Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/i8Tx2iFRmf3OTuBg7rpY9GEoWF4.roa
File: i8Tx2iFRmf3OTuBg7rpY9GEoWF4.roa (raw, json)
Hash identifier: Eqgtkp1Y45oaVvzymvO4UD70tUPYIlC32pJUOSSRLhE=
Subject key identifier: 8B:C4:F1:DA:21:51:99:FD:CE:4E:E0:60:EE:BA:58:F4:61:28:58:5E
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 019299F13D6CE5B9C176F80F87CE3214062B
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/i8Tx2iFRmf3OTuBg7rpY9GEoWF4.roa
Signing time: Thu 17 Oct 2024 10:06:16 +0000
ROA not before: Thu 17 Oct 2024 10:06:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.102.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Oct 2024 15:34:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:99:f1:3d:6c:e5:b9:c1:76:f8:0f:87:ce:32:14:06:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Oct 17 10:06:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bc4f1da215199fdce4ee060eeba58f46128585e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:10:37:e7:53:67:d8:cc:ad:28:08:c4:96:6a:
6f:31:9b:89:0e:f5:4e:cc:b0:fc:f8:2b:2a:3e:f9:
d6:d7:19:28:4c:74:41:f3:92:8c:62:e9:b9:f5:ff:
ba:7a:0b:6d:84:8a:a6:66:6d:d0:c5:2a:34:35:ee:
73:7d:ec:76:19:fe:46:17:8c:2e:12:cf:62:7b:8d:
af:e9:11:c8:f2:7b:97:9f:be:a2:87:e6:5f:51:e9:
19:1e:a4:05:5c:d8:ed:98:6c:e6:30:fe:45:89:00:
d0:21:17:84:6a:ac:b3:58:2e:78:bd:21:63:11:84:
59:d4:5a:40:35:83:46:80:75:a4:77:5d:1f:79:3b:
b3:51:d0:8b:55:b2:98:76:1d:71:c9:66:b6:10:8c:
65:bd:b3:5b:6f:7a:2c:0c:9b:f9:f6:d8:5e:34:81:
bf:ae:79:20:7c:78:54:42:56:84:41:e3:53:11:2f:
7e:03:bc:2b:7a:1f:76:d7:69:d2:2d:df:2e:d6:2f:
a1:71:0b:18:c6:8b:43:9a:ba:b3:2d:e3:7e:15:29:
3e:cb:27:6c:90:7d:12:35:43:3d:d6:ba:3d:ff:02:
d0:4c:a0:4e:c4:e6:0b:e1:b3:38:90:01:98:15:01:
b3:61:12:42:12:7d:7c:c9:1d:31:0c:de:63:15:b1:
3c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C4:F1:DA:21:51:99:FD:CE:4E:E0:60:EE:BA:58:F4:61:28:58:5E
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/i8Tx2iFRmf3OTuBg7rpY9GEoWF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.166.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ef:f1:4b:3a:25:8c:54:6f:fd:57:39:4f:e8:f3:6c:66:cd:
cf:71:f1:44:4a:65:9b:33:07:3b:13:61:58:c3:ce:1f:15:ec:
99:73:55:a1:d9:2a:27:bb:3e:45:8b:fb:c2:42:bd:d5:d8:f1:
ea:66:4a:0a:3b:15:5e:9e:0a:96:91:70:f4:7a:ad:aa:6b:35:
61:81:d6:bc:d5:2a:5e:4a:e4:21:1d:8e:cc:2e:65:6d:07:f4:
23:1a:95:c5:a1:99:94:9b:6e:84:94:a8:95:61:60:ac:43:ae:
d3:7e:81:a8:e9:07:50:1a:b6:5f:66:c9:da:52:8d:01:8b:25:
9b:1f:bf:f9:63:4c:b6:59:fc:55:6b:3a:6e:f2:b9:55:84:30:
07:3f:b4:98:58:d2:88:45:89:16:64:fa:89:4f:8f:27:5f:d4:
4e:91:e4:0b:db:34:6c:e6:81:9f:df:7a:97:29:83:35:ef:e2:
75:1a:cd:35:57:77:a7:40:1f:fe:57:07:a6:4e:a4:2f:cb:65:
d7:05:c2:e9:79:06:a0:db:db:44:80:0a:be:fd:ef:dc:15:a3:
da:30:f9:21:0f:80:2e:db:44:2e:12:c1:8c:ef:73:1b:7e:32:
5a:bc:b8:f5:6d:a9:10:6a:27:be:5a:c3:d3:73:23:4f:7c:4a:
d4:38:5b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 16:48:24 2024 by rpki-client on console-fra.rpki-client.org