Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/Jpy3Te4DITbQGvQgfnZQllmujls.roa
File: Jpy3Te4DITbQGvQgfnZQllmujls.roa (raw, json)
Hash identifier: juZq26v2FW7Y1r8NIO+wdZSQx4c7Kb+W7qO4wc2hbtY=
Subject key identifier: 26:9C:B7:4D:EE:03:21:36:D0:1A:F4:20:7E:76:50:96:59:AE:8E:5B
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 018A64BE9BD9A1B796BA02B74E823806D35E
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/Jpy3Te4DITbQGvQgfnZQllmujls.roa
Signing time: Tue 05 Sep 2023 09:48:47 +0000
ROA not before: Tue 05 Sep 2023 09:48:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 94.247.139.0/24 maxlen: 24
212.24.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Oct 2023 09:55:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:64:be:9b:d9:a1:b7:96:ba:02:b7:4e:82:38:06:d3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Sep 5 09:48:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=269cb74dee032136d01af4207e76509659ae8e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:27:88:d8:a4:2d:02:3a:2a:07:14:1d:af:ad:
b3:de:96:63:81:7b:73:be:83:05:a5:2c:9f:3d:35:
19:b4:09:6e:27:d9:2f:e2:be:4b:6c:f0:8e:b9:71:
8a:d6:d7:80:b1:60:2b:c5:12:bf:ff:45:b6:b4:69:
6e:55:82:ff:de:e6:54:72:d7:fd:da:0f:60:27:66:
8a:70:3f:71:1b:fa:31:75:57:5d:bd:1c:84:e0:1f:
40:77:ae:db:ea:5b:ac:16:f7:3e:8c:80:c8:27:e2:
ce:91:91:51:9b:35:94:5d:45:06:34:64:64:2f:a3:
8c:f8:2b:4f:39:14:5b:7e:f9:6b:2b:9c:72:f1:4e:
74:ea:a3:37:92:ff:e9:3c:a5:23:cb:6c:cc:49:a2:
cf:a5:46:ed:eb:5d:3f:17:e7:3d:2d:51:a6:6a:c5:
9d:81:dd:cc:84:85:57:b4:ca:36:f2:84:4d:63:79:
46:7d:51:2a:1a:6d:91:f1:d5:c8:0d:55:7e:93:4b:
e1:67:87:97:58:ff:93:4c:1a:54:a4:e0:42:e5:a5:
6d:ac:d9:fe:8c:7e:65:04:9d:a0:4d:a7:ca:04:eb:
b7:1c:12:1a:10:44:a4:91:c7:41:ef:b1:a0:a4:88:
52:aa:ca:2e:d1:0f:b5:6a:75:e0:cb:c1:3b:0e:be:
8c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9C:B7:4D:EE:03:21:36:D0:1A:F4:20:7E:76:50:96:59:AE:8E:5B
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/Jpy3Te4DITbQGvQgfnZQllmujls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.139.0/24
212.24.113.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:7b:dd:25:7d:f4:db:21:93:45:3d:62:e1:d2:b6:42:36:e9:
b5:65:32:4a:c8:b6:35:fa:85:44:c3:27:37:2c:d2:ff:fb:13:
db:80:8b:b3:8f:10:b7:25:11:b8:20:ca:87:53:84:c5:29:fb:
01:fd:49:63:76:c2:be:81:b7:74:ac:e6:73:ac:24:4d:a9:c6:
d7:88:54:de:fc:27:ce:17:a7:0c:ee:dd:38:bf:80:e6:9e:7e:
c5:10:1f:35:46:b5:df:48:85:60:76:27:e9:5b:dc:b3:ac:5a:
c2:c2:01:c8:e7:c3:3a:99:10:2c:0d:f6:e1:ea:54:a6:af:48:
19:cd:71:9f:9d:28:48:0e:83:a3:22:c7:b3:32:84:68:b9:fd:
85:1e:a3:7c:99:bc:9b:f5:6b:35:cc:b7:10:97:30:36:8e:a7:
b3:3c:36:75:11:bd:83:af:9a:5e:5b:73:f1:16:a0:a3:a5:b1:
bc:2c:56:5c:af:59:9b:8c:17:82:59:03:62:83:ed:7f:79:d2:
79:c5:9f:2d:34:df:b4:db:1c:e3:1e:36:4c:13:98:7a:be:28:
96:65:63:5b:e3:fb:ff:ab:24:3e:ba:20:44:1f:af:d2:12:75:
cf:11:ac:58:e0:2b:46:45:38:3c:ea:9e:bc:b9:2b:ea:8b:20:
31:6e:97:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:24 2024 by rpki-client on console-ams.rpki-client.org