Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/j0BKXuQqYpky0X53B4oreQUAs2o.roa
File: j0BKXuQqYpky0X53B4oreQUAs2o.roa (raw, json)
Hash identifier: gUeJNvpqvBon5AkpqJKr+ZLo7ZgpKfEUtM3Wv3SZ6Jo=
Subject key identifier: 8F:40:4A:5E:E4:2A:62:99:32:D1:7E:77:07:8A:2B:79:05:00:B3:6A
Certificate issuer: /CN=39abeb591716e908345d329fffd3700352315b98
Certificate serial: 01857283469C7217C1711C61670111CD1E59
Authority key identifier: 39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/j0BKXuQqYpky0X53B4oreQUAs2o.roa
Signing time: Mon 02 Jan 2023 12:44:43 +0000
ROA not before: Mon 02 Jan 2023 12:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39957
IP address blocks: 91.199.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:46:9c:72:17:c1:71:1c:61:67:01:11:cd:1e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39abeb591716e908345d329fffd3700352315b98
Validity
Not Before: Jan 2 12:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f404a5ee42a629932d17e77078a2b790500b36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2f:37:52:4e:23:2e:5e:03:84:0d:26:2f:e6:
89:7a:b4:e6:6c:ef:c4:a9:24:69:94:1e:9d:96:d4:
a5:c1:ba:40:93:e9:f3:4e:f8:36:6f:b0:91:ff:45:
9b:3d:7c:f6:4a:61:6e:b9:a4:3d:52:cd:64:3b:0f:
f4:62:cd:00:39:bf:2c:18:95:2b:35:0c:37:88:d4:
5d:b2:fc:d2:a1:0f:10:6c:27:0d:90:da:2e:0e:8d:
9a:cb:59:a0:38:2f:c3:d5:b4:4c:ec:33:fe:25:76:
ae:4a:31:f6:fe:71:3b:d0:f1:e3:4c:4f:c0:bb:ce:
52:b3:b3:85:65:46:de:a6:c9:f6:98:68:64:e7:3f:
68:5a:aa:5c:62:38:d2:a3:4b:de:d2:af:7b:f6:8e:
f4:fd:97:43:a6:ec:31:1c:5a:8b:56:ad:35:d2:0d:
2f:af:a9:c7:06:ae:f5:02:e6:f6:9f:82:1e:a7:9d:
7d:3f:9e:7f:93:81:0e:8b:c6:ca:a7:d9:bd:ce:13:
61:77:9f:50:c4:b5:9a:fd:23:d5:da:b2:2b:74:17:
c5:40:bd:fd:35:56:f9:4c:63:06:e6:c7:c7:ea:42:
41:33:6c:78:49:36:2a:e1:c7:c7:a4:37:3d:62:25:
78:65:99:10:68:09:01:69:96:0c:76:4f:aa:c9:80:
74:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:40:4A:5E:E4:2A:62:99:32:D1:7E:77:07:8A:2B:79:05:00:B3:6A
X509v3 Authority Key Identifier:
keyid:39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/j0BKXuQqYpky0X53B4oreQUAs2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.1.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:01:fc:28:e3:5e:4f:1a:92:fb:fe:ae:1b:e7:f4:c1:b2:67:
57:0f:56:1d:e3:f9:f0:49:ea:0a:f4:ae:22:8a:5e:48:3d:91:
d1:81:7c:4d:d2:77:ef:90:fb:5d:9e:09:da:d1:a7:6b:16:4d:
4a:34:94:6f:f4:57:1e:6d:79:71:82:ff:6e:c8:9c:4f:af:b8:
bd:59:84:c9:ab:74:1b:7d:95:fb:8b:e6:f1:76:98:df:68:a3:
15:e2:24:3c:9c:2d:89:07:86:aa:09:6f:02:fd:a7:df:b8:a2:
21:6b:25:ec:4c:71:10:b0:35:cd:41:4b:8e:f9:6b:c8:60:fb:
ea:46:05:fc:47:2a:84:4e:4a:d7:39:15:a2:98:24:ad:50:10:
af:b6:3b:ad:e4:a5:7e:66:6c:a8:47:ee:f0:75:36:03:48:4d:
72:6a:a4:c2:57:b4:41:57:70:ae:b0:02:92:ee:82:e6:c4:f3:
4e:7b:7a:3f:c2:e2:2b:8d:e0:e0:79:74:65:44:4e:4f:42:1d:
e4:89:7f:f3:a0:fa:58:8d:72:c9:99:6a:ff:60:ed:ef:83:2c:
66:db:86:75:96:6c:ce:08:cc:26:4e:0f:8e:6e:a9:eb:e4:89:
5d:79:e4:49:17:4d:c6:ee:c4:47:6c:29:a8:aa:79:8d:13:81:
44:bd:d2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:16 2024 by rpki-client on console-fra.rpki-client.org