Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/JpFUWT-M5oxQm-cFqkQyv0XeEho.roa
File: JpFUWT-M5oxQm-cFqkQyv0XeEho.roa (raw, json)
Hash identifier: wt67H8valZzU3151e6swAYdvLa2kBhQJTdvR2aI+qoo=
Subject key identifier: 26:91:54:59:3F:8C:E6:8C:50:9B:E7:05:AA:44:32:BF:45:DE:12:1A
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0189CF6F7E80DC04F56082F04559D238B19A
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/JpFUWT-M5oxQm-cFqkQyv0XeEho.roa
Signing time: Mon 07 Aug 2023 09:58:57 +0000
ROA not before: Mon 07 Aug 2023 09:58:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 45.94.31.0/24 maxlen: 24
45.139.162.0/24 maxlen: 24
2a07:e345:100::/40 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:6f:7e:80:dc:04:f5:60:82:f0:45:59:d2:38:b1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Aug 7 09:58:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=269154593f8ce68c509be705aa4432bf45de121a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:27:68:f7:ca:10:d6:5d:32:38:5e:a8:09:
4a:81:af:61:9f:16:fd:23:e8:65:80:e0:39:9a:6b:
4b:dc:d5:e1:eb:e5:6b:44:98:af:30:ad:e8:dd:1b:
f4:7e:6f:00:e7:b6:7d:be:92:25:07:0a:1d:a7:69:
f4:d5:7f:d3:f5:ca:c7:37:68:e6:f6:2e:1f:c0:02:
b7:16:79:b1:1b:3f:41:5f:3d:5b:c2:29:fb:b1:9e:
f7:32:d0:6c:54:c6:f8:a4:22:a6:da:c8:0c:09:6c:
cf:4b:bb:c6:f5:4b:ee:36:8f:d5:28:e6:9e:14:1c:
67:d8:6b:22:a5:1f:5b:b5:d3:c6:9e:b6:d5:15:71:
ea:69:aa:55:e2:11:53:b9:fe:a5:24:b9:51:62:eb:
f9:c8:df:8d:06:6c:3b:a7:5e:94:1c:d7:8e:10:d0:
dd:dc:ae:9b:b8:f4:4e:f9:d5:76:b1:cd:33:41:33:
7b:2e:f8:e0:d0:20:20:71:83:e0:06:29:32:2c:ae:
22:99:dd:04:9c:48:51:6c:f7:16:61:8b:c8:b4:e4:
e5:8c:9e:a2:b5:60:1d:15:91:81:6f:1e:65:f5:4e:
4f:43:40:ca:05:60:39:6d:3b:2b:55:2e:61:41:d1:
c2:ca:4f:e2:ad:2e:44:0d:72:56:7f:77:77:6e:dd:
3d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:91:54:59:3F:8C:E6:8C:50:9B:E7:05:AA:44:32:BF:45:DE:12:1A
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/JpFUWT-M5oxQm-cFqkQyv0XeEho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.31.0/24
45.139.162.0/24
IPv6:
2a07:e345:100::/40
Signature Algorithm: sha256WithRSAEncryption
50:4a:2c:35:e6:55:8b:5c:43:1f:67:39:90:fd:98:d0:46:65:
6d:6e:2a:c3:a5:f0:b3:fc:14:ed:aa:a4:0c:2d:1f:91:20:37:
8b:4f:0d:ed:b9:0b:e7:92:51:c1:28:5e:80:32:c0:e9:a3:45:
e3:ab:8e:55:1b:8d:21:74:f6:0e:4e:d1:53:0d:f8:28:fb:6d:
ec:0b:2e:00:55:62:85:5c:d7:f1:66:70:94:18:37:c3:60:14:
e6:98:29:8f:a3:3f:96:77:88:99:04:5b:8b:aa:9a:1b:d7:e4:
c5:04:25:0a:03:d4:5e:2d:f0:3a:4f:e7:61:e2:df:c7:13:da:
c2:ea:c2:d8:00:ec:c9:07:3b:2a:77:b2:ea:3f:41:a1:c5:de:
fc:de:9f:15:08:6a:78:51:ed:e3:07:d0:b6:a3:a0:bf:71:1c:
4a:aa:aa:78:a5:e1:68:cf:de:78:c6:96:46:8d:28:61:13:b2:
94:2b:5f:33:60:ea:98:81:06:d2:90:9f:07:d4:81:2b:73:0b:
6e:8d:4b:1b:e9:8f:11:24:7f:99:99:4f:43:a8:fe:8a:6c:65:
76:41:2a:e3:64:e6:38:71:6e:1d:20:9a:e3:cc:07:78:f1:ef:
1f:24:22:c0:07:a1:76:04:3c:65:fb:cd:8c:f8:c9:6e:14:61:
fe:11:73:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 11:03:53 2023 by rpki-client on console-ams.rpki-client.org