Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/jkGjSyMg19Zum9J7QpuCu95G8DE.roa
File: jkGjSyMg19Zum9J7QpuCu95G8DE.roa (raw, json)
Hash identifier: 9KCHVqqZJFnQLrQaH7y19MFDfNziy+Aki8YGLH0Aocg=
Subject key identifier: 8E:41:A3:4B:23:20:D7:D6:6E:9B:D2:7B:42:9B:82:BB:DE:46:F0:31
Certificate issuer: /CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Certificate serial: 01857082D26CD7F883741AC97613CF925050
Authority key identifier: EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/jkGjSyMg19Zum9J7QpuCu95G8DE.roa
Signing time: Mon 02 Jan 2023 03:24:59 +0000
ROA not before: Mon 02 Jan 2023 03:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42846
IP address blocks: 104.247.162.0/24 maxlen: 24
104.247.161.0/24 maxlen: 24
104.247.160.0/24 maxlen: 24
104.247.165.0/24 maxlen: 24
104.247.164.0/24 maxlen: 24
104.247.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jan 2023 13:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:d2:6c:d7:f8:83:74:1a:c9:76:13:cf:92:50:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Validity
Not Before: Jan 2 03:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e41a34b2320d7d66e9bd27b429b82bbde46f031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5d:ee:0c:f9:14:98:23:64:71:d0:ff:07:54:
8b:68:46:f9:e3:05:4f:67:ec:96:a9:02:db:08:8b:
7f:73:28:39:0e:99:9e:b2:5e:b1:e4:bb:86:5e:a1:
52:fa:87:cb:f0:62:3c:59:eb:0e:30:5c:89:1b:51:
94:fb:6a:02:11:37:59:37:58:8c:23:89:6a:9c:d1:
fc:e5:c4:5a:fe:82:ff:ea:89:29:63:60:9e:01:dc:
73:ac:96:7f:00:2a:aa:6f:05:b4:f5:fc:05:df:ce:
7f:dd:93:4b:5d:bd:52:c3:61:16:29:d3:8d:9b:e1:
b1:57:7b:ad:4d:9d:9a:ad:99:74:11:64:4e:c7:1d:
38:83:12:51:6e:78:62:3e:cc:83:02:9c:12:ae:0c:
f6:bf:c2:d7:de:7c:55:fa:d0:7b:53:4d:95:ff:06:
0f:97:46:1c:50:fa:c3:6d:7e:4a:9f:1d:7b:1b:46:
37:a4:63:8a:88:4c:aa:3a:2e:81:8f:2d:4c:21:91:
94:98:8d:8d:7e:6c:b6:47:d8:6d:57:12:9f:e7:43:
5f:1d:a8:5c:69:c2:bc:09:71:b4:0f:34:73:01:c7:
5c:13:ed:ec:91:e9:f3:92:d0:5e:69:42:b2:da:3d:
42:ce:53:46:ad:c4:c6:86:62:cb:0d:fe:12:51:38:
39:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:41:A3:4B:23:20:D7:D6:6E:9B:D2:7B:42:9B:82:BB:DE:46:F0:31
X509v3 Authority Key Identifier:
keyid:EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/jkGjSyMg19Zum9J7QpuCu95G8DE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.247.160.0-104.247.165.255
Signature Algorithm: sha256WithRSAEncryption
32:16:7e:b9:52:65:55:04:51:f3:de:a1:3d:68:37:fd:be:2b:
fd:05:c5:55:35:2e:3f:6c:e9:d3:50:23:0f:4c:06:00:cb:ec:
cb:8f:f1:f3:32:1a:85:13:d7:ab:ed:1f:4e:7f:75:af:88:3a:
c5:3b:c5:f6:a3:f8:c4:a3:28:20:51:67:29:da:ac:01:26:de:
c8:82:58:8f:ce:fa:bf:fc:1f:0a:9a:14:c1:ec:02:fd:58:67:
da:38:fd:e4:22:1a:1a:95:81:1c:47:e0:37:8c:0e:aa:c8:86:
6f:6a:ab:12:bb:3e:23:23:71:25:37:8d:fa:2d:99:3a:2d:aa:
fd:20:ee:cf:a5:d4:b3:a5:44:90:31:6d:ea:38:fb:06:ac:db:
fe:42:9f:48:e8:16:23:0e:11:4c:d6:68:cb:a7:cb:64:9f:dd:
af:cb:ec:9f:2d:b1:2f:b6:a0:bd:ee:bf:e7:fd:16:76:67:47:
b7:c8:c8:12:53:05:b4:f5:de:43:6f:1e:b9:3c:f5:bb:87:67:
4d:a8:f8:42:00:67:5c:6f:f5:df:16:81:70:08:2d:22:c9:6b:
57:df:1b:2f:3c:36:c8:88:8b:e6:f2:58:f8:ac:0e:c9:c2:91:
79:b9:34:14:12:b0:17:2c:b1:65:72:dd:31:45:dc:c3:60:cc:
17:75:fb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:55 2024 by rpki-client on console-ams.rpki-client.org