Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/fA71f9sloEmnZ11WAn8KNXvnXCQ.roa
File: fA71f9sloEmnZ11WAn8KNXvnXCQ.roa (raw, json)
Hash identifier: JCnFvscpqqYc5HlqbSyCH4UvDBOdCfv/dFX/jajoFK0=
Subject key identifier: 7C:0E:F5:7F:DB:25:A0:49:A7:67:5D:56:02:7F:0A:35:7B:E7:5C:24
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 018C86C487DF36483B45FAD8236D26FC1FDA
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/fA71f9sloEmnZ11WAn8KNXvnXCQ.roa
Signing time: Wed 20 Dec 2023 10:27:55 +0000
ROA not before: Wed 20 Dec 2023 10:27:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216394
IP address blocks: 91.102.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Dec 2023 15:20:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:c4:87:df:36:48:3b:45:fa:d8:23:6d:26:fc:1f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Dec 20 10:27:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c0ef57fdb25a049a7675d56027f0a357be75c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8d:38:18:f7:1a:c2:7f:b6:64:b7:81:00:a0:
10:85:ea:ee:18:cc:ea:df:2a:a6:9b:4e:5c:b6:15:
80:13:ff:f5:91:21:6c:75:a8:b7:64:a5:f6:05:98:
85:80:5a:c5:52:0a:4f:30:ec:ed:09:7b:f3:9e:c0:
dc:0d:4b:c3:37:e6:e4:32:b2:fc:44:ff:b1:37:53:
59:f5:5b:46:d3:eb:20:e9:50:49:d7:60:8d:a2:da:
d3:84:ff:81:ce:99:79:ba:7c:e8:e5:84:a7:42:3d:
95:03:6d:eb:4b:65:75:89:3d:ad:06:34:32:b0:17:
ad:70:cf:5d:31:d3:d0:fd:34:ba:2f:a8:a5:d2:4a:
20:53:d5:8b:50:31:77:1b:ba:1f:0e:8f:5a:c6:c6:
59:e5:b1:51:b1:9f:4a:3a:28:a4:e0:f1:38:fd:75:
91:72:01:8a:76:3b:21:b8:3c:dd:36:04:c3:14:66:
38:b8:aa:94:9d:f6:57:4b:2c:53:e9:e9:0d:c3:21:
b1:cd:ed:78:5f:72:67:7d:a4:57:d9:aa:d9:9c:35:
48:39:d2:d3:03:14:75:42:b8:54:bd:f8:ae:b6:61:
31:9e:cd:23:99:00:e6:21:79:3f:ed:3c:dc:df:48:
a4:5d:46:35:5e:33:4b:d6:7b:0b:c5:cf:18:92:87:
40:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0E:F5:7F:DB:25:A0:49:A7:67:5D:56:02:7F:0A:35:7B:E7:5C:24
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/fA71f9sloEmnZ11WAn8KNXvnXCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.163.0/24
Signature Algorithm: sha256WithRSAEncryption
76:4f:34:b8:f9:42:85:5a:9b:29:28:06:aa:49:12:5f:1e:46:
78:f1:c8:2a:17:0d:12:02:ea:25:84:aa:09:a4:59:29:32:44:
03:20:1e:d3:8f:9f:b5:04:a0:d3:2f:b8:b7:cb:a3:33:7b:d6:
24:47:2a:54:e1:af:a0:03:3a:4f:5a:ae:b4:be:58:7a:ab:d5:
f3:a6:4e:9d:86:80:41:46:c4:95:0b:e0:93:c3:03:b7:cd:4a:
73:c9:d6:27:e6:da:62:64:96:61:84:bf:11:74:90:37:3b:8f:
a3:0f:b5:a9:d1:4c:e7:50:ba:3f:cc:fe:ea:a3:fe:32:7a:64:
19:2e:06:9c:43:a7:70:bd:15:dd:f4:b7:37:28:32:b8:4e:48:
98:e4:67:51:3d:c6:30:1a:59:e9:7d:d6:2f:15:81:f3:f3:8a:
e5:4b:38:b8:74:9b:11:5c:e8:a3:ad:cb:8c:51:b9:0e:d5:f1:
36:c3:81:b8:78:82:59:12:0c:7a:8e:75:9e:14:1b:60:bf:c4:
89:b5:53:8b:15:83:28:74:cb:e0:f8:07:3d:39:41:b4:b3:97:
25:cd:91:80:d3:a4:6a:a7:f9:ed:1b:59:27:bb:c0:2b:1e:e0:
80:cf:6d:bf:e2:5e:88:22:1c:55:aa:dd:2f:ff:1f:2f:14:95:
64:a6:32:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:51 2024 by rpki-client on console-ams.rpki-client.org