Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/JIbgtm8ipDVZKL45ycYQeIkuqO4.roa
File: JIbgtm8ipDVZKL45ycYQeIkuqO4.roa (raw, json)
Hash identifier: mrKDaOAjwddHNq90ohQ5NnbEX/HGBgJD/au3YKhgVxo=
Subject key identifier: 24:86:E0:B6:6F:22:A4:35:59:28:BE:39:C9:C6:10:78:89:2E:A8:EE
Certificate issuer: /CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Certificate serial: 01856D9D2706FC39BD321E3B2FF436827967
Authority key identifier: B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/JIbgtm8ipDVZKL45ycYQeIkuqO4.roa
Signing time: Sun 01 Jan 2023 13:54:53 +0000
ROA not before: Sun 01 Jan 2023 13:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6453
IP address blocks: 91.223.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:27:06:fc:39:bd:32:1e:3b:2f:f4:36:82:79:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Validity
Not Before: Jan 1 13:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2486e0b66f22a4355928be39c9c61078892ea8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c2:a4:52:25:1b:fb:9c:c7:86:02:18:6b:64:
f9:0d:f7:f3:11:59:37:30:7b:a6:ea:6c:80:54:08:
98:9f:92:78:d6:ac:3d:da:d3:12:41:75:e1:f8:5b:
58:f2:75:5c:e3:b0:aa:b8:c1:f7:03:0d:06:41:be:
4b:36:f6:0f:9f:66:75:ee:3a:69:16:6e:2c:cd:7b:
28:4c:00:de:a4:de:aa:5a:fb:02:d1:8d:05:e1:93:
1d:0e:fc:45:26:1d:bc:41:37:ce:6e:49:a9:d9:0d:
7a:cd:5e:4a:e9:d1:92:0d:dd:20:50:7e:b2:7c:be:
b6:89:ed:7a:b5:9c:b2:92:b6:6c:4b:fe:e6:5c:b2:
e0:77:35:96:91:71:a0:73:fc:48:7f:9e:31:2b:f6:
c6:85:d4:d9:c9:74:09:d6:de:46:e1:73:12:d9:68:
91:2a:dc:e7:67:81:ee:01:0d:23:86:5e:6f:ee:c0:
63:a9:09:26:08:c7:01:23:49:cf:66:53:18:53:8d:
47:fc:a5:3c:1f:27:c1:a0:30:62:fa:fe:c8:18:94:
8e:9c:db:6d:c6:b2:9e:af:2d:ef:61:c4:96:f0:b7:
20:36:c0:d5:45:5f:e8:87:66:1e:ac:dd:91:25:89:
ff:a3:f0:bc:7a:71:b4:c1:a9:ff:bf:00:57:4b:d5:
08:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:86:E0:B6:6F:22:A4:35:59:28:BE:39:C9:C6:10:78:89:2E:A8:EE
X509v3 Authority Key Identifier:
keyid:B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/JIbgtm8ipDVZKL45ycYQeIkuqO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.85.0/24
Signature Algorithm: sha256WithRSAEncryption
63:b8:68:27:58:46:da:e9:8f:59:4c:fa:7f:01:71:a8:16:af:
95:fa:c3:bc:8b:54:aa:15:41:0d:fc:8f:f9:34:82:60:ea:0b:
6d:78:ce:50:89:7a:98:b6:86:70:a6:fb:68:32:93:b6:3d:a2:
6e:d2:ce:3f:c0:fd:04:38:8d:dc:64:e7:66:8e:8a:e3:c8:d7:
fd:0e:b1:d9:48:8f:16:ef:3e:67:84:64:6b:1a:25:db:77:df:
7d:5a:09:f9:3b:9f:e4:4a:13:e0:54:7f:95:66:90:3d:b6:10:
5f:87:09:00:f4:98:a6:d4:f0:a2:e5:4b:22:d6:6d:84:7f:f9:
81:b1:4d:f3:f5:8a:34:47:47:86:aa:c7:69:8b:6e:66:5f:7b:
39:3e:b3:6f:34:a5:07:b2:31:a0:26:64:e1:2f:8f:ff:5a:c1:
d5:ea:13:f2:79:4d:80:b2:07:c0:fa:d8:09:f1:e2:ff:75:7a:
0f:e4:db:3c:f4:6a:08:69:f1:5f:ae:6d:ff:81:af:9e:76:15:
ef:19:e8:e1:10:66:8b:81:64:61:b7:ab:fd:9a:00:00:75:b8:
b6:2e:eb:2e:0a:07:63:cf:00:d5:27:e7:b6:54:aa:2c:c8:37:
b2:e5:af:9a:83:18:0b:61:b1:ae:d3:1e:fa:bb:ce:8e:2d:07:
d8:1b:3d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:23 2024 by rpki-client on console-fra.rpki-client.org