Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/18hLxapwxyA3F_hiSZptLf06fSs.roa
File: 18hLxapwxyA3F_hiSZptLf06fSs.roa (raw, json)
Hash identifier: wmMWiWbNoE1116/bUMtPs6kdjUvXZ8whp63fYXbcFf8=
Subject key identifier: D7:C8:4B:C5:AA:70:C7:20:37:17:F8:62:49:9A:6D:2D:FD:3A:7D:2B
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 0186CC5F74D48566AE2B02867705F2E14894
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/18hLxapwxyA3F_hiSZptLf06fSs.roa
Signing time: Fri 10 Mar 2023 16:34:13 +0000
ROA not before: Fri 10 Mar 2023 16:34:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41801
IP address blocks: 91.102.160.0/21 maxlen: 21
91.102.161.0/24 maxlen: 24
91.102.164.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 17 Aug 2023 19:44:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cc:5f:74:d4:85:66:ae:2b:02:86:77:05:f2:e1:48:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Mar 10 16:34:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7c84bc5aa70c7203717f862499a6d2dfd3a7d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:09:96:47:0d:db:68:49:a6:02:5a:f3:16:98:
fd:29:5a:ce:9f:6b:a8:85:6d:05:4b:48:5f:0a:81:
c5:26:df:65:be:a4:10:37:98:0e:f2:26:38:e2:cf:
75:eb:c7:45:93:69:29:68:30:a2:ad:06:50:7d:3c:
4f:2e:14:66:37:d6:9f:ab:06:58:ab:48:7f:ff:23:
aa:da:bc:d1:e5:1f:28:1d:3f:18:fa:d4:2c:9a:7e:
95:d5:9d:8c:c8:d7:83:3e:8d:f9:47:f3:ab:0c:66:
76:b9:73:42:af:d1:e3:eb:b3:72:f1:47:7c:9d:bd:
c3:ea:d9:3b:90:42:e6:1e:8c:b9:61:08:e1:f5:ef:
0c:74:15:33:92:66:9c:48:fc:e0:14:d4:23:3f:c9:
90:ff:4f:e2:c6:77:34:55:66:1b:58:60:e7:a7:2d:
58:57:1e:4d:94:09:8b:0f:35:ef:40:7a:11:ca:e6:
0b:a1:c8:0f:0a:17:d3:eb:97:2b:fa:f6:55:82:5c:
64:82:b2:bd:6c:50:17:bc:17:1c:c1:73:59:a5:90:
c4:27:e9:1c:f2:ff:89:0f:1f:2e:c3:d1:b4:79:12:
80:c1:0a:3e:cb:15:36:72:60:02:e6:48:aa:99:34:
25:90:54:4c:8c:f2:90:10:b3:9b:c9:52:13:b7:72:
1d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C8:4B:C5:AA:70:C7:20:37:17:F8:62:49:9A:6D:2D:FD:3A:7D:2B
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/18hLxapwxyA3F_hiSZptLf06fSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.160.0/21
Signature Algorithm: sha256WithRSAEncryption
55:d5:70:f8:bc:de:a8:11:72:91:85:71:52:5a:85:3c:9c:7d:
32:6c:37:7d:44:a8:5c:62:93:cb:11:92:7d:b5:ca:65:83:48:
ed:e0:33:7f:ea:75:11:3a:2b:b8:f0:a0:55:bd:b9:48:8e:81:
c3:af:69:ea:37:47:0d:a2:d2:8b:45:7d:c8:42:28:60:c6:c5:
14:9d:f5:6a:09:8f:ac:4e:d3:47:74:4b:e5:59:e3:1c:55:e4:
c4:4d:79:57:9d:b2:90:11:57:8d:37:e4:cf:76:9f:5d:b5:21:
81:6a:1f:18:fd:3a:2b:39:30:94:6b:31:bc:ca:08:73:b7:ce:
62:f2:44:c3:58:c6:69:06:ae:26:a6:89:bd:3b:23:6f:f1:ad:
73:94:cf:26:5a:ed:f0:38:03:68:d5:8d:77:8a:81:cc:93:69:
3b:93:61:74:23:07:ec:5e:86:24:63:2c:5e:31:2f:3c:08:5e:
46:1b:21:ac:b3:d9:e3:31:f7:35:64:28:19:8b:59:9b:22:51:
cb:1d:b4:cb:cf:7a:c4:27:4e:c3:7b:86:b4:14:51:f5:99:7f:
b9:f4:c0:7d:9c:7b:49:4c:a7:f8:3f:18:43:ca:58:99:1e:19:
b0:60:1e:86:99:4f:f3:d5:01:3a:74:69:34:04:2f:8d:5c:e5:
2e:0f:6b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:51 2024 by rpki-client on console-ams.rpki-client.org