Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_jbb_NujVX3r4A8oj_p9oMDCTzs.roa
File: _jbb_NujVX3r4A8oj_p9oMDCTzs.roa (raw, json)
Hash identifier: sm63ihrArs26HETXbjTHZFw6+JK1R6rG6CXHrGdLhfU=
Subject key identifier: FE:36:DB:FC:DB:A3:55:7D:EB:E0:0F:28:8F:FA:7D:A0:C0:C2:4F:3B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC963039E79D690B3FFDE6C489774AACD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_jbb_NujVX3r4A8oj_p9oMDCTzs.roa
Signing time: Tue 02 Jan 2024 08:55:58 +0000
ROA not before: Tue 02 Jan 2024 08:55:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 91.92.26.0/24 maxlen: 24
45.8.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 06:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:63:03:9e:79:d6:90:b3:ff:de:6c:48:97:74:aa:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 08:55:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe36dbfcdba3557debe00f288ffa7da0c0c24f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:54:3d:71:e9:d4:a0:42:a8:41:7f:00:16:
be:e6:fe:b1:1f:b1:cc:81:1a:4c:af:31:7b:8d:ff:
ed:b0:92:1f:a2:09:6b:6f:b8:62:db:1a:53:ff:0b:
89:c8:8e:dd:c3:b1:4d:93:07:28:14:ac:76:9d:1f:
49:55:92:41:65:19:47:7d:22:28:f9:7a:ce:66:ec:
ca:c8:8e:dd:3a:91:61:91:81:0e:c5:25:00:87:d1:
e3:5f:ab:6f:fe:a2:df:ed:74:4b:c4:7d:2f:d4:94:
27:cc:59:b2:b6:ab:64:75:c5:2f:5e:45:b7:7d:af:
1f:0b:25:f2:d0:6b:db:62:e4:ee:88:57:6f:d0:6f:
5a:05:f0:c6:e7:1e:e0:f8:e7:07:f5:5f:ea:76:f6:
90:e6:ea:26:31:f4:04:e4:5b:ab:b2:a9:74:2a:91:
0f:13:00:ac:9d:79:e5:ed:aa:73:92:09:86:3d:54:
35:15:c4:d5:a9:cc:19:c8:5d:66:79:f6:45:63:11:
56:47:29:ca:ad:48:3e:85:70:2c:88:a6:fb:aa:32:
0a:19:78:40:34:fc:71:7c:bf:7b:1d:2c:0b:9f:fa:
0a:25:e4:00:36:a8:2c:15:e7:dc:5d:34:5a:8f:47:
f8:7b:fa:92:20:9c:09:8c:82:63:af:6a:b1:4a:5e:
36:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:36:DB:FC:DB:A3:55:7D:EB:E0:0F:28:8F:FA:7D:A0:C0:C2:4F:3B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_jbb_NujVX3r4A8oj_p9oMDCTzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.94.0/24
91.92.26.0/24
Signature Algorithm: sha256WithRSAEncryption
02:66:ac:af:01:9c:a7:cd:0c:e6:9c:45:c9:42:22:7f:d6:fb:
69:f3:a8:e6:10:a4:66:83:d3:d5:00:1a:c2:0c:5e:a8:4c:5b:
51:df:85:ba:4b:44:48:46:56:d6:54:8a:5b:2e:45:d8:60:99:
f3:52:55:4f:1b:c6:ef:fc:76:80:d0:27:97:34:04:94:fa:b6:
50:fc:0b:4c:47:28:f3:2c:f7:9b:37:ba:bb:b9:99:ae:79:91:
87:de:05:f2:51:07:c5:4a:16:3b:93:f6:66:0e:04:4f:a2:75:
75:b7:14:9f:cb:ee:50:d7:c5:95:49:03:58:4b:a5:aa:25:d0:
13:ac:90:24:cb:ae:8f:6a:b9:e6:7d:87:ba:ed:e4:90:41:2f:
61:6b:03:b0:c1:54:31:c6:c3:2e:f5:ea:b0:73:f7:40:72:cd:
8d:f8:26:3e:6e:9b:61:02:c4:3e:72:ce:b9:30:e7:64:d5:9f:
23:c2:61:6e:4b:54:ce:13:4f:60:35:28:fc:29:df:e9:08:42:
db:12:9d:63:f5:ac:c7:a7:23:af:a4:f5:e1:84:34:8e:e9:a8:
45:f3:17:de:52:e5:af:89:64:26:33:b9:ca:7d:b4:69:13:cb:
c0:39:40:4f:6f:2c:71:02:eb:31:f7:41:9d:6d:45:09:9f:1e:
14:2e:76:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 09:35:55 2024 by rpki-client on console-ams.rpki-client.org