Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/Jl638PKE5evv3P9CC-NrPVA7Sdg.roa
File: Jl638PKE5evv3P9CC-NrPVA7Sdg.roa (raw, json)
Hash identifier: zbU0py6+fiC0iO4uwLCrSi6p48wZucreBEcfTYfHyBk=
Subject key identifier: 26:5E:B7:F0:F2:84:E5:EB:EF:DC:FF:42:0B:E3:6B:3D:50:3B:49:D8
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 018E1D91D8E18418DE665BE7CCAECDE75348
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/Jl638PKE5evv3P9CC-NrPVA7Sdg.roa
Signing time: Fri 08 Mar 2024 10:18:01 +0000
ROA not before: Fri 08 Mar 2024 10:18:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 91.204.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 14:16:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1d:91:d8:e1:84:18:de:66:5b:e7:cc:ae:cd:e7:53:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: Mar 8 10:18:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=265eb7f0f284e5ebefdcff420be36b3d503b49d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:da:d2:f8:b6:c1:93:49:f4:31:94:c5:a4:f3:
38:35:33:8a:dd:e0:0c:a3:6e:6b:a5:40:79:21:60:
ca:9e:51:07:55:95:70:46:68:08:67:da:82:aa:21:
a0:d9:44:4e:e7:c6:a9:28:80:4b:19:be:16:0b:f4:
9b:21:77:c1:82:bf:cc:e3:4e:54:f3:3a:8f:88:fb:
d1:d2:8c:e3:5d:53:b2:2e:b8:98:7e:c4:ef:99:4f:
a4:c3:d9:7f:bd:0c:88:0c:9c:46:bc:37:9f:dc:47:
1b:8a:9b:04:5d:35:35:1c:e6:44:7d:62:9b:2f:dd:
ff:e4:5e:b0:08:fc:a3:4a:7a:2e:f1:b7:d0:ba:ad:
c1:46:52:11:e1:56:29:12:24:1f:e7:9f:6a:2c:3c:
b6:f8:4b:44:68:0b:77:cd:b0:a2:13:5f:47:8f:69:
3f:8c:76:3b:76:9a:66:75:80:ad:1c:05:2a:dd:3e:
4d:21:ce:b5:b8:aa:d1:3c:14:b0:31:bb:a8:fd:9f:
ff:61:8e:ef:01:da:46:41:41:51:7f:16:8b:ef:f6:
e6:65:6e:df:68:95:ac:77:ad:de:e9:99:6b:07:36:
59:f7:ae:c9:d4:ee:93:9a:50:9c:f9:28:ff:25:c4:
32:4d:1e:6a:99:1d:49:f5:11:23:03:37:a6:c0:d9:
9c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5E:B7:F0:F2:84:E5:EB:EF:DC:FF:42:0B:E3:6B:3D:50:3B:49:D8
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/Jl638PKE5evv3P9CC-NrPVA7Sdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.76.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:83:fb:36:8f:ed:82:40:25:a3:1f:82:63:61:0d:88:b6:2e:
d2:9f:d5:42:a5:9c:39:97:c9:89:d6:37:a8:71:0f:18:bf:ef:
58:de:ec:eb:34:79:65:e0:f0:e2:bd:15:3d:a5:b3:51:26:5e:
23:65:2f:4c:7e:60:54:59:db:b3:b9:0f:96:54:be:6d:03:f0:
ba:a8:9e:47:d8:df:0d:f1:bd:11:71:f6:66:c2:4d:d5:4f:f6:
1d:5e:9a:03:fb:07:e7:a1:ae:6d:95:ac:7d:d8:f8:58:cc:5d:
01:66:2c:a1:26:67:a2:8b:86:a2:5d:0f:c8:d2:c9:52:4a:ed:
79:10:7f:d0:c7:f0:73:ec:c0:5e:e3:b1:05:e3:ef:d3:84:4c:
4d:ba:84:c6:25:b2:e8:37:6c:6e:49:48:98:ab:c0:c7:01:2e:
a2:0a:9d:d5:79:e9:28:ab:ba:18:1f:58:cc:34:98:cf:61:40:
13:a8:c4:02:61:ba:28:d1:20:bd:83:21:92:70:38:46:66:27:
b7:0e:bc:3e:9a:85:c7:7c:0c:31:42:ee:be:51:5c:59:c1:77:
94:26:81:7a:5c:64:ea:9c:35:fe:47:be:be:b6:85:5a:d2:95:
6d:bf:93:2d:a5:39:a2:ff:c6:e8:68:8c:5b:97:59:85:ea:3a:
1a:a6:5e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-fra.rpki-client.org