Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/jWx-cG6UB5GL21BrSyHuOAYruR0.roa
File: jWx-cG6UB5GL21BrSyHuOAYruR0.roa (raw, json)
Hash identifier: COeGGYBfiridBDcVsCvMaMiAGGL0/T8KIvNehs4sMB8=
Subject key identifier: 8D:6C:7E:70:6E:94:07:91:8B:DB:50:6B:4B:21:EE:38:06:2B:B9:1D
Certificate issuer: /CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Certificate serial: 018CC6B7F4904E5F5696654E30BEE17716B8
Authority key identifier: A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/jWx-cG6UB5GL21BrSyHuOAYruR0.roa
Signing time: Mon 01 Jan 2024 20:29:53 +0000
ROA not before: Mon 01 Jan 2024 20:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48786
IP address blocks: 91.212.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:f4:90:4e:5f:56:96:65:4e:30:be:e1:77:16:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Validity
Not Before: Jan 1 20:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d6c7e706e9407918bdb506b4b21ee38062bb91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:08:47:f8:ea:9b:d8:2a:77:40:81:5b:ce:94:
f4:80:1c:53:e1:02:47:b3:25:00:a6:d1:28:4b:5c:
55:8d:93:3d:04:9a:fb:79:e7:11:73:2f:08:7b:65:
e9:29:47:db:9e:b7:f7:04:42:f3:f3:22:2c:1a:a5:
ff:1e:54:d7:90:e0:d2:55:29:8f:2c:8a:bf:8d:cc:
45:8d:41:95:ec:cb:1b:41:d8:54:28:bb:b3:24:61:
9a:07:f5:41:d7:aa:ff:18:3f:1d:f7:0c:42:57:91:
f9:9c:e4:10:ee:de:fa:25:55:7d:7a:e0:15:3f:a3:
fd:7a:96:20:aa:0c:73:3c:9f:29:10:5c:09:b1:1e:
6e:2d:f9:e8:ff:6a:26:7f:ae:2a:ab:d3:a2:1c:01:
4f:bd:3e:d3:5f:33:9e:db:16:be:f9:c6:bd:71:79:
c8:f5:72:24:6d:92:bd:98:49:30:83:fb:91:e9:ad:
0d:32:e9:23:25:a0:9f:78:50:a6:ab:8a:63:7c:84:
be:33:05:31:93:66:24:58:da:00:a3:cd:e7:f4:11:
ca:fc:c3:b7:fd:25:1f:d2:0a:34:95:cf:a9:f6:7b:
b3:4c:54:93:14:99:e3:59:37:e7:a2:a1:69:a2:a8:
9d:17:bb:b5:ec:63:b1:35:a1:fb:c3:9d:b7:53:9c:
a9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6C:7E:70:6E:94:07:91:8B:DB:50:6B:4B:21:EE:38:06:2B:B9:1D
X509v3 Authority Key Identifier:
keyid:A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/jWx-cG6UB5GL21BrSyHuOAYruR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.35.0/24
Signature Algorithm: sha256WithRSAEncryption
03:70:95:26:de:7a:c3:ad:37:36:e5:f5:f1:a5:b5:54:46:e0:
19:e6:41:7c:8a:d8:91:5e:9c:9b:87:91:9c:1c:b3:80:05:cf:
33:a0:63:5f:71:81:81:7c:fd:d8:0f:1e:19:84:70:df:06:70:
55:e7:fe:8a:49:37:e4:34:88:d3:d0:0a:ec:aa:f9:b0:1f:6e:
04:66:67:c9:38:4a:05:73:aa:a6:89:ec:11:97:4f:32:a2:19:
e1:af:86:e9:d5:c7:e6:a0:2f:eb:5a:ad:ea:d5:9a:fe:06:50:
d8:fd:f3:f3:58:4b:92:c0:9b:ba:46:40:36:ae:4b:54:ed:fd:
da:b8:38:f0:d1:d8:d2:c2:1a:b8:68:8e:6f:52:f3:db:a8:7b:
2a:da:00:ee:0d:b9:59:09:ac:95:9a:25:7c:f9:74:48:5e:4e:
ed:bc:41:32:5c:2e:8d:7f:e8:e1:f1:ba:c6:a7:82:02:b8:41:
5a:2d:57:f0:6f:b1:a1:2f:a9:a9:4d:71:41:8f:bc:27:84:de:
62:0e:69:d5:38:89:eb:00:aa:24:b7:07:4d:d9:5c:f3:7f:13:
5b:ef:21:9e:ba:08:17:e3:3a:36:8d:de:a5:93:06:2d:d9:ca:
b6:76:0d:6f:3d:fc:48:c7:34:d0:6b:78:15:75:fa:9d:08:a6:
b7:be:c9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:12:11 2025 by rpki-client