Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/pJ3BXZ_lt9k92v3UgcNZ3sqAwr4.roa
File: pJ3BXZ_lt9k92v3UgcNZ3sqAwr4.roa (raw, json)
Hash identifier: 28oG4D/XxQ9jU2TG/RHx4QQz1USeOhgp2D4Ek775ojs=
Subject key identifier: A4:9D:C1:5D:9F:E5:B7:D9:3D:DA:FD:D4:81:C3:59:DE:CA:80:C2:BE
Certificate issuer: /CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a
Certificate serial: 01912D44BB96908DAF2986D500539BC20C57
Authority key identifier: 3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/pJ3BXZ_lt9k92v3UgcNZ3sqAwr4.roa
Signing time: Wed 07 Aug 2024 14:36:04 +0000
ROA not before: Wed 07 Aug 2024 14:36:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 91.211.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 13:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2d:44:bb:96:90:8d:af:29:86:d5:00:53:9b:c2:0c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a
Validity
Not Before: Aug 7 14:36:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a49dc15d9fe5b7d93ddafdd481c359deca80c2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0b:59:48:c4:ca:36:69:b3:77:f5:c7:48:62:
73:8a:4b:bd:c1:4c:ac:73:dc:b8:d3:89:f9:32:49:
c1:29:e3:49:f2:3d:72:19:23:f7:c2:ae:b2:48:d1:
49:a3:85:61:bf:f6:f4:4a:ac:80:e3:0f:22:aa:84:
e7:4f:59:24:aa:9a:a0:7b:c3:ea:b5:bd:74:12:86:
22:d4:7c:01:24:95:5b:2a:03:70:14:82:bc:86:66:
57:ec:e9:18:b4:48:c7:be:82:fd:90:6d:54:a3:d4:
9e:92:37:aa:c9:59:2a:13:ea:56:fc:15:ee:28:3d:
6d:de:ff:99:d7:61:d0:6c:3d:27:7e:15:0b:8f:e8:
cd:26:64:82:6c:7a:dc:46:c0:96:a3:b1:58:6b:a8:
3e:22:67:17:fe:76:1e:7d:fe:55:0a:e5:e2:4c:cd:
1e:13:ef:b1:cf:71:cf:ed:88:6e:05:81:23:ff:93:
fe:a0:16:bc:4e:06:28:d4:00:8f:a1:c0:23:8c:e4:
d6:e1:ea:39:f6:27:88:87:e4:e4:96:1a:b7:b8:9d:
16:8a:41:d1:08:b4:34:75:e5:85:ea:2c:09:54:a9:
be:cb:37:14:33:c6:09:98:54:8e:fd:05:d9:a3:0f:
af:c2:0d:08:26:b9:a7:24:bb:69:26:5c:b8:d4:1d:
f4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9D:C1:5D:9F:E5:B7:D9:3D:DA:FD:D4:81:C3:59:DE:CA:80:C2:BE
X509v3 Authority Key Identifier:
keyid:3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/pJ3BXZ_lt9k92v3UgcNZ3sqAwr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.196.0/22
Signature Algorithm: sha256WithRSAEncryption
56:37:17:fa:87:ae:48:3a:4a:2e:44:c1:69:05:4e:15:fa:49:
ff:26:35:9b:8c:cb:b9:6f:19:15:ae:28:2a:bf:34:c3:d4:0b:
84:99:59:fa:c5:da:ee:51:82:28:91:bd:30:67:6d:61:6a:19:
64:98:3f:3d:2c:40:68:96:f1:63:4a:df:55:bb:11:75:97:f3:
73:66:50:7b:f8:77:b1:8f:52:01:7f:a1:3c:b9:44:3e:38:89:
16:14:6b:b2:dd:1d:5d:9a:07:ac:9a:3f:f2:65:63:53:d3:3f:
3b:4b:89:56:c4:2d:14:b9:ba:ce:1e:1a:dd:72:04:dc:13:f1:
80:fd:e9:b9:d5:a5:51:f1:9f:8f:2a:a7:73:36:b7:f1:60:ad:
85:e6:fa:15:ed:5e:74:95:5e:37:6f:99:e4:3f:a5:52:15:c9:
04:21:f4:c6:9b:67:67:22:c7:f2:b7:98:37:fe:d2:f9:c9:1e:
72:98:6b:b1:24:03:41:49:da:62:65:3a:f0:75:4a:61:7f:70:
7c:b3:b3:fe:27:b2:be:52:cc:44:d3:68:8a:24:7e:83:17:b6:
ea:f4:2f:95:b4:7d:51:f6:f8:57:8b:bf:ae:d6:9f:19:00:66:
2d:81:27:c3:bb:e5:5e:e5:16:50:be:f4:8a:3c:1e:91:e8:fa:
3f:21:ea:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 16:00:28 2024 by rpki-client on console-fra.rpki-client.org