Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/J4OGeawKAiLXG-O6ymJXODJI2D8.roa
File: J4OGeawKAiLXG-O6ymJXODJI2D8.roa (raw, json)
Hash identifier: vjCWZy92wbKZ3lwBgebdLBOanzn29daZxBrmLm+0lYM=
Subject key identifier: 27:83:86:79:AC:0A:02:22:D7:1B:E3:BA:CA:62:57:38:32:48:D8:3F
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 0188E2464950CEFF523270FA970544165ABF
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/J4OGeawKAiLXG-O6ymJXODJI2D8.roa
Signing time: Thu 22 Jun 2023 08:43:57 +0000
ROA not before: Thu 22 Jun 2023 08:43:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 91.190.184.0/24 maxlen: 24
91.190.186.0/24 maxlen: 24
91.190.191.0/24 maxlen: 24
91.190.187.0/24 maxlen: 24
91.190.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jul 2023 12:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e2:46:49:50:ce:ff:52:32:70:fa:97:05:44:16:5a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jun 22 08:43:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27838679ac0a0222d71be3baca6257383248d83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:d9:07:0a:6c:86:59:9c:c2:7d:a2:22:3c:
74:cd:86:63:a3:fc:88:81:82:b8:39:52:aa:09:51:
cd:91:fd:84:40:aa:ac:26:b0:90:11:30:ac:34:5d:
66:cd:a8:5c:00:1b:e0:03:f3:39:2f:b3:50:ef:77:
0c:75:a6:27:9e:8d:cf:6c:7a:7f:27:1d:87:3e:fc:
21:03:b2:ce:d9:99:d8:2b:ab:84:f9:89:b5:6f:56:
0e:b9:4c:11:6c:62:50:7d:57:17:0e:ba:30:0b:31:
c7:ca:36:18:c7:eb:ab:06:9e:07:08:34:94:47:53:
3e:a3:55:db:44:49:0d:ed:83:d1:7d:5e:12:b1:bd:
4d:d4:02:e6:96:4e:6a:11:bc:c7:7d:e5:f9:dd:5d:
44:46:0e:fb:f8:23:76:49:b2:6b:e6:48:c9:7a:1b:
78:77:4c:66:c6:72:e4:6c:ee:54:59:1d:4d:c1:a3:
02:00:a6:b7:be:a5:1e:3d:a7:54:e7:1a:82:1f:1a:
1f:c2:8c:e1:b4:ec:8a:f4:ed:d9:1d:21:98:9d:0e:
f3:b6:f3:47:be:6e:8b:1e:9a:6b:0a:e3:e5:3f:69:
0d:3e:80:d0:11:6d:ce:9a:30:2c:aa:91:72:99:9b:
41:15:ab:fc:67:13:b3:86:fb:2e:52:ab:97:3e:32:
59:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:83:86:79:AC:0A:02:22:D7:1B:E3:BA:CA:62:57:38:32:48:D8:3F
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/J4OGeawKAiLXG-O6ymJXODJI2D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.184.0/24
91.190.186.0/23
91.190.189.0/24
91.190.191.0/24
Signature Algorithm: sha256WithRSAEncryption
66:67:dd:97:36:a9:74:be:0f:b3:57:94:fc:2a:1e:6e:93:10:
39:6e:87:13:b2:0b:49:da:ba:a8:74:fd:01:56:26:40:97:f5:
e6:12:ad:60:60:58:01:9b:fb:31:3e:9c:bc:73:5a:b5:92:8c:
b8:4b:29:17:9d:59:92:e2:4d:e5:03:39:85:c7:46:44:87:f5:
80:a8:a1:a1:90:f4:9e:88:37:dc:9e:72:7b:31:f9:4b:ea:7d:
9d:36:4d:76:db:35:ec:d7:3e:1f:d3:f4:6f:c4:d1:7e:0b:c5:
36:25:77:b7:24:02:15:08:6f:1c:39:a0:9a:65:46:c2:c0:27:
85:9d:85:56:62:ec:5d:81:d6:49:50:b1:66:cc:15:c8:0a:77:
7d:fc:ac:9a:9f:aa:cc:f6:5f:b6:a2:d8:46:d0:e6:67:58:90:
6d:e8:7c:26:cb:bf:f8:e9:bc:eb:a5:5d:d0:60:9a:2b:c0:a8:
32:14:c3:34:74:3f:84:7f:1d:f0:b1:b3:3e:b8:52:78:52:2e:
22:f3:6c:a9:b3:5c:31:30:98:7b:54:d9:78:20:98:69:66:72:
63:cd:af:c3:c2:5c:b6:21:cc:d8:e1:3b:76:21:11:54:5e:9d:
d7:d9:ed:1a:d1:cc:f9:63:4f:b5:c6:df:1a:66:02:b4:cd:cd:
15:52:51:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:21 2024 by rpki-client on console-fra.rpki-client.org