Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Jgrt8feGpVMV1sN1DeHqVn7iD1M.roa
File: Jgrt8feGpVMV1sN1DeHqVn7iD1M.roa (raw, json)
Hash identifier: +rthN6i/I2YDNz/77oA3LrsVB272UMU2Q8xDNrlWtkk=
Subject key identifier: 26:0A:ED:F1:F7:86:A5:53:15:D6:C3:75:0D:E1:EA:56:7E:E2:0F:53
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189AAD58461F9068FAD60A3A8D614E62CA1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Jgrt8feGpVMV1sN1DeHqVn7iD1M.roa
Signing time: Mon 31 Jul 2023 07:24:27 +0000
ROA not before: Mon 31 Jul 2023 07:24:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 94.103.126.0/24 maxlen: 24
195.178.121.0/24 maxlen: 24
87.120.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Jul 2023 12:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:aa:d5:84:61:f9:06:8f:ad:60:a3:a8:d6:14:e6:2c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 31 07:24:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=260aedf1f786a55315d6c3750de1ea567ee20f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:48:ad:82:04:0a:c7:ca:99:83:ed:36:c6:fc:
35:35:4d:cf:57:c9:87:e0:d6:2c:00:5a:5e:10:37:
da:d8:53:39:d0:93:58:41:36:b8:63:35:c5:23:e9:
b7:b1:07:4e:6c:97:1a:c8:32:66:9f:01:b1:11:54:
00:87:9f:b5:68:09:50:e9:3d:6d:e0:ed:85:de:8a:
43:dc:27:a0:5e:bd:2b:09:3a:a7:ef:d7:57:1c:54:
4a:3b:5d:70:8c:ed:e6:bc:e8:52:0b:78:f5:0c:ba:
96:7a:d5:9a:51:9c:1a:05:7f:e4:b0:24:0d:01:15:
b4:2e:09:e5:77:02:31:72:2d:35:0d:12:f2:14:46:
58:7b:f4:0a:1b:0b:81:fa:40:3a:5c:1d:bd:be:f1:
c6:e0:21:43:99:84:d3:df:6a:51:e8:21:97:f9:e0:
66:45:c3:7c:09:31:49:5f:ce:65:ca:c8:94:80:9b:
bc:29:d3:0d:bd:b3:c7:fa:bf:4f:b6:f7:b6:48:26:
a6:21:76:6d:60:da:b0:44:c5:d9:eb:5f:13:8e:ed:
91:bd:93:de:3e:62:c5:a3:e7:1c:8d:1f:c4:7d:76:
16:21:0f:73:b9:4f:d9:78:6a:a1:ee:53:c0:59:d9:
f5:46:d6:68:31:ad:e9:2d:b0:65:73:09:78:4e:d8:
bf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0A:ED:F1:F7:86:A5:53:15:D6:C3:75:0D:E1:EA:56:7E:E2:0F:53
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Jgrt8feGpVMV1sN1DeHqVn7iD1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.5.0/24
94.103.126.0/24
195.178.121.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:73:8f:96:7d:51:5f:e5:52:cc:a5:4e:a1:3b:bd:d6:c6:c3:
1a:28:44:de:4a:55:8e:46:68:d5:78:3a:55:89:ae:12:72:9f:
63:ad:68:87:7a:69:b9:2f:c4:af:29:49:9d:d5:1f:07:ce:7b:
de:57:20:28:88:b9:e7:ae:52:56:14:73:a5:4a:a6:50:21:cf:
a0:1a:3a:3a:cb:6e:e9:09:74:d8:d4:7a:15:e6:b1:e1:77:13:
ce:52:d6:8b:54:ed:02:41:1a:7a:95:61:4c:96:4d:6e:06:6f:
44:d5:84:c6:26:4b:39:68:52:1f:57:ed:10:29:77:32:93:16:
f1:d5:0a:4d:b7:db:53:d3:b0:bb:6f:3d:71:1a:24:e7:07:20:
43:a0:bd:24:a8:76:97:09:3b:57:3a:93:a9:92:2e:b6:31:2f:
a2:a0:a2:5d:6b:20:e7:67:44:2f:4d:06:ab:61:3f:c1:14:52:
32:a7:7b:00:03:d7:3f:68:3c:ed:b7:0b:61:0c:71:57:fa:12:
46:74:8f:81:a0:fc:3b:cf:52:13:b5:69:a8:0c:36:d0:28:da:
b4:cb:65:a2:bc:eb:4c:c7:9d:96:90:bf:53:ba:90:ae:8a:73:
29:13:c4:d6:06:27:fa:c4:6d:06:c1:b4:b7:9f:19:8a:e9:e0:
ae:09:d0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:30 2024 by rpki-client on console-ams.rpki-client.org