Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/TwfKrVSwIeH6Ni2fu7tFf8T2EtI.roa
File: TwfKrVSwIeH6Ni2fu7tFf8T2EtI.roa (raw, json)
Hash identifier: O7Vo4WbuOmJuphw2p8vNRtZX/Of4/c4KCl8LedKw81w=
Subject key identifier: 4F:07:CA:AD:54:B0:21:E1:FA:36:2D:9F:BB:BB:45:7F:C4:F6:12:D2
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 019290052F3F2426A27B179E052CCDCFF9FD
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/TwfKrVSwIeH6Ni2fu7tFf8T2EtI.roa
Signing time: Tue 15 Oct 2024 11:51:51 +0000
ROA not before: Tue 15 Oct 2024 11:51:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.102.164.0/24 maxlen: 24
91.102.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 10:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:90:05:2f:3f:24:26:a2:7b:17:9e:05:2c:cd:cf:f9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Oct 15 11:51:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f07caad54b021e1fa362d9fbbbb457fc4f612d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0a:27:40:d2:08:7d:25:9d:9b:2d:30:15:de:
f7:ea:d8:06:b8:f7:dd:62:0a:ab:c4:3c:12:78:19:
73:34:2f:00:bc:c5:f4:13:4d:7a:67:58:17:a3:d1:
a8:a8:1c:ea:42:c2:70:21:2b:e3:da:b0:f9:d4:18:
07:18:e5:d9:a9:14:75:cd:93:a2:cf:47:71:56:0a:
e9:8f:77:a5:03:b1:0b:db:f1:81:13:63:21:e7:fd:
3a:26:bd:94:e6:ae:02:fe:32:62:d6:8e:91:45:43:
63:43:b1:8b:8b:49:43:d9:a9:ae:64:a9:a7:3f:bb:
b1:6e:71:7b:86:6f:4e:2c:e3:6f:a8:17:80:17:31:
1b:aa:00:e6:ae:0d:11:b3:76:23:ad:b0:21:77:23:
04:a1:69:df:58:e4:84:94:14:66:7e:3b:43:f6:7e:
f0:4e:8d:fb:57:d4:46:ce:8d:fe:68:6e:b9:7b:44:
0d:0d:ae:4d:8f:d0:d5:e0:ff:9f:94:84:e6:f7:32:
6d:86:6c:d7:81:09:c0:e5:e4:23:11:2c:dd:a2:59:
37:a0:c1:d0:1c:83:2a:bd:dc:34:b5:43:6e:44:19:
f3:f9:f6:9f:95:be:7c:82:b6:58:6d:19:76:04:57:
b4:16:17:82:43:f6:35:32:6e:f6:28:b4:37:e9:7d:
cc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:07:CA:AD:54:B0:21:E1:FA:36:2D:9F:BB:BB:45:7F:C4:F6:12:D2
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/TwfKrVSwIeH6Ni2fu7tFf8T2EtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.164.0/24
91.102.166.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:a3:a0:0f:55:40:ce:5b:0f:34:f1:16:3a:77:ec:c6:e9:1e:
77:96:d1:34:d8:bb:6f:2c:e5:ca:91:4f:d9:3d:2d:b6:22:be:
92:76:72:ad:1a:b2:8e:1b:79:b1:13:1d:05:bd:db:bb:64:27:
da:bb:fa:ab:c3:3c:71:8e:24:7d:c6:6a:60:b8:cc:30:ba:63:
e1:d8:88:71:a2:88:5d:13:5c:cf:c3:7d:48:c8:e9:4a:1f:37:
a6:c3:55:40:51:a1:c0:64:b4:2d:5d:0e:b7:24:e4:d2:09:11:
28:03:42:01:7c:cd:a1:3c:d5:f7:d4:6a:6e:26:1f:e3:72:da:
91:9e:a0:27:be:be:2d:1e:fd:1c:14:13:84:60:5f:fe:7f:6f:
9c:ea:8e:0f:f7:61:1e:0c:59:14:c5:24:c5:ef:32:e3:3d:cf:
dd:bf:45:00:ea:6a:d3:75:f0:35:6c:32:23:bf:f3:bc:a3:c3:
41:ff:5a:ae:a9:9e:9c:1f:6b:37:17:dd:06:23:bf:67:46:71:
a4:e2:b2:3d:8b:96:eb:0d:37:a7:8e:05:b6:7e:ab:18:a8:04:
1e:69:7b:be:d2:02:8d:f4:a4:17:59:56:0d:8d:a6:9c:af:e3:
f2:51:d0:ce:e8:08:d1:db:7e:fb:07:c8:87:4b:89:11:8b:7d:
2a:b9:55:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 12:50:58 2024 by rpki-client on console-fra.rpki-client.org