Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/J9Q9gMt_VTmK_V4bEEPWExH5_bI.roa
File: J9Q9gMt_VTmK_V4bEEPWExH5_bI.roa (raw, json)
Hash identifier: r5fnsne9zeN4dRKzLTa+SSfsuTC8j/aIc9pr2p+Qr5o=
Subject key identifier: 27:D4:3D:80:CB:7F:55:39:8A:FD:5E:1B:10:43:D6:13:11:F9:FD:B2
Certificate issuer: /CN=6b8408befc02dfd6e61908548785a008a4b74d67
Certificate serial: 01856F9DDDA2524C0E5B118394C72F5D163D
Authority key identifier: 6B:84:08:BE:FC:02:DF:D6:E6:19:08:54:87:85:A0:08:A4:B7:4D:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4QIvvwC39bmGQhUh4WgCKS3TWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/J9Q9gMt_VTmK_V4bEEPWExH5_bI.roa
Signing time: Sun 01 Jan 2023 23:14:54 +0000
ROA not before: Sun 01 Jan 2023 23:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44622
IP address blocks: 85.202.224.0/21 maxlen: 21
85.202.224.0/20 maxlen: 20
85.202.232.0/21 maxlen: 21
91.209.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:dd:a2:52:4c:0e:5b:11:83:94:c7:2f:5d:16:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b8408befc02dfd6e61908548785a008a4b74d67
Validity
Not Before: Jan 1 23:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27d43d80cb7f55398afd5e1b1043d61311f9fdb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3c:6e:9b:0a:a2:de:1d:b0:e8:9f:f8:44:00:
fa:5b:6c:63:54:e5:2d:bc:af:bb:a2:42:18:f2:db:
8b:14:bb:a2:57:e4:94:03:98:75:95:1c:07:e3:33:
71:b9:73:b7:55:f8:7e:12:77:78:cd:b8:96:eb:8e:
ed:17:1a:c4:e5:15:73:55:5a:14:b2:da:77:9f:2d:
4c:99:95:66:2f:5b:8d:40:ff:2c:ce:de:d3:95:99:
37:95:ef:33:48:4f:1c:5a:50:95:87:fc:5c:0f:a3:
fd:be:bc:bd:e8:29:55:78:10:a7:9e:de:38:8c:86:
03:19:e9:30:5e:be:18:ed:51:83:8f:9f:0a:54:81:
83:2c:da:61:e7:e8:7f:9a:8a:df:ab:f9:07:32:3e:
a9:c4:8d:43:4e:57:dc:a3:d9:62:30:65:32:75:fb:
7f:ea:1a:b5:4e:2e:7d:4c:47:60:ba:27:b4:36:0d:
9d:9c:6c:5d:06:db:bb:51:87:df:7f:f7:d6:f2:aa:
73:3d:a9:af:b7:3a:51:ef:1b:90:28:b4:11:97:4d:
9d:93:bf:26:8c:0f:0f:88:25:bf:e7:8c:f4:1b:36:
70:88:cd:b9:f4:be:5a:ad:38:6d:56:53:0b:2b:df:
5d:71:c1:2f:17:03:d7:4a:5e:c8:e7:89:45:72:7f:
db:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D4:3D:80:CB:7F:55:39:8A:FD:5E:1B:10:43:D6:13:11:F9:FD:B2
X509v3 Authority Key Identifier:
keyid:6B:84:08:BE:FC:02:DF:D6:E6:19:08:54:87:85:A0:08:A4:B7:4D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4QIvvwC39bmGQhUh4WgCKS3TWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/J9Q9gMt_VTmK_V4bEEPWExH5_bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.224.0/20
91.209.218.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:b5:92:a6:17:bd:40:2a:74:14:d1:1e:e6:f7:e6:98:ef:59:
7a:0a:82:8e:19:f1:3e:f7:67:b2:37:5c:2a:9f:d3:c6:b0:06:
22:3d:c4:81:26:ee:4d:88:c1:1e:bf:14:3f:8d:e6:10:a3:fa:
d2:e0:30:7a:d9:d0:63:99:af:3b:ca:22:0e:2e:f2:87:b5:3f:
7e:e4:f8:a6:ad:2c:c8:f5:fa:e7:8e:35:71:53:b3:58:65:33:
37:a2:11:f8:16:d4:36:c5:03:54:7d:87:a7:2c:ed:f1:5f:42:
05:a3:2d:1b:8d:a1:f5:72:3d:e5:3f:72:d0:36:b7:d2:b2:7a:
56:c8:1e:cd:ce:81:6c:fd:f5:e2:b1:15:15:96:bf:42:d6:20:
30:0a:d8:f1:64:86:07:19:2e:ca:40:9b:a8:81:35:d9:89:6a:
db:65:75:e1:f3:69:94:7d:2a:7a:06:c2:41:8a:f4:76:e2:c5:
47:f1:ad:0f:71:43:f1:10:bd:76:a5:39:87:fb:97:73:7e:64:
26:95:4e:73:75:8b:4d:6c:f3:1a:ed:a8:85:c7:31:ec:37:0e:
d7:56:27:4a:2c:1c:cc:c5:c7:5a:b5:9a:96:bb:4f:1a:35:81:
62:ee:23:7f:67:10:8b:a2:69:b7:bd:69:65:2a:46:f8:18:b1:
8f:d7:5a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:24 2024 by rpki-client on console-ams.rpki-client.org