Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/JaL0M_Ctt2k2Vz2FDMMfiU8avD8.roa
File: JaL0M_Ctt2k2Vz2FDMMfiU8avD8.roa (raw, json)
Hash identifier: NOTuX+uPGyL3w/gdvCJP42o0DZaMd9vfJA6I+AwMZME=
Subject key identifier: 25:A2:F4:33:F0:AD:B7:69:36:57:3D:85:0C:C3:1F:89:4F:1A:BC:3F
Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial: 0185713095671D76522E94D4B7B8EC395B37
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/JaL0M_Ctt2k2Vz2FDMMfiU8avD8.roa
Signing time: Mon 02 Jan 2023 06:34:47 +0000
ROA not before: Mon 02 Jan 2023 06:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21232
IP address blocks: 91.229.80.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:95:67:1d:76:52:2e:94:d4:b7:b8:ec:39:5b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
Validity
Not Before: Jan 2 06:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25a2f433f0adb76936573d850cc31f894f1abc3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c2:d2:0a:2a:db:5a:74:f3:c0:45:bd:31:68:
d1:3c:23:e4:d2:b2:6f:2f:2a:4f:b1:32:e9:ed:02:
96:da:7f:80:be:dd:0e:b1:eb:e4:5d:27:95:9d:6d:
63:fc:e6:14:00:ba:f4:c1:43:60:3c:0b:3b:aa:9e:
43:15:c9:dd:d6:a1:0f:10:cc:97:78:75:80:69:98:
4b:96:05:23:60:02:56:2a:f5:a7:fa:a7:e5:cc:8f:
5b:8f:00:49:b1:36:3d:a7:3a:d4:f8:fa:70:d2:85:
ba:65:ac:23:04:2f:5c:3e:5d:88:48:b8:fd:31:0c:
7b:09:21:ec:c9:3f:98:c5:af:70:0a:88:a1:6c:65:
ce:29:1a:69:d7:83:c0:1a:4f:ac:7a:02:94:7e:8e:
f8:95:ff:e4:15:83:3a:9e:01:4c:cb:89:49:67:49:
9b:30:ef:9c:72:7d:90:9f:56:6e:79:be:d8:2b:98:
ac:36:19:0c:ba:3a:0e:2d:a4:30:76:3b:8f:cb:12:
95:33:55:49:45:ad:dc:e3:3b:b9:57:7b:fc:de:e8:
be:f7:0f:b8:89:2d:b3:84:ea:64:3e:dc:9d:ef:2a:
2f:20:58:2e:01:5c:0e:fd:84:f7:1d:50:94:c9:38:
d8:8e:05:a8:53:49:8a:74:9f:81:1a:6a:7c:17:d8:
6b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A2:F4:33:F0:AD:B7:69:36:57:3D:85:0C:C3:1F:89:4F:1A:BC:3F
X509v3 Authority Key Identifier:
keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/JaL0M_Ctt2k2Vz2FDMMfiU8avD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.80.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:47:0b:6a:7e:32:ed:2a:60:60:26:bf:92:55:d0:da:a4:54:
f1:ee:8e:d4:92:17:69:63:83:ec:fc:b7:5c:ec:76:a2:f8:20:
f2:47:8a:9e:6a:c5:6d:65:4d:8e:8c:75:b4:90:20:e8:60:b1:
63:3b:73:a8:63:c2:4c:40:5f:fe:57:8e:3e:91:2e:8a:fc:a8:
dd:76:59:9a:8e:2a:e1:9e:04:fb:4d:8b:65:c0:11:96:e4:38:
da:08:c0:65:42:4f:a8:51:a9:6e:14:48:66:a9:54:6f:bc:81:
29:4e:61:21:e7:f7:35:b7:c1:0c:35:e1:85:0c:be:93:29:02:
60:75:68:a7:ff:c7:c3:2d:12:bf:13:22:21:08:fc:1c:b9:fe:
03:32:6b:d5:93:b1:96:99:6d:7a:9e:6b:1b:06:76:79:bc:0f:
47:b3:bc:82:08:2f:61:04:b0:12:a9:e2:13:d3:53:ed:d3:ca:
26:a6:6d:d4:c4:ed:39:0a:4f:3a:71:da:96:17:55:9b:c3:d5:
78:f3:68:90:c0:c1:ea:98:9c:55:44:4d:2b:c4:75:89:5a:b2:
5d:96:95:20:df:dd:51:c5:cb:b7:c9:5c:ae:ac:34:41:2e:b1:
a6:2b:2d:d9:97:ac:41:74:ba:5d:4e:3a:7b:93:aa:47:ae:7b:
26:3f:62:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:49 2024 by rpki-client on console-fra.rpki-client.org