Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/jxl4z1rVD6-7bbgz-zhIssRhEto.roa
File: jxl4z1rVD6-7bbgz-zhIssRhEto.roa (raw, json)
Hash identifier: 5YU+EGDtpkpWOu++Qv3qFLmnudh7HiVAgW8KRCg1Zdo=
Subject key identifier: 8F:19:78:CF:5A:D5:0F:AF:BB:6D:B8:33:FB:38:48:B2:C4:61:12:DA
Certificate issuer: /CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Certificate serial: 018BB35FBAC3BA9ED7C372CB46C05331B92F
Authority key identifier: C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/jxl4z1rVD6-7bbgz-zhIssRhEto.roa
Signing time: Thu 09 Nov 2023 09:17:57 +0000
ROA not before: Thu 09 Nov 2023 09:17:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47626
IP address blocks: 91.205.190.0/23 maxlen: 23
176.118.224.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b3:5f:ba:c3:ba:9e:d7:c3:72:cb:46:c0:53:31:b9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Validity
Not Before: Nov 9 09:17:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f1978cf5ad50fafbb6db833fb3848b2c46112da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:df:2c:cd:62:cc:90:aa:55:1d:f7:a8:5a:b4:
9f:81:62:59:3b:fa:37:31:8f:a1:66:1d:6e:a4:ea:
6a:09:c3:0e:1b:e6:f8:da:8f:d6:76:89:54:e2:64:
13:b6:fa:5b:25:a7:c0:c0:0b:be:64:fd:86:f1:a1:
49:1c:d7:76:20:3b:a0:95:01:39:b8:4d:60:8a:e6:
bd:c5:1e:5e:10:21:f7:67:34:d2:f3:a9:65:b0:12:
87:9b:8a:e7:72:4f:42:a6:cc:67:e1:be:6a:0f:08:
66:67:1c:55:9d:e8:46:2c:ec:76:65:85:da:73:c2:
13:cf:a7:9e:7c:6b:32:cb:ec:25:15:f7:87:2b:28:
30:9e:d0:52:4a:b6:c7:ed:75:46:82:bf:28:85:5f:
a6:15:8c:03:e7:38:0d:4d:c0:04:51:29:b3:dd:da:
4b:24:41:ac:19:85:ac:81:89:a2:39:dc:7d:6d:2c:
38:99:81:84:6a:c5:9b:e4:5e:07:2b:27:cf:3f:62:
64:cd:74:64:01:7b:d4:9a:f6:7b:b3:a2:14:a8:f4:
10:e1:b0:4b:aa:ba:6f:9a:af:6c:cd:87:2e:d7:7e:
d0:ae:e7:6b:f6:85:b2:d1:6e:3c:19:f4:28:10:af:
c8:35:c1:e4:44:89:88:6c:69:6e:1f:62:84:a7:16:
f5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:19:78:CF:5A:D5:0F:AF:BB:6D:B8:33:FB:38:48:B2:C4:61:12:DA
X509v3 Authority Key Identifier:
keyid:C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/jxl4z1rVD6-7bbgz-zhIssRhEto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.190.0/23
176.118.224.0/19
Signature Algorithm: sha256WithRSAEncryption
94:f6:fe:b8:1c:68:54:26:f6:24:56:7c:c9:b0:eb:9d:7b:ef:
f1:cd:d5:d1:e5:9d:ea:c4:82:57:48:fe:06:68:61:4c:ed:1a:
26:f6:d4:8b:d0:cc:30:6b:7f:e9:7a:56:46:94:3e:d3:f0:99:
90:60:f6:f2:f5:d0:43:e2:fa:b6:4a:2f:f9:29:d0:a3:a5:07:
97:40:04:9d:40:7e:b2:7b:43:3a:7f:70:1a:f4:07:d0:b9:ca:
85:1a:1c:55:10:56:b2:15:84:1a:d6:ed:1f:d6:4f:cd:67:4c:
e2:3a:fd:fa:d2:97:aa:a8:29:d4:ae:ad:0d:65:3e:ae:de:2c:
32:3a:5d:0a:b1:b6:3f:2c:0e:9c:da:c7:e0:24:fe:45:24:5c:
37:f0:92:84:ad:3a:43:e1:cc:13:9c:e4:9c:50:f5:c9:13:3c:
51:6c:05:b8:57:9e:d3:8c:18:66:89:7f:80:88:eb:10:a9:ec:
28:9b:7f:6c:ea:19:25:39:e6:5b:a2:5d:12:12:06:ee:cf:cb:
e9:c5:b4:4a:0e:e0:c1:14:43:24:a0:0f:83:6d:32:4a:b1:18:
8c:59:11:6b:d5:10:49:87:3d:bb:d2:5a:dc:29:2a:5d:b3:24:
5f:74:5b:83:34:44:c7:b8:71:d9:9d:24:d1:d7:50:b8:ea:dd:
55:97:c3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:54 2024 by rpki-client on console-ams.rpki-client.org