Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/JgQX1MlL8sDk8Ky6242t3K5vdUQ.roa
File: JgQX1MlL8sDk8Ky6242t3K5vdUQ.roa (raw, json)
Hash identifier: 3aw74KravrSK/1wiKGCX1CK/iHUiJjHc+DfAAdhVJ+U=
Subject key identifier: 26:04:17:D4:C9:4B:F2:C0:E4:F0:AC:BA:DB:8D:AD:DC:AE:6F:75:44
Certificate issuer: /CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Certificate serial: 018570429C903ADBA3BE5485B2E225539F59
Authority key identifier: 9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/JgQX1MlL8sDk8Ky6242t3K5vdUQ.roa
Signing time: Mon 02 Jan 2023 02:14:51 +0000
ROA not before: Mon 02 Jan 2023 02:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48906
IP address blocks: 91.212.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:9c:90:3a:db:a3:be:54:85:b2:e2:25:53:9f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Validity
Not Before: Jan 2 02:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=260417d4c94bf2c0e4f0acbadb8daddcae6f7544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:52:bb:a8:e6:81:c3:30:dd:7f:cf:86:6b:1e:
af:01:0f:b6:24:da:e2:76:30:f1:4d:62:2c:ee:f3:
de:6e:f9:ff:64:b6:c0:06:49:aa:7a:3b:30:c6:fc:
13:bb:93:c6:a4:9f:b6:9a:9c:c6:4d:2f:25:1a:97:
ef:1d:02:2c:55:5a:2c:74:e7:72:85:0b:23:a2:18:
f1:12:93:62:1c:2e:16:a4:5c:98:8a:02:ee:40:3c:
46:66:49:85:6e:a0:57:e1:da:4c:11:cd:14:ea:1d:
0f:26:8a:80:21:4e:c4:2c:76:81:b1:e0:f8:88:54:
30:9d:10:a0:32:e9:00:2d:d2:ac:2c:97:72:6f:a7:
7c:d7:f4:2b:94:76:fc:81:37:3e:98:bb:73:be:8b:
49:01:1f:8d:f4:9a:b6:83:9e:54:2c:e3:4f:74:17:
04:d9:9e:e8:bf:74:d2:f9:10:64:44:49:05:9c:0c:
45:d9:51:a0:e0:7b:c2:f6:40:b4:4c:2e:65:82:66:
c3:81:86:c0:1f:f4:61:bd:cd:86:7f:e8:53:e1:10:
f2:71:ac:52:89:9f:7e:83:a5:1d:6d:b2:18:e5:4b:
cb:34:a6:35:9c:a3:0b:38:33:98:0c:f9:a7:05:42:
fd:9a:57:5b:79:e9:e3:b4:f7:77:b2:45:b1:18:29:
5e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:04:17:D4:C9:4B:F2:C0:E4:F0:AC:BA:DB:8D:AD:DC:AE:6F:75:44
X509v3 Authority Key Identifier:
keyid:9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/JgQX1MlL8sDk8Ky6242t3K5vdUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.46.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:23:95:13:a9:7a:e9:8f:a2:ff:26:e9:a9:a8:12:b6:71:98:
4f:cc:38:62:f8:cf:aa:9b:1d:2b:9a:1e:50:38:59:44:9d:0a:
01:c9:6d:29:98:ce:9e:b6:6c:b3:ba:f7:81:60:c4:50:0b:13:
18:b3:f3:1b:b5:e4:28:7c:ad:55:9b:22:3d:15:bb:c7:e7:0e:
ee:5d:d0:81:9a:1e:29:b4:b3:40:30:01:35:2a:48:07:0c:b2:
ab:5c:c7:07:c4:e3:02:38:1f:06:7c:ee:01:ec:39:3d:1e:3c:
3c:2b:00:f3:76:c9:36:86:80:a3:c1:5e:33:2f:85:89:fb:5f:
28:23:e7:0a:80:56:32:d4:0f:f5:b4:7d:57:ad:2f:a1:a4:39:
6b:c8:db:1b:be:f3:2d:59:27:5b:a3:46:7b:36:d8:ba:13:0d:
42:0f:15:56:18:b7:a2:6c:41:21:0b:6d:0c:d9:cf:f1:23:19:
de:6f:58:f8:e1:ed:4b:41:ed:1c:12:d5:7e:08:e2:8a:e7:99:
44:41:c2:4c:20:c6:a9:07:29:99:44:b6:9c:c4:18:a2:cc:8e:
a1:0d:a4:83:64:6a:8a:1e:90:82:90:15:0b:45:54:66:fd:b1:
e3:35:7c:8a:8a:e4:cf:bd:3f:6d:42:75:0f:2f:98:a2:1f:45:
70:83:80:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwQpyQOtujvlSFsuIlU59ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNzJlM2EwY2Q3NDkwMDUzNWI2YTZmOGZmYzY1N2Q5M2Ew
OTA3YTYwHhcNMjMwMTAyMDIxNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjA0MTdkNGM5NGJmMmMwZTRmMGFjYmFkYjhkYWRkY2FlNmY3NTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVK7qOaBwzDdf8+Gax6vAQ+2JNri
djDxTWIs7vPebvn/ZLbABkmqejswxvwTu5PGpJ+2mpzGTS8lGpfvHQIsVVosdOdy
hQsjohjxEpNiHC4WpFyYigLuQDxGZkmFbqBX4dpMEc0U6h0PJoqAIU7ELHaBseD4
iFQwnRCgMukALdKsLJdyb6d81/QrlHb8gTc+mLtzvotJAR+N9Jq2g55ULONPdBcE
2Z7ov3TS+RBkREkFnAxF2VGg4HvC9kC0TC5lgmbDgYbAH/Rhvc2Gf+hT4RDycaxS
iZ9+g6UdbbIY5UvLNKY1nKMLODOYDPmnBUL9mldbeenjtPd3skWxGCle5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCYEF9TJS/LA5PCsutuNrdyub3VEMB8GA1UdIwQY
MBaAFJ9y46DNdJAFNbam+P/GV9k6CQemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjNMam9NMTBrQVUxdHFiNF84WlgyVG9KQjZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy82NDQ1MDEtOWQ0Mi00ODE2LTg5Yzkt
MTBhY2EzMzEzMzg3LzEvSmdRWDFNbEw4c0RrOEt5NjI0MnQzSzV2ZFVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy82NDQ1MDEtOWQ0Mi00ODE2LTg5YzktMTBhY2EzMzEzMzg3
LzEvbjNMam9NMTBrQVUxdHFiNF84WlgyVG9KQjZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9QuMA0G
CSqGSIb3DQEBCwUAA4IBAQCxI5UTqXrpj6L/JumpqBK2cZhPzDhi+M+qmx0rmh5Q
OFlEnQoByW0pmM6etmyzuveBYMRQCxMYs/MbteQofK1VmyI9FbvH5w7uXdCBmh4p
tLNAMAE1KkgHDLKrXMcHxOMCOB8GfO4B7Dk9Hjw8KwDzdsk2hoCjwV4zL4WJ+18o
I+cKgFYy1A/1tH1XrS+hpDlryNsbvvMtWSdbo0Z7Nti6Ew1CDxVWGLeibEEhC20M
2c/xIxneb1j44e1LQe0cEtV+COKK55lEQcJMIMapBymZRLacxBiizI6hDaSDZGqK
HpCCkBULRVRm/bHjNXyKiuTPvT9tQnUPL5iiH0Vwg4Cl
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:05 2024 by rpki-client on console-ams.rpki-client.org