Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/jClaD4ksBPsvuvLu0zUOxUe06rM.roa
File: jClaD4ksBPsvuvLu0zUOxUe06rM.roa (raw, json)
Hash identifier: ah5G4NqyMtFsiPpUrZYeCkbRuCE/aik12zDC99bKFdA=
Subject key identifier: 8C:29:5A:0F:89:2C:04:FB:2F:BA:F2:EE:D3:35:0E:C5:47:B4:EA:B3
Certificate issuer: /CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Certificate serial: 018570707D622EE5A86E75193C8985939C74
Authority key identifier: 2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/jClaD4ksBPsvuvLu0zUOxUe06rM.roa
Signing time: Mon 02 Jan 2023 03:04:58 +0000
ROA not before: Mon 02 Jan 2023 03:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41038
IP address blocks: 91.233.22.0/23 maxlen: 23
195.95.175.0/24 maxlen: 24
2001:678:250::/48 maxlen: 48
2001:67c:25b8::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:7d:62:2e:e5:a8:6e:75:19:3c:89:85:93:9c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Validity
Not Before: Jan 2 03:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c295a0f892c04fb2fbaf2eed3350ec547b4eab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:41:20:05:bb:19:ab:dc:0c:a8:97:bd:1a:
98:0e:b5:1a:b2:72:34:68:2f:a8:d3:e0:d2:3f:e0:
5e:26:d7:36:c8:f9:84:47:e3:b7:10:f9:45:76:bb:
b0:09:ba:de:a4:93:f7:ab:f2:82:21:02:34:b8:dc:
ec:a0:e7:cf:b8:3f:6f:e9:22:73:e5:82:25:03:96:
b9:e9:d8:0d:e1:7e:54:9e:91:ef:13:d8:93:c3:39:
b3:1c:9b:6e:46:c3:a9:32:c2:7d:cc:7d:40:29:a0:
de:7c:b0:b1:a4:8d:2b:d1:fc:2a:6a:cf:a5:17:a8:
ad:c2:03:20:a3:ff:16:c3:48:fc:1f:0f:a1:29:59:
34:64:44:21:77:83:62:49:38:12:e8:a3:e8:3e:9a:
a9:c2:dc:5a:ab:6f:ed:a0:20:ad:80:13:6f:ce:fe:
fb:6f:4f:96:40:83:ee:99:eb:45:44:8d:de:90:1f:
36:c5:c0:98:58:1b:92:7b:90:b3:5f:8b:f4:26:39:
f6:1c:ed:2d:58:f2:06:6c:aa:54:12:e4:be:e1:b3:
83:fe:6d:58:4f:9b:55:d1:a5:60:58:13:22:4c:ca:
9a:e9:e0:45:d2:0a:a5:96:28:83:03:03:c3:9c:47:
b0:a5:1a:9c:1c:e0:0a:2b:e4:dd:6b:f9:aa:89:c0:
41:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:29:5A:0F:89:2C:04:FB:2F:BA:F2:EE:D3:35:0E:C5:47:B4:EA:B3
X509v3 Authority Key Identifier:
keyid:2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/jClaD4ksBPsvuvLu0zUOxUe06rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.22.0/23
195.95.175.0/24
IPv6:
2001:678:250::/48
2001:67c:25b8::/48
Signature Algorithm: sha256WithRSAEncryption
1a:3c:3f:0b:c5:5e:45:4f:05:54:0e:b0:de:1a:5b:bf:28:df:
07:51:b3:aa:41:49:fa:ad:10:a8:77:d1:7e:6e:98:99:8f:07:
64:b8:d7:91:48:d3:e9:21:b9:a8:a9:4f:b3:cb:7e:25:61:06:
c9:b0:01:0d:95:c9:56:6f:4e:4b:87:25:02:9a:12:c0:2a:44:
30:e2:1e:17:1d:58:5c:d2:65:b1:b2:11:dd:3d:99:20:77:74:
ec:44:54:1f:63:7b:9d:a0:ee:25:6b:77:17:0c:84:30:2f:b6:
2d:7d:6a:da:eb:1a:2a:2f:72:bf:46:5d:8c:1e:2d:95:35:c5:
65:d4:ae:4c:b1:83:21:f0:6d:a6:94:29:6c:2b:f6:7b:14:ca:
12:72:5e:32:ac:ea:15:a8:6e:e7:5c:00:44:6e:db:56:2a:54:
93:1d:fb:9c:d1:04:2d:e8:68:16:f3:27:30:c8:bd:09:35:b0:
7a:82:33:c2:1e:de:21:a6:39:1a:43:88:58:64:74:a1:e8:8a:
c3:e1:f3:f8:3e:74:50:18:94:80:0e:ad:49:61:94:54:7c:28:
c9:0d:3d:9a:9f:e4:66:24:07:e5:87:85:e2:4d:47:35:fd:f4:
2a:b0:c7:b6:24:25:cb:5c:19:12:79:56:99:fc:0d:00:ad:c9:
72:b2:86:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:14 2024 by rpki-client on console-fra.rpki-client.org