Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/JiFRsPWORkac5nVEt-9Rp4v-4q0.roa
File: JiFRsPWORkac5nVEt-9Rp4v-4q0.roa (raw, json)
Hash identifier: LQS3Bo9beaGeTfn17Vy89G+sLhOV7LpQ0fNFlY/5xAg=
Subject key identifier: 26:21:51:B0:F5:8E:46:46:9C:E6:75:44:B7:EF:51:A7:8B:FE:E2:AD
Certificate issuer: /CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Certificate serial: 0187DC98A26E72CE5B5F4A1914FACFEDDD0E
Authority key identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/JiFRsPWORkac5nVEt-9Rp4v-4q0.roa
Signing time: Tue 02 May 2023 13:13:23 +0000
ROA not before: Tue 02 May 2023 13:13:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396998
IP address blocks: 91.207.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Sep 2023 14:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:98:a2:6e:72:ce:5b:5f:4a:19:14:fa:cf:ed:dd:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Validity
Not Before: May 2 13:13:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=262151b0f58e46469ce67544b7ef51a78bfee2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2c:28:bc:70:04:13:40:4e:07:c4:a9:28:c9:
13:fc:14:33:b3:02:71:8f:eb:08:ee:be:54:19:1e:
f0:f6:28:f8:02:21:3d:b3:fb:90:4c:83:d7:bb:f5:
00:d3:f0:78:b9:e9:57:57:c5:42:32:6f:bf:bb:71:
69:33:16:65:4f:7c:ce:80:99:e6:bb:65:0a:65:9c:
bd:1a:73:b6:fb:70:97:bc:08:4f:4c:b4:a4:0f:c0:
e7:e2:81:0e:45:35:96:b4:f9:7f:9e:e8:51:cc:c5:
6f:ab:9b:b6:c1:28:5d:81:44:c8:f2:9b:6f:89:97:
3f:24:68:be:64:72:ad:74:8a:eb:16:bc:0b:28:a8:
db:9a:41:9f:1b:af:20:ff:83:f1:77:99:35:0f:17:
88:df:ee:9b:12:15:d7:83:33:1a:7a:a2:33:86:d6:
4b:3a:67:42:82:d7:f6:55:a1:c2:48:55:c5:bf:52:
12:4b:ec:04:5a:4e:b6:2c:64:3d:ab:2c:c2:cf:06:
4b:53:59:c7:8a:be:be:5f:11:66:1d:c0:01:42:50:
c1:91:76:3f:eb:07:c9:0f:0a:04:29:59:f2:c2:c5:
cc:74:87:1b:72:72:10:3a:94:6b:68:c5:ff:69:cd:
e6:1d:06:1a:85:a5:21:84:7c:e5:53:cc:b1:9a:dc:
e2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:21:51:B0:F5:8E:46:46:9C:E6:75:44:B7:EF:51:A7:8B:FE:E2:AD
X509v3 Authority Key Identifier:
keyid:1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/JiFRsPWORkac5nVEt-9Rp4v-4q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.1.0/24
Signature Algorithm: sha256WithRSAEncryption
26:c0:8e:bd:0a:b7:6a:c4:b3:8e:03:c4:c1:72:d6:8f:ab:c6:
b2:88:3d:5a:b7:39:65:99:0f:df:99:ae:f0:06:4b:e5:78:d9:
5e:f3:07:12:c0:ce:de:6c:9f:e5:4d:63:ef:18:8d:c3:89:e6:
98:b6:9b:7b:7e:39:fe:fc:42:4c:25:8e:a7:9e:a3:99:51:18:
c5:6e:62:71:4b:f5:1d:6d:01:6c:14:dd:bd:c1:58:cf:bd:ac:
1e:00:4a:4a:91:2e:23:47:27:11:9e:e1:0b:47:65:67:6f:ae:
45:36:e1:4d:a9:ec:e3:9c:76:0e:04:90:f5:ff:4f:8b:51:06:
d9:99:d4:8e:3e:9f:b4:f5:b5:41:52:b7:50:a0:5b:9a:f9:d3:
7c:90:21:88:e9:99:09:c0:9c:f3:65:3e:18:41:f7:36:2c:22:
a3:5e:57:91:b0:00:30:75:de:27:2a:83:0e:01:d1:b8:38:2f:
c3:46:7e:75:cd:95:10:19:fc:22:80:aa:15:71:13:4e:9a:68:
ad:12:11:4e:67:2d:a3:c7:65:2f:fc:ee:98:bf:a6:ef:ef:d0:
a8:1e:a5:80:87:62:00:c5:cb:b2:11:68:8a:d2:69:83:e9:b3:
81:d7:73:76:f9:12:31:f2:2c:e7:2d:27:b5:e4:dc:6a:58:4e:
b2:44:93:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:05 2024 by rpki-client on console-fra.rpki-client.org