Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/jKKs_kCLNJYqTGZvDhZNa0HlrL0.roa
File: jKKs_kCLNJYqTGZvDhZNa0HlrL0.roa (raw, json)
Hash identifier: iZbnWmbhUII7FY+vzYOd94YvgFWCD31F6EnvZIkR0ak=
Subject key identifier: 8C:A2:AC:FE:40:8B:34:96:2A:4C:66:6F:0E:16:4D:6B:41:E5:AC:BD
Certificate issuer: /CN=ea9ff91c6b1c7a8ed02842b25c9b0d0638a90424
Certificate serial: 018570B063E894E9B6DB5284731DD98FB217
Authority key identifier: EA:9F:F9:1C:6B:1C:7A:8E:D0:28:42:B2:5C:9B:0D:06:38:A9:04:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/jKKs_kCLNJYqTGZvDhZNa0HlrL0.roa
Signing time: Mon 02 Jan 2023 04:14:46 +0000
ROA not before: Mon 02 Jan 2023 04:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44934
IP address blocks: 83.138.62.0/24 maxlen: 24
2a05:5a42::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:63:e8:94:e9:b6:db:52:84:73:1d:d9:8f:b2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea9ff91c6b1c7a8ed02842b25c9b0d0638a90424
Validity
Not Before: Jan 2 04:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ca2acfe408b34962a4c666f0e164d6b41e5acbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d0:e5:1c:eb:01:c9:75:2d:95:42:15:45:00:
1e:43:78:5d:d0:d1:80:b5:71:3a:88:b9:74:3c:5d:
fe:a8:52:09:d9:4f:73:e7:89:b2:ee:e9:76:f2:03:
19:0e:8e:1c:b8:e8:78:94:ab:a5:44:5e:72:a7:3a:
a1:4f:39:14:2c:67:25:b3:3e:12:3e:69:17:db:f7:
0d:ff:3b:29:2b:65:9b:53:82:e6:ed:e0:e8:5e:1c:
74:4e:83:4b:88:7b:eb:81:ec:0b:16:05:eb:15:98:
a2:aa:14:8d:1f:18:30:a8:e3:d7:2c:8b:f0:e9:0b:
c3:72:c2:90:86:8c:31:85:0f:ce:30:5d:d2:cd:d9:
b6:04:d1:6c:d5:e0:76:70:80:f9:19:26:9b:ee:41:
90:3b:e9:2f:7a:46:36:4d:87:95:ac:d7:6e:17:b8:
e2:17:f3:21:a4:7c:35:34:e0:8e:87:d2:0d:16:88:
ea:3b:8e:25:f3:70:fc:ad:2c:83:db:5c:d3:38:8b:
90:d9:41:3d:18:3f:66:d0:82:73:7d:a6:7e:54:91:
5e:bf:11:1a:23:fd:39:2a:45:2c:f2:ed:1c:75:ce:
60:1e:46:cf:ae:77:89:ae:7a:f9:48:2d:17:1a:37:
5a:a5:69:9a:7d:c9:4b:f5:2f:a8:23:e9:39:a8:4d:
ac:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A2:AC:FE:40:8B:34:96:2A:4C:66:6F:0E:16:4D:6B:41:E5:AC:BD
X509v3 Authority Key Identifier:
keyid:EA:9F:F9:1C:6B:1C:7A:8E:D0:28:42:B2:5C:9B:0D:06:38:A9:04:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/jKKs_kCLNJYqTGZvDhZNa0HlrL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.62.0/24
IPv6:
2a05:5a42::/32
Signature Algorithm: sha256WithRSAEncryption
94:80:ba:9c:8d:da:95:e4:cc:29:82:ed:d0:29:e6:f2:af:f9:
4a:b0:73:ad:98:e7:07:af:d3:e6:02:b3:11:eb:a1:ec:ca:4f:
94:9c:1a:96:b7:58:55:e9:df:e1:ff:cc:01:91:3a:30:a3:6b:
25:ef:a6:31:96:b6:7f:32:d8:e7:6d:ce:14:e0:99:86:9a:3a:
f0:51:2e:30:81:f8:43:15:8c:4e:83:8f:83:6a:6b:ba:01:2a:
f9:c3:f8:51:a7:8b:9b:bb:13:3e:e2:18:03:61:cc:4b:b8:68:
73:39:67:29:79:ff:55:c4:62:4a:4c:cc:e3:d4:68:bf:61:09:
98:95:13:a3:50:a7:17:ba:e3:dd:91:f2:62:4f:c6:a9:84:21:
73:29:bb:0a:b1:ee:f9:7b:c6:4a:fa:cc:4c:81:da:ed:dd:70:
5d:f9:46:c9:a7:aa:97:4a:70:cd:ed:79:a8:dd:b4:63:24:f5:
ac:00:92:a0:f4:68:fe:ad:54:32:42:79:f7:ba:87:81:d4:df:
dd:7e:6c:2e:4c:94:7d:3a:18:49:b1:c4:c9:f8:51:dc:7a:c0:
61:96:26:cc:f7:32:13:8c:c7:1a:ec:44:0a:95:b4:2d:28:98:
e5:e3:dc:f8:37:77:32:39:06:de:b9:a4:74:c2:87:85:f8:62:
d5:3a:24:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:56 2024 by rpki-client on console-ams.rpki-client.org