Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/jJPY22PltUgR_rG-mGCSimQswp0.roa
File: jJPY22PltUgR_rG-mGCSimQswp0.roa (raw, json)
Hash identifier: ZjYMGaaMdwj1816lIEk1HBSEEor+akZL3Yt29ab/9rI=
Subject key identifier: 8C:93:D8:DB:63:E5:B5:48:11:FE:B1:BE:98:60:92:8A:64:2C:C2:9D
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF9695352483D8A5C0E78949E60E336
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/jJPY22PltUgR_rG-mGCSimQswp0.roa
Signing time: Mon 02 Jan 2023 00:54:54 +0000
ROA not before: Mon 02 Jan 2023 00:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29286
IP address blocks: 82.103.105.0/24 maxlen: 24
195.34.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:69:53:52:48:3d:8a:5c:0e:78:94:9e:60:e3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c93d8db63e5b54811feb1be9860928a642cc29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d8:23:72:cd:1e:c2:f3:e7:d9:78:64:40:db:
a8:2d:43:aa:03:35:2d:1c:ea:c6:a4:77:24:d5:f4:
89:28:0c:ec:7a:3c:bb:b8:b4:a5:71:03:57:6b:1a:
e0:39:8e:a4:1f:88:43:0b:9c:a6:be:96:71:fb:0d:
b5:72:55:42:22:40:c1:9f:f1:6b:20:03:7a:37:2a:
91:3c:37:94:35:ba:14:e2:a0:b1:e4:6a:eb:22:b0:
12:ac:cb:83:c2:db:41:7b:eb:0e:0a:b1:0b:26:cf:
e1:c2:8d:b4:0a:e0:c6:71:dc:20:3d:30:98:7b:56:
cf:92:65:c3:48:ee:95:4c:f8:a9:87:c2:c5:f4:98:
52:89:1b:4e:ae:14:68:f7:d2:84:b1:9d:f4:a7:e0:
aa:32:02:a1:d3:85:87:1e:e9:58:e7:84:b3:e7:fe:
51:f8:01:55:ba:fc:22:24:5a:c6:ca:f8:82:fe:bb:
33:2b:0b:44:2e:da:83:94:5c:d1:6c:d4:b7:43:8b:
e5:4e:a6:0a:57:1c:f6:96:1c:03:a0:67:66:d7:7a:
8d:e4:98:7b:c7:a9:55:29:12:b0:b5:69:09:b2:ba:
56:34:13:13:7b:de:66:3f:b5:3e:ef:88:94:36:a4:
50:f2:cd:75:7a:ff:d1:62:a6:15:2b:ff:74:37:78:
a6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:93:D8:DB:63:E5:B5:48:11:FE:B1:BE:98:60:92:8A:64:2C:C2:9D
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/jJPY22PltUgR_rG-mGCSimQswp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.103.105.0/24
195.34.109.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:f6:7c:3f:9b:68:66:26:74:95:40:6a:b6:04:ba:2e:66:72:
33:14:15:01:d5:35:2b:2a:68:30:2c:b9:c8:00:2a:ce:a3:f4:
ca:8e:5d:0a:16:29:ff:42:96:bc:7d:b5:92:0a:35:64:54:f4:
58:0c:8d:4e:7b:2b:60:11:c0:51:e1:7e:d2:f2:04:24:23:02:
29:6e:a0:99:78:9d:cf:89:36:a1:ff:bd:4a:87:fc:44:ff:a1:
9f:08:89:c0:70:12:84:fc:18:5b:43:96:b7:41:ae:a0:4d:57:
6a:b4:28:7c:61:8d:41:bc:bc:ed:5b:93:5a:0c:52:36:9d:67:
16:c4:7f:9e:88:d9:ce:7a:ef:7e:cb:12:44:d7:a2:b4:40:59:
76:c4:7b:3b:d8:d8:44:f6:37:1b:4f:d2:0c:57:38:76:01:e3:
fa:a2:70:69:87:33:cc:f9:e9:0f:c1:f0:84:54:c5:1d:74:c7:
c0:10:e1:36:15:82:43:86:3a:fc:eb:41:c7:f5:15:6d:d4:b4:
b5:39:f4:9b:fb:21:e0:f8:d4:50:45:d7:a3:bb:6b:93:0c:0b:
bc:a0:95:33:75:fa:6d:cc:8f:29:3c:5b:7f:ba:f4:a6:80:2d:
7f:20:f2:97:09:7a:f2:f3:04:d7:d2:c6:6b:f1:7b:c6:e7:89:
8a:5b:fa:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:44 2024 by rpki-client on console-ams.rpki-client.org