Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/jtrGSR_4UH1Kwd8fLKQLjXKHobM.roa
File: jtrGSR_4UH1Kwd8fLKQLjXKHobM.roa (raw, json)
Hash identifier: K9Pjkoy37rMn7jo8f8O42PEgdIa5EYzcc3bd8i0ydzk=
Subject key identifier: 8E:DA:C6:49:1F:F8:50:7D:4A:C1:DF:1F:2C:A4:0B:8D:72:87:A1:B3
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018A9815F50CA786C192230FD337B8191417
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/jtrGSR_4UH1Kwd8fLKQLjXKHobM.roa
Signing time: Fri 15 Sep 2023 09:04:50 +0000
ROA not before: Fri 15 Sep 2023 09:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34073
IP address blocks: 94.100.10.0/24 maxlen: 24
87.246.172.0/24 maxlen: 24
81.198.73.0/24 maxlen: 24
81.198.192.0/22 maxlen: 22
81.198.194.0/24 maxlen: 24
87.110.221.0/24 maxlen: 24
87.110.220.0/24 maxlen: 24
2a02:2330:b2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 28 Dec 2023 14:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:98:15:f5:0c:a7:86:c1:92:23:0f:d3:37:b8:19:14:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Sep 15 09:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8edac6491ff8507d4ac1df1f2ca40b8d7287a1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cd:b9:f3:c9:c5:29:7a:f4:be:7e:11:b7:30:
a6:5e:fc:7f:ba:99:ac:46:6b:9b:f7:64:90:38:6c:
52:96:3f:73:60:a4:6b:ca:88:57:20:a5:66:11:21:
42:cf:1a:ba:50:d1:d3:1c:95:0d:61:37:56:1a:bd:
ed:31:f9:e2:25:f4:51:14:a1:7b:79:fd:61:7f:0b:
af:47:7d:06:c3:d2:1b:56:32:b8:f6:3b:7c:5b:30:
6e:bf:64:41:9d:aa:cf:85:ed:71:3d:dd:55:dd:2d:
dd:77:66:52:dd:4a:73:f7:e0:7b:ba:55:39:f2:41:
cd:91:c0:5d:27:55:20:5c:08:79:73:e0:ee:36:3c:
48:05:d8:ba:c3:09:87:bd:e8:cd:38:23:11:a8:88:
fa:61:cf:a6:87:87:35:22:47:6a:62:f4:11:8f:fd:
e2:b4:48:be:c9:70:50:02:58:99:40:d9:f5:a1:17:
ac:fa:62:04:9a:5b:62:3d:80:4f:39:69:82:20:d9:
c3:6d:e6:6c:78:26:58:de:a7:f0:ed:90:9f:26:6e:
fd:f4:3a:b6:82:5e:3f:7d:89:5b:38:51:de:e9:61:
d8:33:11:c8:a9:90:48:74:3b:37:9d:ab:9d:36:dc:
de:9f:30:ca:b6:3d:aa:81:88:d2:34:a0:c5:2b:c6:
be:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DA:C6:49:1F:F8:50:7D:4A:C1:DF:1F:2C:A4:0B:8D:72:87:A1:B3
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/jtrGSR_4UH1Kwd8fLKQLjXKHobM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.198.73.0/24
81.198.192.0/22
87.110.220.0/23
87.246.172.0/24
94.100.10.0/24
IPv6:
2a02:2330:b2::/48
Signature Algorithm: sha256WithRSAEncryption
92:2b:7f:b5:cf:3e:c6:38:1d:36:aa:f1:04:e0:3b:0e:fb:4a:
d8:90:e4:9c:db:42:e8:6e:1c:d0:51:bc:34:97:0d:1f:81:5a:
7e:6c:a5:3b:30:86:14:f5:c6:11:c9:1b:09:92:2c:98:e7:7e:
1a:01:02:71:b7:67:71:fa:b9:6b:1c:4d:4a:26:57:1d:4d:e9:
88:9f:28:0a:b3:61:69:f3:e7:4f:33:3b:6c:69:17:84:c4:1a:
d0:86:22:97:ee:03:7e:b9:6c:f8:f6:2d:f4:0e:76:4a:a0:9f:
7a:c2:c3:f6:6d:22:24:a8:b3:9b:bd:4b:88:9a:52:39:84:6c:
77:95:b7:1b:05:0d:11:2e:6f:cb:79:63:74:4e:cb:bc:0b:b1:
12:78:76:94:a6:25:06:41:de:de:c4:ce:b2:8b:ec:da:c6:e9:
ae:cf:55:f8:84:73:ce:99:01:34:c4:28:c5:bb:2c:57:fa:2a:
e5:fc:4d:d0:1d:10:85:2c:de:37:39:86:e6:ca:0a:f9:2e:bf:
cb:a3:74:77:79:4b:bb:39:83:56:ff:17:1d:c7:b5:8e:c4:27:
00:22:25:8b:ec:95:3f:b2:21:af:3d:32:f9:be:16:0c:af:bc:
2a:cc:50:d2:91:1a:16:5d:b3:e0:b4:a0:4a:40:40:d0:a6:16:
9e:eb:35:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:47 2024 by rpki-client on console-ams.rpki-client.org