Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/jiagc-8_o8oPHywKkRBgSRF7HeA.roa
File: jiagc-8_o8oPHywKkRBgSRF7HeA.roa (raw, json)
Hash identifier: x0OUrj8DQ3zm1ZlUFA9qL9mu/mgFIrPpS5ARK4eisiA=
Subject key identifier: 8E:26:A0:73:EF:3F:A3:CA:0F:1F:2C:0A:91:10:60:49:11:7B:1D:E0
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 0191E1D7788B0BA5BAA06BA89970CB374AA7
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/jiagc-8_o8oPHywKkRBgSRF7HeA.roa
Signing time: Wed 11 Sep 2024 16:08:00 +0000
ROA not before: Wed 11 Sep 2024 16:08:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398465
IP address blocks: 89.150.49.0/24 maxlen: 24
185.162.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Oct 2024 12:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:d7:78:8b:0b:a5:ba:a0:6b:a8:99:70:cb:37:4a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Sep 11 16:08:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e26a073ef3fa3ca0f1f2c0a91106049117b1de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:6e:43:1a:03:e2:ed:58:98:d7:c9:be:5c:
6c:10:6a:10:2a:23:80:32:95:07:9d:be:0d:a9:f4:
a9:ca:49:2b:c1:71:13:42:0a:10:8c:74:42:33:79:
70:7b:c3:e0:27:0a:10:fc:3f:fa:90:17:35:2c:9c:
ed:9d:9b:f3:bc:cc:75:aa:c2:76:78:53:f2:2f:be:
62:b5:73:0e:f0:c9:af:b4:ed:b3:9d:f7:58:f7:48:
92:4a:b6:d7:74:8d:6c:14:78:5a:c6:6d:af:d3:64:
06:0a:74:c3:3a:57:34:e5:dd:eb:7e:ad:15:ee:f8:
c5:42:76:33:d4:3a:c4:c4:c8:7f:fa:e1:8a:5d:6a:
9c:5c:c2:e8:ea:23:8e:4a:8e:91:93:d5:26:b7:68:
57:c4:21:cf:50:6f:1c:6a:05:4e:2a:21:aa:0d:6c:
ec:f7:e2:1e:19:2b:8b:d1:d2:b5:98:bd:2e:12:03:
b2:91:27:23:59:4f:6a:d9:24:1a:b1:8c:52:21:c2:
dd:40:b2:97:9b:11:d6:a7:77:64:cb:0b:a4:1c:4d:
ac:dd:49:5e:e7:68:17:b4:d4:33:31:19:9a:94:c3:
05:41:2c:2c:ed:92:4d:1b:a0:cb:12:eb:46:3e:a7:
9f:b6:73:e2:82:9e:e1:5e:37:0c:26:4c:ca:15:d9:
a5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:26:A0:73:EF:3F:A3:CA:0F:1F:2C:0A:91:10:60:49:11:7B:1D:E0
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/jiagc-8_o8oPHywKkRBgSRF7HeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.49.0/24
185.162.176.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:59:8d:6f:f1:24:25:74:b8:d7:e8:f0:91:b8:bd:99:f6:83:
c2:4a:fb:c6:53:c7:7f:16:38:7a:69:5d:d0:c4:0b:41:c2:2f:
8b:94:64:dc:10:14:06:3f:fb:44:11:d0:3f:44:1a:75:45:04:
3e:74:14:2b:0f:53:f7:ca:40:21:9f:f5:f1:14:23:3b:3d:76:
c1:b8:c7:6e:54:d0:ac:88:6a:ab:6f:fb:73:d7:2a:12:d9:0d:
01:df:70:b6:96:99:e3:f0:0e:5d:68:2f:a6:9b:30:01:01:83:
52:3b:25:89:fe:75:52:e9:6d:a1:32:8b:38:bb:37:8c:32:ba:
5c:2b:7e:c1:ab:60:f2:91:de:e1:ec:84:21:32:7f:b9:fc:37:
1c:42:18:15:c9:5a:b6:65:19:06:83:cc:5d:7e:fd:1a:b2:c4:
3a:16:bd:24:ba:87:13:b7:ba:2e:35:35:63:33:e2:e9:54:a3:
1b:91:51:51:da:45:dd:74:4b:0e:d7:d5:7b:3c:51:c3:4b:1a:
f1:ce:eb:4d:2f:b8:14:c2:97:4e:3b:a6:73:ce:b4:c5:4f:c0:
a1:f6:d6:cf:8c:cf:f5:c2:ce:fe:09:aa:6c:d0:f4:fb:12:ea:
d4:c4:17:be:ee:54:bd:55:ae:f9:02:bf:a5:08:51:b1:01:12:
24:5f:ce:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 18:41:57 2024 by rpki-client on console-ams.rpki-client.org