Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/JwGsBH5S4lfT203jJyL-gfRAy6Y.roa
File: JwGsBH5S4lfT203jJyL-gfRAy6Y.roa (raw, json)
Hash identifier: ncUui8TGaMViTJXJr5JJTnoWVWBv4VpopDRXEivHwas=
Subject key identifier: 27:01:AC:04:7E:52:E2:57:D3:DB:4D:E3:27:22:FE:81:F4:40:CB:A6
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 0186CD1A3A1FFE8C223333175ECF9A6453A1
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/JwGsBH5S4lfT203jJyL-gfRAy6Y.roa
Signing time: Fri 10 Mar 2023 19:58:13 +0000
ROA not before: Fri 10 Mar 2023 19:58:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 91.232.8.0/22 maxlen: 24
91.204.182.0/24 maxlen: 24
91.204.182.0/23 maxlen: 23
91.204.180.0/24 maxlen: 24
91.218.176.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Apr 2023 13:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cd:1a:3a:1f:fe:8c:22:33:33:17:5e:cf:9a:64:53:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Mar 10 19:58:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2701ac047e52e257d3db4de32722fe81f440cba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:54:49:71:95:8c:5a:f1:95:c2:d9:15:31:
7a:e1:2f:b1:a7:02:9b:ed:ad:0a:2f:e7:c2:31:c5:
43:cb:3d:2d:91:1d:7f:1f:d8:b0:a8:8b:9b:23:3e:
18:19:97:37:f6:d2:b4:35:0e:ac:c7:8f:2c:11:16:
8e:b0:2c:25:5b:9e:31:1a:17:1a:9d:b4:a8:45:1e:
18:b6:c9:d1:84:67:1b:ab:42:6d:53:b2:a3:f1:c0:
74:bf:9e:d0:b0:5e:92:15:3d:c0:d8:8b:09:9b:60:
3d:01:67:07:82:31:54:f2:bf:75:d7:65:66:af:99:
8e:59:0e:89:f4:47:2e:97:3c:57:49:3a:f5:21:a9:
e4:16:a6:13:97:5e:56:d6:1e:26:e8:a3:07:f9:0a:
2c:2d:18:f4:35:64:ec:90:9c:37:b8:9f:f6:12:02:
6d:9f:57:4a:41:0b:39:ff:0b:9f:8b:de:5a:d0:b9:
fc:81:5b:6a:30:0c:45:8e:06:5d:7f:c6:31:2c:23:
b2:d6:10:06:c7:9c:a7:5c:fe:a9:a1:7b:83:a3:4d:
4c:6f:47:79:83:fb:85:0d:db:e0:e2:fe:80:be:23:
86:91:47:a9:e6:07:6a:1a:ad:40:3e:73:28:7c:aa:
00:50:b5:00:36:37:9c:3c:08:17:9c:92:90:16:f7:
28:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:01:AC:04:7E:52:E2:57:D3:DB:4D:E3:27:22:FE:81:F4:40:CB:A6
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/JwGsBH5S4lfT203jJyL-gfRAy6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.180.0/24
91.204.182.0/23
91.218.176.0/22
91.232.8.0/22
Signature Algorithm: sha256WithRSAEncryption
47:bc:3a:d5:40:37:c3:07:33:c4:ca:17:e7:69:32:54:77:dc:
93:5c:8e:66:df:28:99:10:55:83:2b:29:eb:46:0b:bc:45:70:
07:f8:3a:fc:1a:f2:c5:ad:27:fd:dd:21:be:39:29:de:0c:9f:
95:7d:71:0d:ad:a3:84:fa:5c:df:9a:45:86:f9:0d:9e:9e:f5:
f5:4c:c2:f8:6f:7d:00:5e:48:ea:17:d3:d8:e2:ac:bc:ec:e2:
f3:ca:77:fe:0c:55:65:e8:97:5a:4f:48:30:cf:c6:e9:d5:5f:
f1:d1:07:4b:65:d0:f1:73:7a:86:28:1c:54:7d:e1:c4:d5:c0:
f1:57:ff:a1:c6:49:cf:07:ff:00:c3:77:02:2a:16:47:b8:07:
b7:bd:cb:53:1c:05:39:ee:c4:32:e3:52:e3:6b:64:a6:5c:27:
ba:3c:9e:1c:d1:6c:5b:73:40:9b:ba:44:41:25:0e:5f:30:12:
da:ef:89:1d:09:a3:1c:3c:14:c2:39:da:9b:72:fe:00:eb:37:
4e:21:1e:2d:1b:7e:be:b4:e0:e8:4a:9f:f3:a1:a1:88:86:40:
e8:f5:ba:49:8d:07:41:5c:5d:03:a1:8b:ab:dd:3c:10:9a:c1:
e6:bd:87:d2:c4:56:0d:a0:04:38:b2:82:c7:cd:9e:79:ca:43:
39:a2:10:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:03 2024 by rpki-client on console-ams.rpki-client.org