Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/JpyooFVg684clNzZYN38UK8UnSw.roa
File: JpyooFVg684clNzZYN38UK8UnSw.roa (raw, json)
Hash identifier: O2EhnTXeut6g7jbsTJ2ipoCBQmU03iXGcPqhRBqUEbo=
Subject key identifier: 26:9C:A8:A0:55:60:EB:CE:1C:94:DC:D9:60:DD:FC:50:AF:14:9D:2C
Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545
Certificate serial: 018B5BDDF9ADBABBA86E49F187F0EEC021A1
Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/JpyooFVg684clNzZYN38UK8UnSw.roa
Signing time: Mon 23 Oct 2023 09:29:15 +0000
ROA not before: Mon 23 Oct 2023 09:29:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48854
IP address blocks: 91.239.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5b:dd:f9:ad:ba:bb:a8:6e:49:f1:87:f0:ee:c0:21:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545
Validity
Not Before: Oct 23 09:29:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=269ca8a05560ebce1c94dcd960ddfc50af149d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b6:d7:fb:a7:ad:97:f8:79:0f:ad:eb:36:63:
4a:74:b4:ca:b0:23:3c:77:35:33:3c:83:dd:ee:05:
b6:8a:40:60:91:4e:7b:42:9e:e6:ef:92:cc:42:70:
31:27:1e:19:e9:da:de:2c:5d:82:bc:45:23:7d:40:
01:be:ab:fd:d7:2b:75:d4:19:dd:f1:b4:15:8b:38:
d2:f7:eb:bf:f6:d0:61:48:a9:6a:ba:76:a6:ff:20:
f3:97:b0:d0:a3:c4:d9:d0:00:83:87:4c:5d:18:9d:
0e:c0:fd:33:36:13:23:c2:4f:d3:34:07:a2:5e:9b:
e2:5c:42:87:cd:bd:61:36:41:a3:de:ec:76:90:d3:
80:97:7e:5b:44:0d:63:a0:b9:48:ee:b1:d7:c8:ee:
49:46:9e:69:2a:5c:97:c9:ce:59:7c:ae:50:d0:c7:
16:86:5c:14:e0:37:37:d0:dc:d4:e2:86:d8:82:40:
62:21:ff:16:f0:69:ae:82:30:0d:2c:ce:fe:dc:90:
95:3d:04:ed:c4:21:05:4d:57:8d:79:41:c3:f9:88:
ba:5c:be:8d:84:57:32:af:03:c7:49:44:ce:1f:a5:
d3:50:c1:49:7d:74:e3:40:68:ee:04:19:bf:ba:b2:
eb:ad:87:56:23:60:d0:9b:4e:6e:06:c7:5a:e2:43:
01:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9C:A8:A0:55:60:EB:CE:1C:94:DC:D9:60:DD:FC:50:AF:14:9D:2C
X509v3 Authority Key Identifier:
keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/JpyooFVg684clNzZYN38UK8UnSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.122.0/24
Signature Algorithm: sha256WithRSAEncryption
97:06:f7:f2:44:79:e4:77:7d:49:5b:17:58:0c:4d:23:4e:69:
16:69:27:7e:e6:d6:69:82:e5:d5:4e:b9:85:a3:ea:34:48:be:
88:da:d5:41:c7:a6:e6:b8:99:1d:82:d0:99:23:52:bd:b0:70:
80:8a:6c:96:58:99:7a:de:33:5b:24:42:af:8c:48:8a:22:93:
97:62:7b:48:eb:ee:0a:e9:66:65:38:5d:e9:8f:44:04:f2:7e:
6b:4d:9a:60:5b:bf:c4:9b:7a:65:0c:9d:7a:a9:de:f9:e6:11:
bf:50:dc:20:80:7d:e0:53:27:d3:85:85:fa:84:53:60:ad:65:
5a:31:ce:aa:39:a2:a7:86:c8:70:03:a1:4c:6a:96:2c:66:63:
fb:3c:7a:8b:67:93:da:cf:18:8b:37:3e:34:fa:cd:57:ac:f9:
4c:9e:a2:56:c4:9f:eb:42:b3:b6:e5:9a:67:ea:5d:a2:ff:40:
ed:71:37:c2:4c:65:81:de:05:38:77:af:81:e9:e7:2c:6a:e3:
22:6a:f1:f5:69:c4:e8:a9:62:75:29:fd:38:7d:25:e0:10:ab:
a7:29:d2:43:88:a1:13:17:b1:4d:8e:ee:61:8f:90:19:1c:a1:
46:19:cf:57:27:41:b8:fc:35:ab:15:bf:32:06:49:ba:70:63:
84:ea:8f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:15:55 2024 by rpki-client on console-ams.rpki-client.org