Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/93BkheKYqTCmsg1EoKzIDtXFIPg.roa
File: 93BkheKYqTCmsg1EoKzIDtXFIPg.roa (raw, json)
Hash identifier: 8ssXnhPyo29yC8nQaSHnbo9bO91RKGU+HbaS4Uhyhsw=
Subject key identifier: F7:70:64:85:E2:98:A9:30:A6:B2:0D:44:A0:AC:C8:0E:D5:C5:20:F8
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 01910EFE0E93B726AD7A5B354C5972EFD106
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/93BkheKYqTCmsg1EoKzIDtXFIPg.roa
Signing time: Thu 01 Aug 2024 17:30:16 +0000
ROA not before: Thu 01 Aug 2024 17:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.102.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 16:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0e:fe:0e:93:b7:26:ad:7a:5b:35:4c:59:72:ef:d1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Aug 1 17:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7706485e298a930a6b20d44a0acc80ed5c520f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:48:94:da:d2:be:5f:ad:5e:20:fa:78:6d:
3d:fd:d2:b9:4d:90:3e:23:0c:4a:1b:5a:34:d4:ad:
11:23:6f:41:58:21:0b:c7:a0:6a:03:f6:7c:e2:aa:
82:e9:df:98:47:25:61:57:b0:a3:10:f2:66:68:99:
f4:21:97:d1:4e:60:05:2f:e8:c9:48:bb:0c:72:b2:
7b:9f:d3:88:ea:ea:9c:54:4e:d7:02:37:19:92:ea:
0b:fc:62:1c:47:c6:9c:90:e3:dd:44:97:62:11:ed:
59:79:c8:4a:d0:f3:17:ef:05:50:35:48:49:a2:79:
58:10:bb:53:e0:d0:60:29:dc:a9:9b:86:0c:d4:5a:
7b:b5:88:95:14:de:2c:98:f6:19:93:d9:b4:ce:17:
27:88:36:ae:d6:4f:a8:6f:fd:ba:fe:d1:10:97:52:
a7:a4:07:65:4b:47:a3:88:b8:10:82:0e:35:4d:5a:
8e:90:4d:a8:db:f7:7d:96:c1:49:c2:01:bf:13:9f:
8c:75:28:fd:bb:e4:fb:f2:08:b1:5e:e4:c9:59:4e:
0e:ea:3b:73:29:e5:c6:f1:42:80:e2:ae:72:5b:b3:
7e:e2:ea:3e:6b:f4:97:34:5b:e6:a4:8c:ca:f1:a8:
ee:12:43:b9:0a:2a:e5:d8:ff:ef:83:42:b7:6c:57:
c6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:70:64:85:E2:98:A9:30:A6:B2:0D:44:A0:AC:C8:0E:D5:C5:20:F8
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/93BkheKYqTCmsg1EoKzIDtXFIPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.167.0/24
Signature Algorithm: sha256WithRSAEncryption
42:df:67:cb:aa:a0:e1:09:29:4c:c3:15:cb:41:54:c0:e1:a2:
c3:91:d3:d0:be:4c:ed:a4:32:ed:c3:6c:0f:18:4d:f7:3c:7c:
b4:e5:ad:9e:8c:15:1c:0b:61:e8:c7:d8:8c:2d:ac:85:36:a6:
5c:c0:da:18:f7:a8:e2:ae:b5:12:cf:7b:d7:dc:44:81:31:92:
f2:3f:8e:ae:44:15:de:ff:5e:aa:2a:1e:5f:74:c8:5e:9b:77:
12:e5:e7:c6:48:27:f3:0c:28:db:09:e6:23:65:c2:e2:43:e9:
ce:83:ae:4c:01:d4:5b:cb:15:c9:5c:71:55:77:0f:5c:31:29:
7c:6b:56:3c:54:26:e1:c0:76:f1:ce:34:21:0a:d3:0a:13:9d:
47:fc:57:06:29:f6:e2:c0:28:4a:d4:01:e7:f7:1e:22:9c:6a:
29:a8:b1:69:66:f5:b6:8e:66:b7:14:03:c5:73:84:47:59:18:
e8:9d:07:86:d7:c4:40:18:5d:fb:6b:12:5f:f9:f1:29:f4:c8:
a7:c1:cd:f5:0c:ea:59:f0:6a:f1:2a:57:4c:4d:6b:e7:8e:ac:
5d:19:b0:e4:54:fa:b9:62:26:9f:8d:82:6b:b1:d5:c7:d1:2f:
e8:61:78:fc:7e:1a:7c:87:ee:f8:b8:d3:cd:96:af:a3:06:ef:
f7:6b:7f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 21:38:01 2024 by rpki-client on console-ams.rpki-client.org