Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/hJaotELOfGeK7xOy3fDQdiAjByE.roa
File: hJaotELOfGeK7xOy3fDQdiAjByE.roa (raw, json)
Hash identifier: I0z/XzLVMwNeyQMotstv4j3VmO5aImA+SOxehA5DiXc=
Subject key identifier: 84:96:A8:B4:42:CE:7C:67:8A:EF:13:B2:DD:F0:D0:76:20:23:07:21
Certificate issuer: /CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Certificate serial: 018D81CA9BA2A48E0C68006AE054956760D7
Authority key identifier: F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/hJaotELOfGeK7xOy3fDQdiAjByE.roa
Signing time: Wed 07 Feb 2024 04:19:15 +0000
ROA not before: Wed 07 Feb 2024 04:19:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58172
IP address blocks: 91.239.101.0/24 maxlen: 24
128.127.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 12:11:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:ca:9b:a2:a4:8e:0c:68:00:6a:e0:54:95:67:60:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Validity
Not Before: Feb 7 04:19:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8496a8b442ce7c678aef13b2ddf0d07620230721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f8:14:20:be:b6:1b:ad:27:86:63:6f:94:7d:
bd:9f:13:5b:22:20:a7:ff:19:be:aa:e6:2b:9c:48:
ee:a8:5e:ce:64:fe:94:ea:59:d6:f1:5e:6b:7f:4a:
88:d0:b6:e8:f2:07:94:a2:ab:89:ad:91:17:8b:b9:
e6:e8:b2:c9:cd:8f:ef:11:1a:c1:4a:03:30:8b:17:
eb:b9:5c:57:f3:4f:47:28:4b:a2:07:4f:98:1e:66:
2e:69:dd:fb:22:60:24:82:c9:9c:56:0e:a5:5c:e0:
ee:6c:3f:be:6b:73:c8:10:85:12:b3:9d:27:55:d6:
f1:96:f6:c2:b7:8d:57:e7:59:40:b8:09:6c:d6:0b:
50:aa:46:ea:b5:76:b3:55:65:96:2d:f9:f6:65:ab:
e5:9d:d5:ed:cd:88:20:f6:27:8b:00:bf:5e:4f:dc:
da:67:69:91:f0:a4:32:1d:8e:18:8a:cb:c6:21:c8:
b0:20:c5:a7:fa:08:0d:4b:f5:94:06:b4:b8:8f:cd:
85:00:df:58:c1:0f:f9:ba:0f:47:86:ec:b8:7a:46:
c4:4d:0c:43:c6:89:b7:56:d2:b0:c7:d1:da:04:94:
8b:ae:f8:75:2d:67:c3:08:27:06:03:e6:48:86:1f:
25:d1:57:7f:6a:c8:2c:58:67:de:11:d9:a6:b7:a9:
84:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:96:A8:B4:42:CE:7C:67:8A:EF:13:B2:DD:F0:D0:76:20:23:07:21
X509v3 Authority Key Identifier:
keyid:F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/hJaotELOfGeK7xOy3fDQdiAjByE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.101.0/24
128.127.100.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:e1:d9:7c:53:e1:92:9e:3e:a0:08:be:71:74:cf:c6:82:33:
34:8c:1d:3a:f0:c0:68:9a:a3:51:82:c9:0a:71:cc:4c:8b:d1:
77:25:6a:ca:e0:62:19:dc:aa:85:13:dd:42:96:eb:3b:46:11:
cd:e0:4e:8b:17:ce:e3:cf:83:28:dc:77:36:ec:34:49:74:ff:
86:f5:d3:21:6b:5e:a2:7a:85:56:be:ad:1a:90:f2:44:10:df:
41:25:0d:fa:30:5b:56:73:3b:21:af:78:b1:55:c4:c1:2e:fc:
a0:d1:80:99:84:09:1b:e6:18:be:c6:94:f3:24:5d:12:e8:e5:
99:41:5b:ea:19:bb:7b:12:4a:68:bc:6d:de:9b:c9:34:5f:de:
7a:31:87:72:86:2e:49:41:63:48:a4:3d:71:13:7d:55:a5:f9:
ff:e4:ee:e6:98:d7:df:db:15:c7:d7:8d:80:74:9e:e9:95:c8:
21:58:b5:26:9c:74:ac:4c:e7:c4:de:d3:d7:e3:04:7f:44:9a:
db:f4:aa:af:4b:6f:9d:80:b9:f9:6c:39:d5:00:9f:65:13:f6:
4f:1a:57:45:ef:47:70:61:fa:a7:b1:b9:09:17:96:c7:de:b0:
5f:c7:53:1a:6b:57:59:3a:97:65:b5:d6:0d:86:5c:28:b5:e5:
2d:b5:fb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:48 2024 by rpki-client on console-ams.rpki-client.org