Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/JuyVP_hWIJN1ukKy-NzDdZQq5v4.roa
File: JuyVP_hWIJN1ukKy-NzDdZQq5v4.roa (raw, json)
Hash identifier: pjmQ+bUPosN4aQgn4P1+h3kehwqlHGlmPV04HUWFZ8A=
Subject key identifier: 26:EC:95:3F:F8:56:20:93:75:BA:42:B2:F8:DC:C3:75:94:2A:E6:FE
Certificate issuer: /CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Certificate serial: 0189450D125FF3CABA34F37014A55E950065
Authority key identifier: B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/JuyVP_hWIJN1ukKy-NzDdZQq5v4.roa
Signing time: Tue 11 Jul 2023 13:03:51 +0000
ROA not before: Tue 11 Jul 2023 13:03:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208124
IP address blocks: 185.254.165.0/24 maxlen: 24
91.209.161.0/24 maxlen: 24
2a10:b240::/29 maxlen: 29
2a10:c4c0::/29 maxlen: 29
2a12:8840::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:45:0d:12:5f:f3:ca:ba:34:f3:70:14:a5:5e:95:00:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Validity
Not Before: Jul 11 13:03:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26ec953ff856209375ba42b2f8dcc375942ae6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:01:ba:c5:90:84:a0:e4:1d:49:86:9e:d9:57:
9d:2b:23:a6:6c:1b:a8:58:7a:eb:88:b3:db:a7:44:
d5:fa:34:a2:00:c2:38:80:7c:1c:77:ee:28:98:d5:
1e:77:86:15:80:9c:f8:03:a0:b2:17:5a:53:2e:f4:
cf:de:2b:8e:22:4c:d5:1b:b7:39:24:2a:4c:1f:96:
00:08:c6:1b:30:12:0b:b8:27:b5:9e:2d:29:73:44:
00:54:a1:32:b6:49:da:0c:0b:83:c3:f8:e1:b7:64:
bd:4c:f0:a4:0e:63:ba:3f:f5:99:36:9a:06:94:c2:
78:a6:70:23:89:a4:95:47:b2:71:40:38:ef:5b:89:
00:2c:a5:df:11:7f:d9:11:7a:4a:42:5d:40:99:71:
75:ba:99:c3:23:38:e0:d1:bd:e2:10:e3:3d:bd:7a:
de:0a:00:e9:2a:b7:83:9d:d7:4a:41:c3:55:f0:37:
7f:f4:d4:ba:78:9b:04:5e:c7:4f:fa:b1:b0:7f:cf:
fb:b9:87:08:65:90:c9:d3:05:17:d7:37:41:73:d7:
4e:fc:71:11:c1:11:35:4c:28:a3:6b:68:5f:79:4e:
c2:4f:73:10:85:30:10:57:c1:97:bc:e3:7b:6e:3c:
fc:4c:8a:25:f0:60:c9:c7:3c:0e:83:ba:46:31:d5:
40:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EC:95:3F:F8:56:20:93:75:BA:42:B2:F8:DC:C3:75:94:2A:E6:FE
X509v3 Authority Key Identifier:
keyid:B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/JuyVP_hWIJN1ukKy-NzDdZQq5v4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.161.0/24
185.254.165.0/24
IPv6:
2a10:b240::/29
2a10:c4c0::/29
2a12:8840::/29
Signature Algorithm: sha256WithRSAEncryption
16:3c:a3:41:51:ee:fb:d8:7f:6e:6b:f6:23:66:7a:59:85:6f:
ca:15:c7:f2:24:df:4d:f6:30:71:01:ff:14:fa:56:af:ab:c7:
b7:41:08:e7:de:e5:14:d7:83:fb:42:88:82:53:83:f9:ef:6f:
ad:10:66:a8:4f:38:e9:c3:68:65:46:d3:f4:34:11:3c:63:8e:
2c:48:db:e8:cb:bf:5e:a7:20:62:46:28:e8:d2:c3:b3:d9:90:
48:e7:b8:94:ed:60:90:e8:7e:17:8d:44:53:4a:1b:0f:2b:55:
0f:3a:2e:eb:e2:83:83:d9:23:2e:5b:41:be:8e:b5:07:3b:85:
c6:f6:c2:82:79:5e:a8:ac:ca:9b:53:d5:84:c7:93:7d:96:13:
c8:3f:f0:06:aa:98:0e:78:aa:1a:93:39:d7:c6:e6:df:5a:bc:
0f:73:d5:bf:9a:da:7b:ef:f4:b3:58:c7:1c:18:0c:c7:11:6f:
b6:b4:42:ca:43:3a:eb:6d:f2:7a:fa:1f:87:fd:cc:d7:06:57:
dd:4c:af:27:7a:62:c8:f1:b8:c3:e1:65:5b:46:e8:16:06:a6:
23:28:4a:27:8f:54:be:0b:68:b8:d6:69:af:6d:b6:da:8b:f4:
83:fd:b5:cd:b4:ea:1e:6b:60:c6:9d:ba:f8:08:96:1a:30:70:
a3:2c:9c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:50 2024 by rpki-client on console-fra.rpki-client.org