72:7d:f3:da:c0:88:86:dc:7b:5e:8d:
73:00:94:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:09 2024 by rpki-client on console-fra.rpki-client.org