Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/6jJP8SQs_1NTOIHup33GPRUmWU0.roa
File: 6jJP8SQs_1NTOIHup33GPRUmWU0.roa (raw, json)
Hash identifier: YA1uoWvQejEFTs8WAoG+nXDpELv01bLAl8V4MVu5J+8=
Subject key identifier: EA:32:4F:F1:24:2C:FF:53:53:38:81:EE:A7:7D:C6:3D:15:26:59:4D
Certificate issuer: /CN=053f8469ec62520987896d8926c17228a7bcfb3d
Certificate serial: 018CC72608BF46B23F0635FBA2DC8AE9AEED
Authority key identifier: 05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/6jJP8SQs_1NTOIHup33GPRUmWU0.roa
Signing time: Mon 01 Jan 2024 22:30:07 +0000
ROA not before: Mon 01 Jan 2024 22:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197015
IP address blocks: 91.207.218.0/24 maxlen: 24
91.207.219.0/24 maxlen: 24
91.221.6.0/23 maxlen: 23
91.219.140.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 05 Apr 2024 10:44:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:08:bf:46:b2:3f:06:35:fb:a2:dc:8a:e9:ae:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053f8469ec62520987896d8926c17228a7bcfb3d
Validity
Not Before: Jan 1 22:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea324ff1242cff53533881eea77dc63d1526594d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:44:3c:de:bd:13:c7:8a:86:72:7b:da:61:
07:32:3b:25:d8:7f:fc:05:92:3b:a4:62:a6:0c:2e:
54:e0:d1:48:16:a6:29:2d:0c:fb:46:99:f5:3b:a1:
33:6f:d5:1c:9e:20:01:28:f6:97:14:7a:99:9f:a7:
db:94:c7:47:ed:4d:03:eb:89:8b:66:19:8e:53:b5:
c2:cf:80:65:7d:f7:cf:10:eb:8f:6b:7b:61:a4:0e:
82:93:33:b8:cb:25:13:83:e3:2c:12:b0:6f:0e:e6:
1b:a1:12:f5:af:a8:57:9d:9c:b5:3d:36:3c:34:ac:
9f:2a:e9:b2:4e:1c:ab:1c:4d:50:53:ef:dd:3b:bf:
38:a1:42:f0:76:26:49:24:0c:b8:3e:5f:1b:f3:81:
bb:3b:66:8f:9b:80:82:1c:59:6d:32:76:03:e6:d1:
fe:19:85:3a:fe:14:2b:a8:69:30:47:05:88:ff:11:
49:09:31:a7:8d:ce:68:a4:61:3d:0d:3e:e0:9e:a9:
6f:9c:55:a9:70:57:34:cf:73:85:a9:e8:5b:39:76:
00:06:5a:fe:e8:54:b2:71:17:25:dd:19:23:1f:d7:
b0:94:57:e9:aa:4d:cd:16:0c:35:bf:6b:8f:d7:09:
7e:39:23:f5:06:a3:f1:1e:3d:a4:8c:32:59:31:26:
4c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:32:4F:F1:24:2C:FF:53:53:38:81:EE:A7:7D:C6:3D:15:26:59:4D
X509v3 Authority Key Identifier:
keyid:05:3F:84:69:EC:62:52:09:87:89:6D:89:26:C1:72:28:A7:BC:FB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT-EaexiUgmHiW2JJsFyKKe8-z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/6jJP8SQs_1NTOIHup33GPRUmWU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/fad672-e93a-4dd5-8893-efc175029740/1/BT-EaexiUgmHiW2JJsFyKKe8-z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.218.0/23
91.219.140.0/22
91.221.6.0/23
Signature Algorithm: sha256WithRSAEncryption
88:b8:30:5a:9f:48:31:84:c9:3c:46:86:63:bf:fb:a3:a3:36:
fc:08:df:a6:01:c3:8f:ff:d8:00:68:05:e7:12:04:50:99:c9:
d1:7e:52:d0:c4:84:28:79:38:44:85:51:20:e2:43:7c:47:9c:
5d:f5:b5:6e:f6:9e:91:fb:c7:44:aa:5c:76:5a:7f:03:ff:0d:
cf:d5:1f:40:43:0f:2a:e2:48:56:ce:7f:37:15:98:91:f0:06:
9b:0c:ed:98:6c:7c:91:9e:b3:e8:65:13:df:ea:b4:03:0f:6f:
f2:f2:9a:76:c4:9f:c1:e1:de:0c:db:ae:cc:9b:6e:e5:17:79:
9e:38:53:d6:e3:0d:77:cb:38:50:92:f6:d4:6b:60:dc:df:94:
79:59:a6:55:0b:92:00:05:ce:5d:fe:94:75:01:6c:e5:67:51:
f2:8c:6b:d8:b3:12:bf:74:cd:ac:cf:70:95:2a:50:92:e4:a2:
eb:5a:6e:50:d9:db:60:40:64:c5:0a:19:6e:ab:8d:2a:f6:31:
e8:bd:8b:e4:b5:71:2d:d7:07:2f:97:db:05:3f:d4:b3:c2:cf:
c7:ee:e5:66:b8:e2:6f:f8:04:10:d2:e3:86:ca:ba:77:47:62:
f0:e9:34:a7:11:7f:f0:e3:67:5e:64:02:56:2a:64:38:78:25:
f7:10:b8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 5 15:50:53 2024 by rpki-client on console-ams.rpki-client.org