Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/Jxn8v0-qJWiM35TKySPBkMU75Aw.roa
File: Jxn8v0-qJWiM35TKySPBkMU75Aw.roa (raw, json)
Hash identifier: VTLwki2OgOvTcZy0b9APHFlcqL1LRF4vy8mBmR4Udqg=
Subject key identifier: 27:19:FC:BF:4F:AA:25:68:8C:DF:94:CA:C9:23:C1:90:C5:3B:E4:0C
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 018CC492463E16385EB4E1AE8BDBEA4B8B70
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/Jxn8v0-qJWiM35TKySPBkMU75Aw.roa
Signing time: Mon 01 Jan 2024 10:29:29 +0000
ROA not before: Mon 01 Jan 2024 10:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202636
IP address blocks: 185.243.152.0/22 maxlen: 22
91.246.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 12:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:46:3e:16:38:5e:b4:e1:ae:8b:db:ea:4b:8b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Jan 1 10:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2719fcbf4faa25688cdf94cac923c190c53be40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fa:17:8b:7c:4b:c6:94:1a:c4:25:56:44:48:
ae:b3:ea:33:da:05:6c:b0:fd:c1:9b:d4:e8:34:84:
b1:65:58:9c:4c:96:a1:bc:9b:75:21:d7:28:56:83:
ea:0d:a6:a2:31:81:a4:34:e1:ba:98:3f:95:6f:ad:
e3:60:36:08:87:03:36:fa:79:eb:b9:db:e3:2f:7c:
d8:50:92:6a:82:66:04:3a:a9:84:56:1f:07:3d:60:
9e:87:d1:ce:a3:f6:66:b9:e2:a7:11:1c:0b:e8:76:
26:8e:9e:a3:c5:fb:b5:9f:40:1a:32:14:30:fb:61:
58:30:22:68:23:2a:77:e0:ba:81:fc:9a:00:c1:b2:
50:40:85:01:0b:65:34:f5:51:19:2c:b8:fb:28:43:
b0:60:69:19:33:33:de:8a:44:4a:9b:bd:2a:0a:2d:
fa:95:4b:e8:d3:27:05:2a:06:17:43:89:23:0d:32:
c0:a1:f8:8b:a8:20:a9:ef:b6:07:14:89:d8:dd:ab:
ec:98:c4:1f:42:0c:95:53:c8:8c:82:75:c4:f0:94:
d3:77:9d:ea:25:b3:37:af:1e:5d:d5:f7:d1:9e:c2:
f1:36:d0:00:76:d3:90:55:1b:7d:4a:46:0b:e4:0f:
58:cb:89:d6:75:c5:4e:21:16:ae:49:46:82:ed:3f:
d2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:19:FC:BF:4F:AA:25:68:8C:DF:94:CA:C9:23:C1:90:C5:3B:E4:0C
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/Jxn8v0-qJWiM35TKySPBkMU75Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.52.0/24
185.243.152.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:7a:4b:70:46:d8:8f:cc:a8:65:34:98:29:1e:4e:81:31:3c:
bd:65:75:fd:8f:b7:2f:b1:e4:d9:f9:0f:54:b3:68:85:1c:d3:
f7:f9:38:4b:ef:20:90:89:f3:2a:a3:d1:1f:8a:7b:c9:93:b9:
15:18:3f:dc:93:65:4c:3f:cd:3a:e4:9a:90:57:49:2b:23:fc:
0b:cf:68:67:f7:2a:21:21:28:e0:17:ef:56:74:1d:07:cc:28:
c2:98:88:bb:cd:76:de:0c:d2:46:1e:ed:59:88:e2:c5:eb:10:
fe:fc:7a:82:d3:bb:42:ad:3b:a3:22:fb:9e:4e:80:9d:8d:d2:
41:68:33:28:bd:a7:0f:52:f4:e8:fe:6c:c4:09:76:ce:cb:3c:
82:c5:f6:40:b6:4f:07:f3:78:c6:1f:d4:e7:1b:a5:d6:32:c9:
4f:9e:7c:26:c4:45:99:3d:17:92:29:25:50:d4:06:e2:67:ae:
9a:b2:61:b8:e3:f1:b6:2a:64:9d:fc:58:b1:fc:27:06:d6:02:
74:19:4b:73:8d:7a:4c:95:e9:03:bd:d8:ca:07:40:55:45:aa:
0d:34:9b:5d:49:2a:9c:0d:3a:96:bf:d7:d9:96:a6:7f:e7:97:
75:c8:f2:83:0f:4f:63:8f:68:29:2c:10:27:3f:59:c7:04:16:
c6:ad:8f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 16:49:33 2024 by rpki-client on console-ams.rpki-client.org