Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/jRr_VVzdyhulPL247b-9G3Pi14U.roa
File: jRr_VVzdyhulPL247b-9G3Pi14U.roa (raw, json)
Hash identifier: bz3K0wx14t7J+Xt/q+5GjRQi9xI20OiiP+Pkw9HD4xg=
Subject key identifier: 8D:1A:FF:55:5C:DD:CA:1B:A5:3C:BD:B8:ED:BF:BD:1B:73:E2:D7:85
Certificate issuer: /CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Certificate serial: 018B0A8EF8668389C56969064E8136F9104A
Authority key identifier: E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/jRr_VVzdyhulPL247b-9G3Pi14U.roa
Signing time: Sat 07 Oct 2023 14:33:43 +0000
ROA not before: Sat 07 Oct 2023 14:33:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28917
IP address blocks: 91.247.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0a:8e:f8:66:83:89:c5:69:69:06:4e:81:36:f9:10:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Validity
Not Before: Oct 7 14:33:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d1aff555cddca1ba53cbdb8edbfbd1b73e2d785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:47:8a:a9:f8:be:c8:e4:ee:9f:17:88:49:9b:
11:0f:0c:63:2d:de:92:3f:17:f5:4b:05:b6:79:0d:
05:1c:9f:c9:9d:23:e8:12:03:a7:1a:14:95:0b:50:
fd:5d:e9:69:cc:39:56:e1:34:8a:9c:bd:94:cd:82:
70:e1:fa:c0:fe:56:f4:d8:28:c0:ec:bc:2f:d6:cb:
c0:02:e6:5e:89:39:99:85:78:2c:3e:44:0a:96:df:
ac:cc:16:db:be:e7:fe:1f:e9:c0:b9:d4:15:cd:55:
04:7d:4f:b4:37:92:85:23:bc:5c:28:c9:0b:b2:9b:
d3:5d:14:d0:54:2e:5d:41:44:90:1f:72:65:1d:18:
e7:1e:46:cc:9b:a8:0c:49:48:b1:92:e2:4c:5c:29:
14:ab:ec:ed:ed:3b:1b:f6:08:9a:0a:ce:bd:dc:2b:
86:d3:ea:35:e5:5a:ac:99:73:cb:7b:c3:0f:3c:32:
fa:4f:db:0e:27:36:61:2f:5d:e0:e2:9c:cb:9a:37:
27:ae:4b:70:56:7c:38:50:11:00:d3:99:12:bf:bb:
df:ed:d5:e1:74:70:27:08:e4:31:6b:f4:80:0a:de:
42:14:6d:8e:53:52:1c:fa:f5:e4:c1:29:a6:12:39:
08:62:4a:cd:1b:17:c5:2f:e7:b5:70:68:eb:4a:f7:
62:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1A:FF:55:5C:DD:CA:1B:A5:3C:BD:B8:ED:BF:BD:1B:73:E2:D7:85
X509v3 Authority Key Identifier:
keyid:E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/jRr_VVzdyhulPL247b-9G3Pi14U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.185.0/24
Signature Algorithm: sha256WithRSAEncryption
13:69:18:0b:f4:31:60:6c:82:05:6a:47:6d:08:fd:32:0c:95:
21:19:31:d2:c0:d3:85:4c:03:0d:07:db:1d:e3:d0:49:d2:da:
f4:8b:1f:75:18:f5:63:60:67:ee:b5:3b:0f:d9:3d:27:06:02:
90:0a:50:a7:7c:77:91:e4:c4:01:95:60:8e:32:84:22:f0:cd:
22:ca:31:10:4b:9e:89:13:41:61:07:31:77:b1:5f:c6:c2:c1:
19:9d:1d:c7:4e:54:12:6d:a5:d0:28:63:5a:c3:27:ff:d8:36:
b0:f4:2f:7a:ad:8b:b2:08:26:93:6f:7e:a0:98:30:ed:f0:de:
83:cf:5f:fa:fb:fd:ba:13:df:e2:3a:bc:d7:cc:c0:dc:60:5d:
27:ed:ae:3f:6f:ed:f6:af:95:02:43:6c:2f:58:d5:19:07:53:
45:70:03:35:e2:b1:ec:21:15:c8:a3:98:13:c1:55:fe:3b:38:
34:fa:d2:19:19:e0:51:05:06:b3:f8:6f:e3:35:6e:1f:51:b0:
0e:82:3a:d7:3c:f1:95:e7:f7:71:64:5c:3a:eb:43:1d:c7:db:
22:fd:19:f2:ef:ec:61:32:e6:3c:76:1f:fe:81:ab:cd:64:7f:
fc:a6:84:e6:a3:f0:ab:42:12:b9:e6:5f:f3:99:09:93:ae:6a:
a4:7a:a5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:55 2024 by rpki-client on console-ams.rpki-client.org