Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/jam_kTYyUKr6M9E0B1ILHZ0LI3s.roa
File: jam_kTYyUKr6M9E0B1ILHZ0LI3s.roa (raw, json)
Hash identifier: SGVb5l+9pVwrwaLdjbD5DH6Hk599uC6HOkQMh/easV4=
Subject key identifier: 8D:A9:BF:91:36:32:50:AA:FA:33:D1:34:07:52:0B:1D:9D:0B:23:7B
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018C7AEAA1DDD3709934DDDF56E9DBBAFD55
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/jam_kTYyUKr6M9E0B1ILHZ0LI3s.roa
Signing time: Mon 18 Dec 2023 03:14:06 +0000
ROA not before: Mon 18 Dec 2023 03:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.31.232.0/24 maxlen: 24
81.31.242.0/23 maxlen: 23
81.31.244.0/22 maxlen: 24
185.84.160.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7a:ea:a1:dd:d3:70:99:34:dd:df:56:e9:db:ba:fd:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Dec 18 03:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8da9bf91363250aafa33d13407520b1d9d0b237b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a3:9e:e7:5a:27:9e:57:d5:3f:4a:79:dc:5d:
79:20:48:7c:ca:8b:e9:fe:b2:ec:60:f1:3b:36:a7:
cc:c8:54:d4:0a:f5:11:c1:ca:da:e4:ec:cb:06:dc:
cd:b2:e1:7d:fa:5d:e5:f8:f4:51:70:5e:16:5c:0d:
23:5c:8f:eb:dc:73:50:1b:53:9a:3e:a7:e3:f1:8b:
84:57:dc:ec:85:bc:08:eb:a5:15:bc:84:d5:e4:da:
1b:6e:0a:38:61:1e:e2:c1:2a:d4:ea:0a:69:a2:3c:
d1:55:b3:ac:73:dc:92:10:c2:b3:d6:49:3e:e3:81:
6c:1a:31:b9:ca:4e:c6:37:bd:51:50:5f:2f:4c:e2:
10:76:54:c5:e7:3e:29:cc:61:d9:fa:ae:77:00:07:
4c:9e:24:40:f6:4a:44:37:cc:c4:5a:e3:db:23:b7:
d9:f3:28:6f:8b:e6:2e:2b:77:bb:5c:ab:bb:05:78:
63:78:f9:1f:d4:4a:7e:9b:e9:ab:54:de:ee:b0:9c:
18:c4:11:cf:83:20:99:dc:4a:0b:61:32:88:9d:bb:
55:89:31:ae:05:a6:dc:95:a8:89:09:e3:c2:8d:56:
09:0a:6a:49:2f:12:cb:6e:a2:15:16:cf:39:d2:36:
41:3e:f6:33:06:25:2d:f1:4e:72:df:52:d9:c0:ad:
3a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A9:BF:91:36:32:50:AA:FA:33:D1:34:07:52:0B:1D:9D:0B:23:7B
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/jam_kTYyUKr6M9E0B1ILHZ0LI3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.232.0/24
81.31.242.0-81.31.247.255
185.84.160.0/23
Signature Algorithm: sha256WithRSAEncryption
87:1a:e1:8c:e7:4c:aa:eb:6e:45:c7:cd:af:ca:bc:f3:3f:1b:
e8:d1:b3:b5:f8:53:99:8f:14:d3:90:1d:5f:98:9c:ce:d9:18:
91:59:b8:e7:fa:23:6f:7c:fe:34:b8:04:16:f3:c6:e8:4c:de:
b6:93:ae:2e:03:9c:af:d1:6b:8c:c0:a3:27:80:2c:69:0f:b3:
73:14:a8:ae:66:bb:9c:ed:96:6f:de:3f:90:d6:f7:20:16:30:
1f:5d:d1:d7:85:3e:75:62:59:cf:e5:10:87:12:c0:a0:a7:29:
c5:67:fc:bf:9e:67:67:e9:3d:9d:86:eb:8c:95:0c:75:2c:99:
fc:2c:75:5e:b4:51:86:c7:16:bd:ac:0c:ad:07:0f:02:9e:17:
9c:cf:50:eb:b6:61:7c:46:57:00:04:94:17:07:76:16:c4:46:
80:66:9b:20:de:a3:4d:12:a5:92:bb:53:a1:6c:e5:d2:cc:aa:
ac:b0:19:06:dd:2e:65:d0:38:e8:95:a2:74:a6:e7:72:12:69:
d7:46:62:5c:1c:23:af:75:c1:d9:cd:a8:e6:42:54:89:fd:ec:
21:ee:0e:81:63:12:a5:fe:6e:9f:6e:3d:6a:37:ef:94:0b:09:
a7:ef:da:f5:57:0c:74:28:98:7a:64:5f:d1:46:84:34:66:5a:
30:d2:98:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 18 13:01:33 2023 by rpki-client on console-fra.rpki-client.org