Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/JRrHjjYCwWmqkDX5lbu_nyGw7Xw.roa
File: JRrHjjYCwWmqkDX5lbu_nyGw7Xw.roa (raw, json)
Hash identifier: am/9GSK+ATusviUmgQv7gxcML5wwBj+iSV6FOXPFYpo=
Subject key identifier: 25:1A:C7:8E:36:02:C1:69:AA:90:35:F9:95:BB:BF:9F:21:B0:ED:7C
Certificate issuer: /CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Certificate serial: 018EB20372682BA6FCD65092F541F3168D64
Authority key identifier: EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/JRrHjjYCwWmqkDX5lbu_nyGw7Xw.roa
Signing time: Sat 06 Apr 2024 06:05:54 +0000
ROA not before: Sat 06 Apr 2024 06:05:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201584
IP address blocks: 91.108.188.0/24 maxlen: 24
185.199.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jun 2024 08:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b2:03:72:68:2b:a6:fc:d6:50:92:f5:41:f3:16:8d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Validity
Not Before: Apr 6 06:05:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=251ac78e3602c169aa9035f995bbbf9f21b0ed7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c8:24:c9:a8:d0:84:d9:0a:00:fb:96:c5:df:
27:c2:0e:f2:25:81:c0:20:ea:e2:c2:6d:13:32:3a:
ab:f7:66:c5:1b:40:30:75:ad:49:dd:f7:0d:bb:09:
28:4b:19:77:a4:a4:56:d6:1a:9e:90:9a:f5:2f:f6:
d9:09:48:6e:bf:3f:9c:f3:c7:99:c9:7a:1f:53:ed:
09:68:ee:17:25:16:a5:6d:52:5c:30:db:03:c0:94:
0b:20:32:99:41:26:36:b5:cc:7b:e2:95:25:61:9d:
c0:c1:a7:ae:61:bb:e2:af:89:86:4f:b9:c5:81:61:
ab:85:ba:8c:69:a2:44:ba:70:01:e1:84:d8:24:71:
a4:04:a9:8b:64:7d:5c:e3:cd:0a:eb:3d:84:cb:c1:
f5:60:96:45:47:eb:24:c2:a7:f1:f7:5b:b9:9e:0f:
a6:e8:9b:02:41:89:de:c7:d4:ff:2e:c7:fb:c7:87:
5b:61:ce:d9:34:94:a9:7a:52:38:f0:9d:79:fe:d9:
b1:0f:d4:26:bb:49:aa:d3:8a:9b:5c:2a:e8:31:d8:
88:02:ee:ea:59:25:30:8c:2f:06:49:f0:99:23:a5:
86:68:ef:c1:a2:8d:a7:d4:7e:d3:9e:90:4a:4a:21:
8a:61:07:47:66:f4:04:ba:c1:7b:fc:d5:ae:75:8b:
9b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1A:C7:8E:36:02:C1:69:AA:90:35:F9:95:BB:BF:9F:21:B0:ED:7C
X509v3 Authority Key Identifier:
keyid:EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/JRrHjjYCwWmqkDX5lbu_nyGw7Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.188.0/24
185.199.209.0/24
Signature Algorithm: sha256WithRSAEncryption
50:3e:6e:0c:a1:99:78:f3:b5:68:5e:f5:40:0e:3f:9d:b8:d0:
13:75:d9:7e:78:d7:5e:95:e0:a0:6a:4b:97:18:3c:4f:24:52:
85:db:fa:95:55:10:5d:e3:ce:e1:53:1d:77:0b:90:95:10:35:
ec:26:df:75:40:a8:0b:d9:19:58:02:56:03:05:6a:d5:53:2d:
4d:7d:92:73:15:c4:d4:2e:c0:34:d3:1d:19:ef:ce:e5:0b:e7:
f0:26:ea:36:55:95:f8:bd:ac:75:5e:f4:5d:37:f6:8c:5d:84:
cd:74:c9:22:24:d8:71:6e:8b:a7:a6:b4:63:d6:0d:ec:88:97:
5b:82:62:fe:45:2f:c2:50:cb:ad:3c:4f:9d:10:c3:0e:20:c5:
53:83:f7:d9:98:34:f6:f2:52:8a:d0:ad:29:d3:84:93:67:7c:
59:7b:08:e3:84:93:57:8e:8a:b5:e8:0a:2b:81:26:e1:c3:a5:
fc:3c:ef:7f:81:f5:d1:3e:d2:23:1c:4e:e1:71:76:04:2f:e6:
4a:40:7a:3b:9d:06:6a:1f:ca:2a:22:e8:cf:8e:f2:36:5c:d3:
55:56:30:b3:e6:f3:f7:04:f0:9a:7d:d9:30:6a:6f:47:dd:43:
b1:15:56:7e:b5:45:7b:82:d9:87:07:15:3b:c4:bf:6c:63:d2:
95:ad:ee:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 12:08:06 2024 by rpki-client on console-fra.rpki-client.org