Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/JNlKNKL5BqMGas53TQGochAc48Y.roa
File: JNlKNKL5BqMGas53TQGochAc48Y.roa (raw, json)
Hash identifier: 0XwZZov2P6qpezj9KGOmQTPGu3erR5CfKC7nNM85MBo=
Subject key identifier: 24:D9:4A:34:A2:F9:06:A3:06:6A:CE:77:4D:01:A8:72:10:1C:E3:C6
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0189BC89DBCA19A885D364159EAF272AA581
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/JNlKNKL5BqMGas53TQGochAc48Y.roa
Signing time: Thu 03 Aug 2023 17:54:58 +0000
ROA not before: Thu 03 Aug 2023 17:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.185.24.0/22 maxlen: 24
109.72.116.0/22 maxlen: 24
89.185.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 04 Aug 2023 08:51:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bc:89:db:ca:19:a8:85:d3:64:15:9e:af:27:2a:a5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Aug 3 17:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24d94a34a2f906a3066ace774d01a872101ce3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:14:5b:cf:28:9b:43:7d:e7:45:e5:72:0c:45:
c4:ed:b3:83:5f:30:d4:59:98:f8:d6:60:f4:93:b8:
d2:27:75:98:31:60:1e:4e:32:ef:96:b7:69:d9:e5:
0d:ae:bb:1c:21:de:7f:bf:22:29:f6:19:72:d1:9d:
9d:56:24:5f:f3:c9:f4:6c:64:83:cc:92:ee:ef:5d:
94:7e:cc:5a:d8:3d:90:90:4e:a6:56:f4:33:98:56:
fe:19:88:a7:b3:15:c7:92:fe:b1:cd:72:d6:4a:5d:
0d:fb:2f:9b:f3:28:03:67:2f:d7:ec:6b:42:54:e1:
11:e8:5f:44:7d:01:8b:d1:c7:e7:2e:d8:49:55:13:
4d:9a:1d:70:77:0e:9a:45:36:a2:a6:96:6a:d5:23:
9f:74:bd:f3:43:09:24:d2:1b:e6:1e:4f:a7:c4:e1:
6d:a8:a6:e4:24:78:e3:be:4a:87:9d:6e:c2:b3:62:
34:86:bc:3c:0a:9c:ed:8f:7c:65:f1:2d:6a:fb:b5:
59:f0:ca:d6:51:c5:32:48:31:08:80:2a:64:41:13:
4e:e9:82:79:70:99:de:8f:8e:81:db:e0:e2:29:b5:
5c:c3:40:8c:2d:9c:a2:92:1f:e9:ae:98:dc:b3:0a:
cf:d2:cb:d7:aa:d5:91:b4:af:56:66:ea:3c:8b:ca:
06:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D9:4A:34:A2:F9:06:A3:06:6A:CE:77:4D:01:A8:72:10:1C:E3:C6
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/JNlKNKL5BqMGas53TQGochAc48Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.0.0/22
89.185.24.0/22
109.72.116.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:24:3d:20:8a:2b:b4:34:55:7e:fd:6a:cd:a7:84:8c:61:f7:
f9:3b:4f:d3:3c:a4:7c:02:db:d5:6b:c7:62:5b:b3:24:56:b5:
eb:3e:95:11:d5:15:50:72:5a:e0:27:32:69:78:03:55:2c:8d:
c7:10:4c:c1:ac:1f:14:ee:6b:6c:90:17:7a:89:5f:e0:a2:74:
af:a0:55:98:32:2f:2f:ed:26:c4:ce:83:f5:98:da:1d:5d:e1:
98:d3:ad:15:ba:fd:f3:a7:58:67:6b:da:60:da:da:b8:fe:b3:
dc:5a:02:25:47:c9:f6:36:2b:e6:89:d4:b0:18:2a:93:3a:e7:
a9:39:16:02:f5:5c:04:70:17:fa:0d:ff:aa:90:38:13:50:37:
84:b4:aa:b1:49:4e:4d:db:6a:e0:00:cc:22:32:b8:eb:10:f4:
8a:60:2c:39:be:f1:e2:3b:9e:b1:77:b5:52:0e:84:70:de:45:
33:3d:4a:91:f6:c4:95:2c:35:d8:71:b8:6a:7b:f5:d1:df:5d:
b7:09:b9:84:96:d9:aa:91:9a:27:4d:67:74:2b:e7:fe:7e:ac:
97:51:31:b8:1d:9b:5e:fd:c6:c5:6d:ea:19:22:b3:9d:33:2c:
b1:0d:c2:8f:f3:d5:59:7b:6c:3b:0b:8e:80:5b:41:30:67:f9:
1d:33:2a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:45 2024 by rpki-client on console-ams.rpki-client.org