Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/WGjiySuJfhPv3zJavPx1-MESYRQ.roa
File: WGjiySuJfhPv3zJavPx1-MESYRQ.roa (raw, json)
Hash identifier: Z+Ap1vlMHuL+i9h4moRA+gjaZ8c6SbaFO4RWVacrEJU=
Subject key identifier: 58:68:E2:C9:2B:89:7E:13:EF:DF:32:5A:BC:FC:75:F8:C1:12:61:14
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 018CCA29CD310D8A8180EBCA1F63901CC860
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/WGjiySuJfhPv3zJavPx1-MESYRQ.roa
Signing time: Tue 02 Jan 2024 12:33:06 +0000
ROA not before: Tue 02 Jan 2024 12:33:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56582
IP address blocks: 91.102.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 13:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:cd:31:0d:8a:81:80:eb:ca:1f:63:90:1c:c8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Jan 2 12:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5868e2c92b897e13efdf325abcfc75f8c1126114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:db:a0:9d:9b:da:db:84:da:04:8d:f4:e8:dd:
ae:37:c1:e4:da:0a:c3:e4:5a:a3:85:6e:fe:cd:12:
f8:e8:d1:18:6d:99:f4:22:5a:ff:da:95:b3:6e:58:
88:a7:3b:e7:a9:1f:42:c9:56:34:31:8d:3e:42:16:
19:8d:82:1f:c0:ac:74:f2:9a:cb:03:84:39:32:53:
e1:09:2a:7a:d8:56:bd:cb:13:3f:27:82:cf:65:46:
3f:0d:01:4a:cd:8c:2b:0e:d8:50:47:13:03:05:2f:
21:8f:97:eb:86:3b:04:ae:38:13:3e:6f:d6:4c:71:
f4:50:2e:c8:c7:3d:b8:c1:55:6a:59:e8:03:36:c4:
01:ba:f1:de:3b:60:28:3c:27:d9:c2:40:0f:fe:98:
94:88:21:40:2b:df:6e:9a:54:22:6e:83:89:3b:46:
12:de:84:c2:ba:34:1f:5b:be:a4:59:3c:b2:19:96:
1a:12:f4:28:f7:64:36:34:bd:29:69:1c:95:79:7b:
7a:e3:cc:93:fe:a6:bb:b6:40:88:28:91:4a:5a:ce:
19:24:04:9b:af:ef:89:74:e3:42:c6:65:cc:84:dc:
c0:ad:84:a5:be:9a:b6:6a:39:c6:69:5d:9f:ae:5f:
46:68:85:f3:72:cc:5a:08:ee:26:a8:fd:d8:c8:1f:
78:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:68:E2:C9:2B:89:7E:13:EF:DF:32:5A:BC:FC:75:F8:C1:12:61:14
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/WGjiySuJfhPv3zJavPx1-MESYRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.162.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:3c:b1:ac:21:5b:61:6a:7d:15:5d:31:03:96:02:8b:ee:f7:
64:8c:dc:42:a0:7c:bf:89:01:31:3a:6d:c0:6e:eb:9f:7f:f9:
95:e0:48:10:28:5d:6e:b8:eb:36:f5:5b:de:6d:e2:6c:aa:4d:
2c:a7:5c:cc:2e:9d:df:1b:96:b9:de:59:25:52:48:29:1b:60:
71:c3:23:f9:c9:6c:5c:67:59:c3:28:8f:9f:08:26:df:62:4c:
4a:71:59:eb:20:18:b0:74:4e:71:c6:50:de:86:e2:19:dc:c9:
ee:e5:24:9f:15:80:ce:fb:06:91:62:14:a5:9d:49:18:1c:e2:
4e:05:c0:96:ee:2f:69:8d:1b:de:31:e6:f4:3b:05:66:11:60:
52:03:a4:5d:ca:d4:15:e7:d5:0b:e4:e7:ed:a3:2d:cf:22:05:
54:5d:a2:e2:e8:35:5c:af:de:b7:a7:a6:57:02:7a:57:c1:e1:
96:85:8c:26:84:a8:0c:cb:62:87:6a:a6:5f:29:1e:5f:1f:e7:
4d:b4:2c:9e:70:62:d4:bc:ef:57:ab:9b:dc:f7:da:d0:96:55:
cd:b3:09:d3:dd:01:e1:60:17:73:34:d0:ee:90:e4:9c:cd:70:
a1:9a:ac:26:8b:50:73:d0:5f:ca:8c:62:c0:3a:a6:bb:74:5f:
97:92:61:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:51 2024 by rpki-client on console-ams.rpki-client.org