Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JHOya3dGrPJ3YseefGy9japRF_c.roa
File: JHOya3dGrPJ3YseefGy9japRF_c.roa (raw, json)
Hash identifier: IPRX2SSqIEQjiCrWtg43fW8xJKKxmu/QkWTRfKdQFe8=
Subject key identifier: 24:73:B2:6B:77:46:AC:F2:77:62:C7:9E:7C:6C:BD:8D:AA:51:17:F7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C39FF0DBC52AB3B27E523FF16F05897A1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JHOya3dGrPJ3YseefGy9japRF_c.roa
Signing time: Tue 05 Dec 2023 12:41:05 +0000
ROA not before: Tue 05 Dec 2023 12:41:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6939
IP address blocks: 94.156.112.0/24 maxlen: 24
94.156.116.0/24 maxlen: 24
94.156.117.0/24 maxlen: 24
94.156.113.0/24 maxlen: 24
94.156.118.0/24 maxlen: 24
94.156.114.0/24 maxlen: 24
94.156.115.0/24 maxlen: 24
94.156.124.0/24 maxlen: 24
94.156.120.0/24 maxlen: 24
94.156.125.0/24 maxlen: 24
94.156.121.0/24 maxlen: 24
94.156.122.0/24 maxlen: 24
94.156.119.0/24 maxlen: 24
94.156.126.0/24 maxlen: 24
94.156.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:ff:0d:bc:52:ab:3b:27:e5:23:ff:16:f0:58:97:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 5 12:41:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2473b26b7746acf27762c79e7c6cbd8daa5117f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:10:89:10:dc:27:07:4b:dc:52:62:19:92:02:
af:bb:86:eb:78:e0:71:86:4e:a8:90:8c:4e:77:d9:
31:9c:eb:4c:38:30:94:67:22:ca:63:2f:37:90:af:
1b:d2:d3:b8:8b:2d:2f:1a:14:03:97:e8:76:cf:60:
51:e8:6c:8a:c5:56:ca:e6:3f:f4:45:f2:56:6e:c2:
8c:57:12:3a:cb:83:28:51:f8:ee:0e:e0:b7:94:90:
41:a5:cf:2e:40:3e:7d:d7:91:e0:bb:06:4d:ab:bf:
f1:33:18:89:d0:24:23:ef:cc:2e:59:80:6d:fe:55:
d5:e6:2c:e4:38:22:7c:59:c5:d7:62:54:3c:0a:20:
42:43:24:ac:1a:22:73:50:1f:e8:f6:fb:2c:02:2c:
0a:21:ba:6f:42:94:c0:51:c0:b7:7e:6c:0a:ec:4e:
71:d2:0d:2f:6f:fb:47:cb:95:22:d2:79:c2:6b:00:
72:c7:00:4e:81:d7:d5:1e:4d:43:45:6c:58:18:92:
bb:7b:eb:b4:a0:12:b2:9f:d0:24:f0:8c:64:91:e4:
a9:c5:d4:02:96:bb:83:fc:72:07:94:62:ea:ac:a6:
5b:b0:e5:1f:82:c8:75:7a:34:7e:35:5e:c1:ae:f8:
93:25:4f:ca:66:cb:fe:41:4d:76:47:b2:4c:a6:6b:
b1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:73:B2:6B:77:46:AC:F2:77:62:C7:9E:7C:6C:BD:8D:AA:51:17:F7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JHOya3dGrPJ3YseefGy9japRF_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.112.0-94.156.122.255
94.156.124.0/22
Signature Algorithm: sha256WithRSAEncryption
18:98:af:b4:50:8f:64:3e:4e:3d:4e:88:90:a2:49:f3:21:b9:
65:76:b8:05:09:b0:9e:40:c7:ca:e1:62:3a:e6:77:18:6e:95:
04:96:b8:3a:a4:12:ce:22:76:26:b2:3e:06:12:3b:e6:42:35:
d1:32:3d:dc:5d:25:c5:ad:aa:9c:5c:56:df:03:de:14:55:71:
76:dc:08:88:f0:68:16:30:07:39:cf:f3:39:4e:23:be:a9:f0:
86:88:61:08:83:f1:fc:76:30:ed:56:ab:48:d8:3e:b8:50:ca:
d5:05:34:33:b2:66:56:38:e5:42:32:a9:82:04:3f:6d:68:5f:
0d:5e:b4:7c:98:80:9f:fe:db:c7:2a:c0:1b:4d:86:63:7d:58:
f7:f0:02:69:8c:da:c8:d1:a8:cd:5b:ba:b5:90:68:df:38:46:
4a:a1:04:5d:4e:50:25:17:b0:b5:4f:e2:94:4c:52:cd:f5:4c:
36:0b:81:8b:b5:96:c3:d0:83:b0:9f:7b:b0:ee:74:22:14:7f:
36:7d:38:3f:80:69:fc:0c:3f:0f:bf:3f:eb:44:88:91:94:a4:
ec:f0:ae:04:30:57:8c:ea:fa:ee:70:da:9c:79:b9:d9:17:44:
52:fc:c4:ba:5b:f4:e9:62:57:97:e5:80:3a:f9:56:d1:a0:59:
5f:23:9c:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:10 2024 by rpki-client on console-ams.rpki-client.org