Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/J4NFAJYkqgImXzgDA1EzTede86A.roa
File: J4NFAJYkqgImXzgDA1EzTede86A.roa (raw, json)
Hash identifier: FINDNvIDJHWKI+rFJtCKUCt2WJ3cKqilYSZqhF6zfAY=
Subject key identifier: 27:83:45:00:96:24:AA:02:26:5F:38:03:03:51:33:4D:E7:5E:F3:A0
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 01856EC201B12BFC6C7B080C9751828AF248
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/J4NFAJYkqgImXzgDA1EzTede86A.roa
Signing time: Sun 01 Jan 2023 19:14:46 +0000
ROA not before: Sun 01 Jan 2023 19:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198975
IP address blocks: 91.240.130.0/24 maxlen: 24
91.240.136.0/24 maxlen: 24
91.240.136.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:01:b1:2b:fc:6c:7b:08:0c:97:51:82:8a:f2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Jan 1 19:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=278345009624aa02265f38030351334de75ef3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a9:20:f7:11:1c:b8:5d:4e:dd:f4:0a:d4:64:
32:ef:41:1d:d4:b7:a1:d9:b3:05:3e:ec:86:ed:2f:
03:e9:b1:26:6d:ba:0a:5f:d4:0a:50:bf:f8:19:95:
9f:9f:40:2b:e6:33:ef:74:46:f0:77:1a:92:97:c6:
b8:bd:c0:ce:46:3f:66:c3:ec:f7:e7:1e:59:40:1c:
ef:4d:20:c1:b5:20:60:bc:2d:23:7d:5c:ff:b6:3a:
c2:47:b2:36:4a:1b:a3:3c:76:e4:06:e0:e8:bd:b2:
82:52:78:c5:04:68:70:c6:fa:41:08:d4:8f:23:af:
d0:2b:1d:13:75:de:57:44:c2:a2:9f:c9:a6:6e:5e:
a8:e3:9f:e2:10:6a:1b:83:71:2f:79:9b:b9:4c:50:
4a:7d:43:03:31:85:00:a6:40:d1:d4:5d:db:0e:26:
ce:4a:56:6e:ec:21:25:3e:12:93:94:6a:85:51:9d:
f8:c5:5d:19:53:91:7f:a5:23:c0:6c:0e:c1:4a:4a:
df:b2:92:e9:3d:cf:9e:77:bd:6f:eb:a4:30:d3:ca:
ec:00:43:fb:16:e6:63:8d:ad:07:01:07:fd:9c:45:
11:37:35:2a:14:57:cf:b4:57:da:1c:9e:27:53:bb:
f9:68:1d:35:c4:b8:a3:50:2c:f4:c7:14:95:aa:9d:
30:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:83:45:00:96:24:AA:02:26:5F:38:03:03:51:33:4D:E7:5E:F3:A0
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/J4NFAJYkqgImXzgDA1EzTede86A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.130.0/24
91.240.136.0/22
Signature Algorithm: sha256WithRSAEncryption
56:8c:13:23:ae:70:b4:61:fa:74:9c:e5:21:dc:8f:65:cf:cf:
d1:0f:c1:68:6b:7a:4e:86:38:99:39:2c:5c:e8:48:9c:12:d3:
ae:97:43:e2:dc:e2:f4:de:b7:b3:5a:95:f0:03:8f:44:76:76:
c2:49:1a:35:d2:b7:40:70:ef:b5:fc:17:8d:54:1d:44:57:40:
33:0f:95:fb:9f:94:d9:ba:be:79:05:02:b5:03:88:6d:cf:e6:
29:0a:18:59:1f:cc:13:f3:0f:81:2f:2f:95:54:94:41:6d:96:
67:0f:8d:6e:8e:55:09:f5:dd:75:39:4e:42:4d:f2:c3:b0:93:
48:94:bb:d2:c7:02:50:ae:ed:05:dc:87:53:10:82:fa:5a:70:
5e:09:4a:f8:7b:f2:a1:25:9a:6b:5b:e4:2f:57:ea:af:f8:ca:
07:bc:42:40:ca:5f:84:27:64:9e:cc:ad:f4:f5:bb:50:60:3b:
73:4c:b8:be:fe:d9:b1:07:72:49:ea:0e:7c:8b:42:ec:30:e2:
97:8e:13:8e:f5:4c:89:8a:4a:7e:c6:14:c1:79:95:2c:d8:a5:
93:21:26:ed:ed:3f:f7:11:28:b9:a1:0f:59:7b:50:0b:3c:60:
0e:76:07:56:84:f2:b3:34:30:e7:8a:7f:f8:67:1d:56:7f:18:
20:d1:13:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 18:21:39 2024 by rpki-client on console-ams.rpki-client.org