Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/JrFDlUnF8-HwJb8IUrxZa_n7sag.roa
File: JrFDlUnF8-HwJb8IUrxZa_n7sag.roa (raw, json)
Hash identifier: 5yciofOFzqFJrYc7sAbJj55Q+kkD1mUkrieyePWBKBw=
Subject key identifier: 26:B1:43:95:49:C5:F3:E1:F0:25:BF:08:52:BC:59:6B:F9:FB:B1:A8
Certificate issuer: /CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Certificate serial: 01856CF82F597CCBEEA2CF124066DEF6C49E
Authority key identifier: B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/JrFDlUnF8-HwJb8IUrxZa_n7sag.roa
Signing time: Sun 01 Jan 2023 10:54:42 +0000
ROA not before: Sun 01 Jan 2023 10:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51094
IP address blocks: 91.216.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:2f:59:7c:cb:ee:a2:cf:12:40:66:de:f6:c4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Validity
Not Before: Jan 1 10:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26b1439549c5f3e1f025bf0852bc596bf9fbb1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:3f:85:87:92:77:25:ea:d7:9b:09:85:0a:
d6:ef:91:b3:7e:01:97:f0:d5:af:fb:b8:18:fc:ae:
d0:b7:d9:bb:ef:77:67:7f:3f:3d:de:85:2d:e9:28:
3b:36:0c:1d:d4:05:d0:f0:0b:56:61:8e:9f:7e:94:
85:33:45:4c:b0:44:08:ea:6f:7c:6a:27:eb:28:0d:
23:31:dc:e2:29:7c:09:ee:40:0d:8a:5b:97:0a:e2:
ae:34:de:cf:de:4b:d1:26:a1:56:5b:fd:fe:a8:22:
38:19:bd:68:77:d3:ad:66:bd:14:07:e7:70:1b:0b:
b3:ed:c8:d4:db:6c:53:b6:3d:da:c5:e4:e9:6a:3c:
7f:ff:a3:02:de:77:8a:c1:3c:53:2a:76:f1:63:b7:
05:0b:3e:0a:14:50:20:22:ef:a9:4a:09:51:2b:72:
ec:5f:5d:cf:7d:93:0c:86:7e:70:bb:a7:9d:f0:51:
78:ad:27:2f:d2:d6:36:d9:98:13:7b:0d:4a:27:f2:
16:ea:24:21:6b:53:db:15:54:d8:8f:96:59:17:b9:
04:bf:ae:c0:b0:ea:c9:5f:c8:61:ee:d1:11:b6:7c:
a4:4e:84:4b:a6:3a:48:43:a9:6e:5a:63:39:a2:eb:
c8:5c:b6:6d:81:e7:ee:ce:c2:63:f6:9b:52:fd:5a:
00:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B1:43:95:49:C5:F3:E1:F0:25:BF:08:52:BC:59:6B:F9:FB:B1:A8
X509v3 Authority Key Identifier:
keyid:B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/JrFDlUnF8-HwJb8IUrxZa_n7sag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.144.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:b8:84:70:a8:71:11:09:8b:2e:80:2a:cb:42:1d:0c:73:85:
21:02:f9:58:a7:0d:8d:4c:58:de:ae:57:54:c3:d2:6e:9c:bf:
a1:b8:2c:09:29:07:e2:cc:78:05:d5:d5:6e:f4:06:27:c1:77:
c6:27:59:db:5b:2b:ec:ae:15:c3:71:03:45:3d:cd:3e:48:a0:
76:2a:a6:53:c5:7b:12:d1:5c:cb:cd:94:6d:0d:bf:b5:2d:ed:
6b:96:4c:1c:36:2f:6f:b3:48:ce:f4:da:47:c7:9c:4e:32:82:
a0:3f:83:79:2c:65:4c:61:19:66:20:ed:09:aa:a8:60:5d:69:
43:97:65:7b:df:2a:c0:70:39:71:20:e7:5a:70:b8:62:6d:ec:
6a:68:5b:e1:77:e5:99:f5:d0:01:22:8c:e2:c0:06:d4:68:f6:
96:56:83:f9:11:5e:81:51:14:29:72:96:b3:eb:0c:c8:ce:ac:
5b:3d:cb:48:a3:d7:9e:82:a9:c8:94:fb:cd:4b:21:3c:31:f7:
0b:2c:79:85:61:b4:1c:c7:af:df:eb:e3:b9:76:f1:c1:60:2c:
35:87:66:a0:d1:70:25:a1:75:2a:5e:66:ec:44:c8:ae:3c:6b:
5b:75:a3:db:dc:c3:c5:29:f3:87:35:4e:59:52:96:dc:fd:5a:
42:c7:24:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:04 2024 by rpki-client on console-ams.rpki-client.org