Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/jlOL4neP9evHshCit_QSraqUkNs.roa
File: jlOL4neP9evHshCit_QSraqUkNs.roa (raw, json)
Hash identifier: C6CtACcqDbRR28NBKmhtpdGK7a8SU8Gc0XwwXvL3GZM=
Subject key identifier: 8E:53:8B:E2:77:8F:F5:EB:C7:B2:10:A2:B7:F4:12:AD:AA:94:90:DB
Certificate issuer: /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Certificate serial: 018570E764950457E843BC00C59DD30BD37C
Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/jlOL4neP9evHshCit_QSraqUkNs.roa
Signing time: Mon 02 Jan 2023 05:14:50 +0000
ROA not before: Mon 02 Jan 2023 05:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42214
IP address blocks: 91.246.28.0/24 maxlen: 24
91.246.29.0/24 maxlen: 24
2001:678:47c::/48 maxlen: 48
2001:678:4bc::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:64:95:04:57:e8:43:bc:00:c5:9d:d3:0b:d3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Validity
Not Before: Jan 2 05:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e538be2778ff5ebc7b210a2b7f412adaa9490db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:84:49:9e:c7:3c:32:fa:23:a6:02:90:27:40:
ac:d2:88:ca:5b:3a:f0:3c:c6:fd:48:46:21:31:60:
2a:bc:99:29:47:37:e7:7f:a2:40:41:78:ef:7a:fd:
e3:cb:34:7c:d3:f2:3a:16:a5:3d:a1:0f:16:59:2b:
08:1a:7d:d5:31:12:f6:20:40:f5:16:36:4d:fe:65:
86:79:1f:c5:88:61:10:2d:ad:e0:ef:ed:d2:61:2a:
4e:05:69:cc:04:54:6a:ea:d8:b4:63:cf:58:66:38:
43:ca:ff:2c:a3:18:db:a7:58:0b:f3:69:0e:42:a9:
eb:f0:ce:d0:56:7f:0e:1c:5f:52:6d:db:91:ed:e0:
43:29:dd:0d:82:c9:15:63:93:21:0b:51:d6:85:17:
e0:2e:c4:10:7c:97:5d:05:37:3c:8e:eb:28:a6:d8:
be:65:00:f6:1c:a0:17:94:61:1e:1d:f0:9a:2d:1c:
31:26:0d:a8:08:89:9f:a1:fe:45:e2:df:76:e6:cb:
5f:1a:28:d7:68:df:de:11:37:32:21:3d:df:14:43:
98:c1:4b:23:8d:64:2b:6d:76:74:21:45:a3:86:f9:
c9:2e:b5:63:0d:ee:18:51:ca:8d:f2:3a:6e:78:f2:
48:28:01:48:6b:7f:a4:8d:9f:1c:a5:b8:af:f7:d2:
10:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:53:8B:E2:77:8F:F5:EB:C7:B2:10:A2:B7:F4:12:AD:AA:94:90:DB
X509v3 Authority Key Identifier:
keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/jlOL4neP9evHshCit_QSraqUkNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.28.0/23
IPv6:
2001:678:47c::/48
2001:678:4bc::/48
Signature Algorithm: sha256WithRSAEncryption
50:49:54:92:35:a2:e0:01:cd:4b:e2:d2:c6:6c:6d:34:c4:88:
f0:4c:72:ac:20:82:1a:b6:93:22:11:f7:6f:fb:bf:1c:8c:b8:
ef:66:41:f6:9d:ff:4b:ae:17:4b:0a:e1:4c:c4:9e:ee:1f:8b:
d7:e8:db:9c:6f:99:6a:73:80:49:e2:78:c3:d5:e0:e2:46:8d:
99:a4:60:a7:4f:47:5c:cf:59:30:5a:ac:dd:93:e4:d3:ba:f9:
49:40:9b:90:38:60:0e:28:51:81:ff:d0:c7:2f:17:44:5b:35:
91:f4:e7:e0:37:2a:1d:25:7d:a2:cd:50:09:e1:39:91:03:c7:
46:2d:01:b1:03:97:81:fa:8d:0f:a5:0f:a3:f4:f5:6a:63:a5:
66:65:75:3b:e1:93:e6:36:26:53:22:28:b0:36:48:41:a5:c0:
57:c0:86:aa:63:6d:e6:2a:49:66:d6:f9:f7:9a:cb:fb:47:b4:
04:36:87:fd:1a:84:b7:69:ec:fc:b7:9a:cc:af:d4:9e:7a:c6:
ac:9b:e8:31:57:8c:72:ce:74:40:a5:c1:ff:de:0e:5e:c6:5d:
32:0b:0a:9f:38:37:1f:bc:a8:81:a7:a6:b7:7d:e1:50:21:26:
09:c3:61:61:21:72:dd:90:3f:96:02:4e:1b:9f:49:de:11:4d:
f0:8c:3a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:38:00 2024 by rpki-client on console-fra.rpki-client.org