Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/cBq2m_63d5crLl-Kvkbfq6kQKUE.roa
File: cBq2m_63d5crLl-Kvkbfq6kQKUE.roa (raw, json)
Hash identifier: /LIaCYA6lYXQLsPlY4oPHuChHxXZuoLLjRiJZ9b+SLk=
Subject key identifier: 70:1A:B6:9B:FE:B7:77:97:2B:2E:5F:8A:BE:46:DF:AB:A9:10:29:41
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 019271C24D103D99671E24C34A56B53D9267
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/cBq2m_63d5crLl-Kvkbfq6kQKUE.roa
Signing time: Wed 09 Oct 2024 14:50:11 +0000
ROA not before: Wed 09 Oct 2024 14:50:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.102.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 11:51:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:71:c2:4d:10:3d:99:67:1e:24:c3:4a:56:b5:3d:92:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Oct 9 14:50:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=701ab69bfeb777972b2e5f8abe46dfaba9102941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:53:df:a0:fb:82:c6:28:eb:14:16:f6:11:73:
9d:34:df:26:55:e8:80:97:0a:17:bc:e8:4d:15:84:
cb:68:97:28:04:30:fc:ea:d4:49:c5:a5:fd:09:ad:
00:3e:68:6a:d4:bc:4f:09:e7:05:23:3c:c3:eb:ab:
30:a9:d0:be:57:91:87:85:a8:0a:68:bf:b7:b8:99:
47:28:92:bd:ca:4b:8f:da:48:86:4c:2d:41:da:e6:
7c:1e:46:1f:1b:27:0a:37:10:41:14:29:5d:05:66:
ba:35:1c:91:7d:cf:d9:9f:6b:22:da:2a:60:5a:ce:
28:16:38:c1:2b:1c:a6:06:dc:bb:8b:f1:2d:58:3d:
58:57:c8:2c:7c:d9:91:8e:55:39:1d:60:49:aa:da:
f9:d8:30:83:e7:e7:d0:ee:45:de:6c:84:0a:d8:9e:
0e:b6:03:ec:02:b3:3e:1c:68:62:57:d3:71:d0:b8:
a2:ec:95:e2:68:7c:19:33:bc:d1:5f:57:59:c2:7f:
0a:91:84:af:96:2f:43:42:ba:d7:19:fd:0b:a8:fa:
88:6d:10:8a:53:ce:1e:38:4d:1c:3c:9c:21:74:94:
2c:e4:4a:a8:07:9c:1c:75:56:a7:59:9c:40:5a:3e:
f2:4e:64:aa:77:0e:14:4d:80:c1:9f:ef:df:1d:1e:
65:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1A:B6:9B:FE:B7:77:97:2B:2E:5F:8A:BE:46:DF:AB:A9:10:29:41
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/cBq2m_63d5crLl-Kvkbfq6kQKUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.164.0/24
Signature Algorithm: sha256WithRSAEncryption
43:0c:f1:67:69:d2:61:56:1e:9c:46:d6:09:f3:b0:b3:1b:f8:
cf:55:3e:14:d7:21:74:d2:df:f5:d7:41:8a:11:85:64:b0:fa:
92:dd:98:76:26:d4:d0:2d:81:44:0c:a0:e9:09:ee:72:21:1e:
f9:f5:95:78:45:b9:82:1b:e1:13:0d:77:d5:1b:e9:9b:73:68:
63:45:f5:d4:d9:5d:62:dd:81:d9:fb:29:a4:35:77:c3:d7:46:
84:0b:75:90:b1:88:63:45:f5:3b:41:f1:4c:16:b0:b2:7f:f2:
91:31:ee:1d:87:51:d4:b6:67:98:0f:22:b4:42:d9:17:f0:b0:
e1:36:01:50:9d:d5:9d:0e:27:5e:0e:26:d8:91:83:69:ec:64:
6a:3b:88:f4:9a:34:dd:a3:e4:fe:2c:6a:e6:21:8d:30:6b:18:
cd:86:48:75:9f:9f:b4:80:48:a8:eb:61:c1:d0:1b:a2:16:92:
d7:31:32:68:48:07:dd:f1:47:68:26:ea:bc:17:0c:4e:86:a6:
c9:90:b0:bd:94:82:a3:f1:30:17:1f:a8:d1:14:85:7e:71:13:
f0:d7:a5:7d:c5:62:2e:8e:a6:ca:75:a8:bb:bd:b4:40:f3:78:
af:06:aa:73:6d:ba:79:40:97:f3:5c:41:0f:db:18:46:75:14:
af:c8:be:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 14:29:00 2024 by rpki-client on console-fra.rpki-client.org