Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/jzi0ytNRT7bfgVSkYUF64kXhtzg.roa
File: jzi0ytNRT7bfgVSkYUF64kXhtzg.roa (raw, json)
Hash identifier: 0P1kBijXtjPAuLyCY2W70I91DlK1Q3LHJL/3n4bBPdU=
Subject key identifier: 8F:38:B4:CA:D3:51:4F:B6:DF:81:54:A4:61:41:7A:E2:45:E1:B7:38
Certificate issuer: /CN=2edc5783725d59501962aa2cb5b590c42b57df5e
Certificate serial: 018CC9BBE9BA298F7D4C8CC46669F5214DD1
Authority key identifier: 2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/jzi0ytNRT7bfgVSkYUF64kXhtzg.roa
Signing time: Tue 02 Jan 2024 10:33:04 +0000
ROA not before: Tue 02 Jan 2024 10:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41360
IP address blocks: 91.217.67.0/24 maxlen: 24
91.217.66.0/24 maxlen: 24
91.217.66.0/23 maxlen: 23
91.192.44.0/22 maxlen: 22
91.192.44.0/23 maxlen: 23
91.192.44.0/24 maxlen: 24
91.192.46.0/24 maxlen: 24
91.192.46.0/23 maxlen: 23
91.192.45.0/24 maxlen: 24
91.192.47.0/24 maxlen: 24
194.9.15.0/24 maxlen: 24
194.9.14.0/23 maxlen: 23
194.9.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jul 2024 10:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:e9:ba:29:8f:7d:4c:8c:c4:66:69:f5:21:4d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edc5783725d59501962aa2cb5b590c42b57df5e
Validity
Not Before: Jan 2 10:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f38b4cad3514fb6df8154a461417ae245e1b738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2b:f7:27:fd:01:7a:30:9b:6e:83:2b:6a:09:
a9:1b:16:0c:fe:74:69:54:06:c7:1f:95:0e:87:c6:
56:d2:8e:47:25:4a:da:c6:74:d7:92:ab:36:af:41:
a7:36:84:a8:b8:23:82:fb:c2:8d:74:0a:cb:3d:65:
10:b6:63:aa:f1:cc:71:3e:9f:c5:e4:99:bd:ce:c2:
0b:1c:ae:43:11:7f:0e:5b:61:75:7b:b7:b8:5c:1b:
35:4a:f0:a9:b6:c1:27:cf:12:53:0a:7d:80:f5:4c:
ea:d6:1d:d2:14:1a:fe:bd:b0:b5:7e:ca:fe:ab:76:
63:a5:ee:a3:99:cd:19:26:a7:ff:f5:15:55:8f:d6:
a7:14:3e:3e:9c:df:9e:50:81:a9:e7:bf:43:4a:d0:
c6:40:2d:14:89:e9:0d:d9:2a:36:de:86:d7:15:f6:
23:04:dc:2d:4e:c7:5a:49:62:df:26:86:dc:43:d3:
c7:93:33:18:b6:19:f9:10:12:5f:e2:3c:6b:3c:39:
53:96:c7:ea:d5:ab:aa:0b:1a:d1:e5:b8:b8:76:c7:
ba:f3:8f:16:fa:9c:e9:32:d5:10:66:f6:f8:f7:87:
5b:9a:17:7c:73:0a:89:65:5f:0d:a1:8e:dc:82:7d:
d0:68:fa:f6:9b:81:70:ca:1c:99:fb:25:87:06:1c:
ae:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:38:B4:CA:D3:51:4F:B6:DF:81:54:A4:61:41:7A:E2:45:E1:B7:38
X509v3 Authority Key Identifier:
keyid:2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/jzi0ytNRT7bfgVSkYUF64kXhtzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.44.0/22
91.217.66.0/23
194.9.14.0/23
Signature Algorithm: sha256WithRSAEncryption
83:d6:c5:ca:da:b8:2e:6e:38:b3:e9:86:6c:6e:4d:7c:4d:bf:
3b:a2:7e:8c:17:0e:6b:be:76:bf:2f:77:f2:16:00:82:e2:6c:
38:6c:a8:0a:31:ad:e5:f8:b6:55:ee:fa:15:e3:ea:0a:63:c8:
14:a0:e3:73:aa:b4:3a:61:30:a3:9c:d2:dc:55:df:29:d4:82:
fe:f1:ad:e4:c0:14:6c:8f:64:13:1c:e6:ad:37:25:8f:7c:57:
1e:79:3b:c5:24:f5:3c:f3:4c:a8:a8:b8:b3:4b:a1:96:20:09:
2a:6f:29:b8:62:6e:ca:69:7e:9b:e1:a6:79:aa:ea:5e:74:3f:
9f:16:12:cb:d5:b3:85:64:71:81:72:b4:2b:80:57:3b:2c:71:
a4:37:23:41:2f:a7:b8:c5:8a:c7:78:9f:56:1f:be:1e:7e:b8:
81:02:9c:e0:01:59:6d:a0:71:3b:86:b4:bf:27:57:27:57:93:
72:df:a3:e1:3f:23:98:0a:34:ff:ef:d7:63:0b:9c:9b:45:bf:
b3:b9:ea:4e:88:50:fd:fd:8b:4b:dc:d9:bd:4b:1c:86:4d:4f:
08:19:1d:dc:52:66:48:54:31:d7:6d:5f:f0:9d:78:13:7d:bd:
52:99:8c:62:96:b6:2a:b5:b7:a8:b7:1a:36:27:94:3c:6e:60:
39:27:7b:c4
-----BEGIN CERTIFICATE-----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 at Mon Jul 8 12:53:41 2024 by rpki-client on console-fra.rpki-client.org