Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/jSUAIt5VL1puq-DCDtyHjRP6_uo.roa
File: jSUAIt5VL1puq-DCDtyHjRP6_uo.roa (raw, json)
Hash identifier: ukes+o8NjcujpBlKhIirV59oXpUFQlis5Oq2ClC2rIw=
Subject key identifier: 8D:25:00:22:DE:55:2F:5A:6E:AB:E0:C2:0E:DC:87:8D:13:FA:FE:EA
Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial: 018B1E2669882E54EE53A50868510A4D4A61
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/jSUAIt5VL1puq-DCDtyHjRP6_uo.roa
Signing time: Wed 11 Oct 2023 09:51:55 +0000
ROA not before: Wed 11 Oct 2023 09:51:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34984
IP address blocks: 89.107.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:26:69:88:2e:54:ee:53:a5:08:68:51:0a:4d:4a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Validity
Not Before: Oct 11 09:51:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d250022de552f5a6eabe0c20edc878d13fafeea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:60:8e:a9:e6:69:24:a9:a8:1a:a1:4b:be:ff:
1f:a7:34:d9:78:31:93:6f:0d:bb:fe:85:ea:1b:12:
fd:5b:0f:5d:33:5e:53:d1:6e:6f:8f:a3:0c:04:85:
f0:a1:bf:94:75:0f:19:3b:26:13:c8:1d:02:5c:5d:
f9:d2:1b:a6:f3:2d:6a:23:79:73:d4:fc:88:d4:65:
47:7f:39:9b:bc:52:76:35:09:c1:c5:c0:f0:80:16:
b2:50:ce:ef:bf:8a:63:a5:38:a7:e7:06:d1:0e:67:
80:36:8e:34:d6:87:96:76:c0:4e:61:91:34:0f:a0:
95:e3:ed:ec:57:a5:2c:32:19:e1:3c:dd:ec:bc:49:
ac:30:76:9f:6a:32:80:6d:1f:39:e3:5c:d5:a6:f8:
82:ad:ab:99:f8:30:7b:3e:41:18:83:b9:5f:9e:29:
73:6e:d5:35:08:28:56:6d:52:b2:04:bd:1a:a0:20:
0f:40:d2:81:6f:55:73:0a:31:bf:e4:d5:db:74:8f:
78:b2:1c:0f:f8:95:c9:9f:68:c4:0a:37:39:1c:99:
c2:78:ac:91:30:f3:03:7d:be:a8:8b:04:32:04:c8:
49:56:0e:ee:de:26:6e:88:79:04:d9:58:b7:14:62:
cd:33:b4:86:b8:c4:ba:8d:b8:d6:38:25:ee:19:80:
b9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:25:00:22:DE:55:2F:5A:6E:AB:E0:C2:0E:DC:87:8D:13:FA:FE:EA
X509v3 Authority Key Identifier:
keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/jSUAIt5VL1puq-DCDtyHjRP6_uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.13.0/24
Signature Algorithm: sha256WithRSAEncryption
62:6b:de:d0:53:05:cf:38:3e:55:b3:d4:6f:52:79:4f:23:18:
05:cb:70:b7:87:6a:32:05:7d:77:84:11:c9:af:5f:39:56:6f:
d1:03:c4:75:86:54:d4:ad:9d:f3:59:fc:fc:97:14:fa:06:0d:
84:bc:23:73:1e:b1:2a:da:9c:81:eb:26:c7:34:2d:d9:6e:0a:
a4:12:02:f0:83:48:9d:5b:59:23:bd:72:a8:93:2d:08:95:6a:
ee:0e:04:2b:74:d7:0b:dc:53:98:18:69:ba:b3:63:c8:42:c8:
36:ab:06:35:c9:39:00:55:d6:71:b1:2b:22:38:d0:b8:46:44:
0f:5b:92:36:96:50:c5:19:3a:db:45:d7:06:54:7a:a6:f8:03:
59:23:07:72:fb:e9:2d:ac:dd:b5:bc:bf:65:15:25:45:c8:32:
3d:1f:dc:7a:eb:c2:c2:5b:3b:5a:35:bb:4d:d4:e3:44:40:7e:
ae:64:1d:45:1d:6d:31:5b:dd:b0:60:9e:14:1e:70:c7:ae:14:
3e:82:7e:28:25:8e:81:e9:fc:ff:24:de:91:d7:a4:97:e9:e0:
1e:6e:db:5f:9c:6f:20:1e:57:38:0a:d5:4e:59:58:8a:1e:05:
ba:44:14:b6:c6:91:0c:4f:ac:b3:6b:70:f6:27:56:d9:a4:84:
72:e3:91:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 23:05:46 2023 by rpki-client on console-ams.rpki-client.org