Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/bJyt8j5trEkcDQwXiuKvtx4pp7c.roa
File: bJyt8j5trEkcDQwXiuKvtx4pp7c.roa (raw, json)
Hash identifier: Sv8vcQ+5TOGphiJZ741oR/vgiVzgUDaBJG3DdgFemY4=
Subject key identifier: 6C:9C:AD:F2:3E:6D:AC:49:1C:0D:0C:17:8A:E2:AF:B7:1E:29:A7:B7
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 018C089CC9643BB40677358C02B1BC448B1B
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/bJyt8j5trEkcDQwXiuKvtx4pp7c.roa
Signing time: Sat 25 Nov 2023 22:32:21 +0000
ROA not before: Sat 25 Nov 2023 22:32:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2834
IP address blocks: 91.102.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Nov 2023 18:27:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:08:9c:c9:64:3b:b4:06:77:35:8c:02:b1:bc:44:8b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Nov 25 22:32:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c9cadf23e6dac491c0d0c178ae2afb71e29a7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e6:bd:0a:2b:c9:c4:61:df:88:8f:12:66:ca:
50:09:2d:b6:cc:06:40:ad:1b:01:ef:f7:15:cf:a6:
c2:68:49:c7:eb:ec:f5:9c:1b:c1:42:50:1c:f9:9e:
e4:8d:bb:a8:4d:70:9f:70:86:f6:62:34:d7:cd:8e:
9e:20:dd:ce:df:e9:a1:03:86:d1:8e:c4:e9:c3:e7:
19:7f:84:04:92:94:96:26:1d:31:0f:27:76:cf:23:
3a:ac:cb:86:b6:c7:e4:76:d4:8d:0e:0b:87:60:f6:
43:56:c7:0b:b1:ba:ac:5a:36:0c:80:f5:5d:38:7d:
80:21:a5:01:9e:d3:b4:cc:39:ef:41:7a:70:0a:c6:
50:3c:71:cf:60:3d:dd:88:b6:07:7d:60:af:ef:26:
9c:5e:90:e1:a6:a3:ff:a5:7c:04:3b:29:b1:73:3b:
87:0a:fb:6f:25:b4:b0:36:ca:4e:1c:c2:cf:73:f1:
cf:33:08:51:54:50:79:c6:5e:50:02:f3:8e:3f:15:
8a:35:21:21:a6:f2:53:b9:c8:2f:95:c3:c5:4c:44:
f9:af:9f:17:87:37:db:53:a1:1a:fe:36:e7:86:00:
fd:a3:ba:18:7f:8e:9b:76:e3:40:51:c4:57:80:ba:
ad:19:ff:e1:38:1c:2c:6f:c3:af:c9:1c:9d:54:f6:
8d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9C:AD:F2:3E:6D:AC:49:1C:0D:0C:17:8A:E2:AF:B7:1E:29:A7:B7
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/bJyt8j5trEkcDQwXiuKvtx4pp7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.165.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:f1:65:e0:5d:6c:b9:6b:6f:b2:79:98:09:c5:06:25:76:96:
1f:bd:74:5e:af:3e:4d:de:0c:52:cd:43:f1:a7:e1:3d:3e:f5:
f6:82:ce:60:a8:e5:2b:33:ba:a2:c0:c0:68:fb:a2:d3:54:db:
fd:4e:5d:da:51:66:c2:dd:1d:66:46:45:3b:98:63:d5:fc:e2:
fb:a0:ff:b7:4e:7d:fa:5d:4a:93:f3:de:c2:a9:d2:26:eb:5a:
d0:e6:0e:13:8b:68:be:7f:e6:1b:1c:f1:5b:51:39:f4:d5:d6:
26:4c:71:3d:30:51:19:ff:bd:10:c2:74:5a:16:5b:c4:30:99:
41:20:b6:63:1d:f8:58:5d:cd:d8:9c:93:f3:d0:ec:5e:fc:2a:
ef:7e:cf:7c:de:2f:30:4c:71:e6:aa:2b:0b:65:a8:62:2c:a2:
a9:de:33:c1:48:a6:c4:24:78:ec:8f:c4:16:ca:7c:3b:1c:9b:
d4:5d:03:04:74:18:28:5a:a4:6a:a5:4c:d2:02:8d:8f:c1:73:
0c:fb:91:39:3f:42:6c:13:f4:c7:d7:f4:75:73:c1:dd:1f:a1:
20:50:66:1d:f1:ed:e7:f8:25:82:b8:bc:d2:ca:8b:5b:1c:77:
53:14:fa:0c:2a:7b:c3:d7:88:c0:00:e1:19:3a:68:b5:50:62:
5d:f9:e7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:14 2024 by rpki-client on console-fra.rpki-client.org