Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/cj3q_SvWn3ZA7qWXKSTD_ZRH3z4.roa
File: cj3q_SvWn3ZA7qWXKSTD_ZRH3z4.roa (raw, json)
Hash identifier: UkqXsChbfMvLwC2/HvNrPwHZOLsGmPC8IScxwjAi8II=
Subject key identifier: 72:3D:EA:FD:2B:D6:9F:76:40:EE:A5:97:29:24:C3:FD:94:47:DF:3E
Certificate issuer: /CN=2d6f9bdaf69dca1cdb9e440c97c10a092ec1b39c
Certificate serial: 01856F5DBD91B5D0978E497391E32782BEE0
Authority key identifier: 2D:6F:9B:DA:F6:9D:CA:1C:DB:9E:44:0C:97:C1:0A:09:2E:C1:B3:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LW-b2vadyhzbnkQMl8EKCS7Bs5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/cj3q_SvWn3ZA7qWXKSTD_ZRH3z4.roa
Signing time: Sun 01 Jan 2023 22:04:52 +0000
ROA not before: Sun 01 Jan 2023 22:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207857
IP address blocks: 91.209.227.0/24 maxlen: 24
91.212.11.0/24 maxlen: 24
91.212.14.0/24 maxlen: 24
91.212.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:bd:91:b5:d0:97:8e:49:73:91:e3:27:82:be:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d6f9bdaf69dca1cdb9e440c97c10a092ec1b39c
Validity
Not Before: Jan 1 22:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=723deafd2bd69f7640eea5972924c3fd9447df3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:24:b4:d3:20:63:87:3f:71:a5:ed:af:f1:
5f:41:ef:1b:fd:6e:1c:59:83:48:07:94:d4:05:fc:
dc:9b:c3:7e:c4:f1:66:f9:7d:66:1e:a6:23:ad:78:
81:47:8e:6f:c5:90:12:4b:f7:b7:a8:40:fe:26:f6:
29:49:0d:36:f3:f7:81:19:24:cf:e2:3f:50:05:6d:
24:1a:f3:b1:64:96:fe:29:03:9e:78:80:28:82:5d:
52:f3:8a:d5:bc:c6:99:c9:64:84:3a:d1:7a:b6:31:
cd:08:7b:61:8e:51:a4:ec:a7:7a:a8:45:12:76:6b:
9f:95:34:c6:5d:ca:49:11:c4:7d:3a:71:a0:4d:93:
be:6c:94:ba:1c:74:be:1a:8f:a5:1d:9c:11:5f:11:
f0:06:a3:44:4c:07:2b:0b:bb:af:2d:74:fb:f8:90:
9b:d4:da:5f:8f:ef:bc:ef:9e:74:a6:a7:86:2d:b8:
b7:6b:b1:a5:b8:8e:1d:96:3f:02:17:e6:d1:b0:35:
27:42:15:8e:45:3b:60:6e:97:73:7c:4a:c6:fe:4b:
96:d2:ea:93:75:df:c6:4e:71:96:a6:0a:12:2e:68:
8c:7b:9e:e1:66:1d:42:b5:fd:54:af:5b:56:74:9d:
ed:45:81:19:10:ec:54:e1:01:1f:2b:0b:a7:a0:e4:
79:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3D:EA:FD:2B:D6:9F:76:40:EE:A5:97:29:24:C3:FD:94:47:DF:3E
X509v3 Authority Key Identifier:
keyid:2D:6F:9B:DA:F6:9D:CA:1C:DB:9E:44:0C:97:C1:0A:09:2E:C1:B3:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LW-b2vadyhzbnkQMl8EKCS7Bs5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/cj3q_SvWn3ZA7qWXKSTD_ZRH3z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.227.0/24
91.212.11.0/24
91.212.14.0/24
91.212.19.0/24
Signature Algorithm: sha256WithRSAEncryption
17:3c:b4:83:5d:76:59:72:73:5c:ff:37:8f:99:53:cd:61:0d:
4e:6b:a4:7e:ca:ac:60:e1:a7:a7:13:bc:f9:69:6a:da:3f:17:
b9:cf:c5:b0:41:b1:23:b0:78:bc:3b:36:8e:86:18:75:84:0c:
8a:42:8c:0f:9c:10:e1:39:4c:f1:54:46:59:5b:ba:ce:12:52:
1f:f8:56:6c:06:2c:3a:3d:0b:d5:26:83:e9:2b:a2:11:30:cb:
89:a1:b5:cd:b2:ce:57:b8:99:43:58:fe:f9:e5:c8:9b:30:b2:
2f:6f:29:3d:cd:9e:03:8d:04:aa:07:3b:63:25:53:05:c7:a8:
83:a6:47:55:2b:84:75:5d:39:70:8d:f4:4a:cd:73:64:ae:f2:
6e:45:ae:74:ec:7f:43:42:79:96:00:49:aa:18:bb:7f:d5:e7:
f8:29:f1:aa:c3:31:ae:78:72:60:31:2d:0e:a5:86:78:2c:ea:
f1:09:3c:64:98:ca:02:b1:31:da:7f:57:12:c2:cf:a8:ac:61:
bd:27:79:c0:08:76:ee:e9:5c:d4:e6:a2:73:61:f2:99:3f:7e:
9d:32:d6:53:bd:20:57:d2:4d:49:bb:53:b5:ea:de:38:40:99:
a2:8b:27:6a:9b:81:cc:47:85:7b:a4:2a:2a:06:95:79:c4:94:
e0:5f:ba:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:08 2024 by rpki-client on console-ams.rpki-client.org