Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/tvyOe3R7zPbuxV_0mccwJvEihfo.roa
File: tvyOe3R7zPbuxV_0mccwJvEihfo.roa (raw, json)
Hash identifier: tqqSQ9j48dsngsCiSbFmkv1acuzPfoTKU+ek4NVb/7Y=
Subject key identifier: B6:FC:8E:7B:74:7B:CC:F6:EE:C5:5F:F4:99:C7:30:26:F1:22:85:FA
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 01903F6EF49517618545D37907EDB7CDE2F2
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/tvyOe3R7zPbuxV_0mccwJvEihfo.roa
Signing time: Sat 22 Jun 2024 10:12:34 +0000
ROA not before: Sat 22 Jun 2024 10:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208594
IP address blocks: 91.102.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jul 2024 16:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3f:6e:f4:95:17:61:85:45:d3:79:07:ed:b7:cd:e2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Jun 22 10:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6fc8e7b747bccf6eec55ff499c73026f12285fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f5:a4:c7:c9:60:65:04:34:59:9b:6e:e3:af:
54:0a:d4:47:77:56:e7:eb:8d:e3:fd:32:4c:f3:48:
cc:17:ff:70:5e:c6:3c:0f:c8:c2:f7:a0:e8:e5:f4:
17:b1:f4:a0:ae:b2:44:a5:03:24:58:f0:9a:47:c1:
0e:1f:cd:7c:4e:19:4e:84:95:69:c9:cc:ee:4d:0f:
f0:ce:fe:29:c4:f4:7c:a6:c6:25:3e:75:1b:71:a8:
ec:21:8f:fb:70:97:bf:1f:a7:e3:7c:48:a7:58:f9:
83:1c:b1:1f:30:99:65:f4:72:7b:5b:bf:f9:28:a3:
f2:cc:ba:02:5a:e1:47:c0:74:92:a7:72:eb:1e:58:
55:f8:b2:0d:e7:c6:2b:63:de:f0:5d:57:c0:b3:fc:
ce:e8:66:93:0f:ad:fa:26:c9:45:3e:47:ef:7a:ee:
8e:17:91:5e:93:d6:0f:23:d3:06:0f:1c:0d:88:a5:
e9:b2:be:c5:16:1f:ce:d5:87:47:c1:ab:5c:d2:db:
70:db:f7:1c:74:50:19:24:da:17:d4:fc:0a:f8:e0:
27:24:5b:35:85:fd:ef:d5:a8:7f:f4:bb:a7:74:0f:
a2:7d:08:0f:f1:59:b7:0c:96:e7:8f:71:cb:15:50:
bb:f4:21:9c:7c:b1:0e:42:39:b5:65:f9:6e:a5:56:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FC:8E:7B:74:7B:CC:F6:EE:C5:5F:F4:99:C7:30:26:F1:22:85:FA
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/tvyOe3R7zPbuxV_0mccwJvEihfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.162.0/24
Signature Algorithm: sha256WithRSAEncryption
98:79:3c:96:d5:ac:06:a4:b8:88:7a:6b:60:97:3e:09:2d:91:
a1:f0:e9:ef:41:25:fb:56:28:39:fb:5e:cd:c5:6a:b6:48:65:
c9:9d:cc:d2:aa:30:53:10:f4:78:48:87:0e:72:66:b7:59:bc:
48:db:7e:d1:58:d7:5d:ce:79:38:80:0f:ce:ab:72:dd:95:ba:
0b:1d:b2:a9:da:f5:3b:fa:34:1c:e4:fa:b1:bf:ac:6f:c1:a8:
09:ea:67:c9:c7:a9:b1:33:a1:08:66:ad:d8:a7:d3:71:d9:c2:
67:7e:d1:7b:f1:7d:f9:8f:22:e1:c6:a7:86:14:25:fd:34:4c:
46:5d:18:6a:2a:b9:fe:74:83:66:21:eb:f7:c1:84:91:bc:b3:
26:78:0e:42:41:0a:a2:18:54:7e:7b:32:f3:2a:0e:b7:c1:a6:
8f:5d:22:bb:f2:19:12:fb:f0:b4:8f:15:c0:96:0f:b5:b6:05:
e5:18:2f:8a:c6:f6:35:fc:83:08:5a:7c:f9:cf:91:9f:0b:09:
70:51:1d:77:a1:5e:49:61:eb:54:e8:ca:a4:b1:7a:d1:e6:12:
00:a7:cf:98:fc:2b:c7:7b:02:8a:01:f8:fc:98:e2:59:dd:67:
43:63:5b:4e:ef:8e:a2:45:2e:b7:5f:1c:32:fd:1a:37:f7:72:
6a:67:dd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 19:12:37 2024 by rpki-client on console-ams.rpki-client.org