Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/J6OJcSnhAauImLRjc3jfevouqmI.roa
File: J6OJcSnhAauImLRjc3jfevouqmI.roa (raw, json)
Hash identifier: df7sC3WNMXQpVQ/8VEz/WhZ4dgYNvc056790t7QoJLo=
Subject key identifier: 27:A3:89:71:29:E1:01:AB:88:98:B4:63:73:78:DF:7A:FA:2E:AA:62
Certificate issuer: /CN=835bf48f18527b2b3b59bfbf3fdff204492bce91
Certificate serial: 0185704BEC38F80C72262EA8D5AECF7A590B
Authority key identifier: 83:5B:F4:8F:18:52:7B:2B:3B:59:BF:BF:3F:DF:F2:04:49:2B:CE:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/J6OJcSnhAauImLRjc3jfevouqmI.roa
Signing time: Mon 02 Jan 2023 02:25:01 +0000
ROA not before: Mon 02 Jan 2023 02:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50906
IP address blocks: 91.216.20.0/24 maxlen: 24
2001:67c:1cc::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:ec:38:f8:0c:72:26:2e:a8:d5:ae:cf:7a:59:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bf48f18527b2b3b59bfbf3fdff204492bce91
Validity
Not Before: Jan 2 02:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27a3897129e101ab8898b4637378df7afa2eaa62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:43:26:e8:fd:55:eb:02:e8:74:48:35:d4:b2:
16:65:d3:da:3d:df:a2:5f:13:67:a5:9d:3f:67:1a:
f4:24:2a:bf:20:64:3b:81:f5:87:a3:2b:48:2d:62:
40:a8:ce:3f:32:95:35:74:bf:ec:21:aa:69:62:58:
21:eb:97:38:46:a9:0b:8f:ca:3d:02:bf:6f:aa:91:
c0:17:1e:d3:1d:73:78:2b:97:15:f0:4c:b9:34:d3:
85:34:a5:eb:63:41:7f:83:81:13:07:c7:a2:ca:83:
9a:63:06:5a:c9:42:71:df:ef:4b:f9:97:21:11:92:
89:04:2c:56:8a:6a:4a:11:a0:92:a2:06:8e:56:f9:
94:59:06:a4:6d:3a:03:02:e5:1e:69:9e:92:72:f4:
e9:62:8d:70:bd:17:43:1b:ea:b0:1e:d2:86:3c:77:
d8:f8:58:32:be:76:df:a5:74:0d:7a:74:b7:9f:79:
e3:10:5d:1b:60:30:8f:6a:72:6c:86:c9:33:d1:22:
46:8f:a4:f6:93:4f:5e:bd:85:80:08:e1:92:d0:d0:
c4:b8:24:a6:a6:b9:2b:df:ae:96:86:01:44:1b:39:
d2:9d:88:99:98:15:67:4f:f4:a9:13:14:ed:3c:94:
2c:f0:71:46:e4:e5:3b:ed:48:5e:98:8c:3e:cf:ab:
ce:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A3:89:71:29:E1:01:AB:88:98:B4:63:73:78:DF:7A:FA:2E:AA:62
X509v3 Authority Key Identifier:
keyid:83:5B:F4:8F:18:52:7B:2B:3B:59:BF:BF:3F:DF:F2:04:49:2B:CE:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/J6OJcSnhAauImLRjc3jfevouqmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.20.0/24
IPv6:
2001:67c:1cc::/48
Signature Algorithm: sha256WithRSAEncryption
cb:44:29:9d:26:03:6d:b8:8d:2b:7c:87:cb:78:12:e2:15:63:
77:08:7c:92:06:a2:ef:f7:9b:88:90:a0:ac:f6:43:e2:a5:55:
30:ec:c6:14:02:2a:0e:91:78:13:39:40:da:3a:e1:e1:19:52:
e5:ca:37:b1:04:7d:8a:11:0d:f8:19:45:72:6e:b4:c1:af:e5:
4f:b1:c6:ab:9e:77:78:6e:1a:09:ee:1b:00:02:71:68:80:65:
41:a5:5a:86:eb:e6:d5:2b:25:b3:17:95:5e:72:ac:15:41:97:
b3:c4:e6:48:ee:79:2e:f2:c4:47:30:a9:43:20:8e:58:f7:65:
89:7c:a7:37:de:a4:05:b2:42:be:03:e9:ca:08:ca:1e:f6:ff:
62:e5:16:a5:a4:c4:0c:bb:26:2a:ec:0e:a7:7b:84:e6:6d:29:
d1:e5:2c:75:ad:aa:fc:a9:be:ec:81:82:4a:9c:02:5b:52:ad:
21:c1:cb:b1:ab:dc:13:b8:50:86:5a:ca:4d:7e:6e:9a:55:3e:
df:16:b3:14:11:88:21:2f:c6:8b:2b:b9:05:4e:86:bc:c5:87:
36:9b:79:6c:a8:dc:bc:8a:f3:2f:88:4d:00:cd:40:81:bc:a5:
46:b7:8a:0d:08:09:b4:c6:58:ba:f0:3b:32:a2:4d:4e:d6:86:
51:05:e2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:14 2024 by rpki-client on console-fra.rpki-client.org