Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/jueaSZczvC8FJ60GSkUF8deIj-c.roa
File: jueaSZczvC8FJ60GSkUF8deIj-c.roa (raw, json)
Hash identifier: u9PFZhGpyKjT0zIZl3J4+74yqJKKwQ6cR2vXKVeQaRw=
Subject key identifier: 8E:E7:9A:49:97:33:BC:2F:05:27:AD:06:4A:45:05:F1:D7:88:8F:E7
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 01856FDDC0813560A1B92116675FCAB5DBA5
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/jueaSZczvC8FJ60GSkUF8deIj-c.roa
Signing time: Mon 02 Jan 2023 00:24:41 +0000
ROA not before: Mon 02 Jan 2023 00:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 89.251.12.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:dd:c0:81:35:60:a1:b9:21:16:67:5f:ca:b5:db:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Jan 2 00:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ee79a499733bc2f0527ad064a4505f1d7888fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:65:52:5a:70:41:57:0b:02:2c:85:62:40:d2:
65:a6:25:7c:16:9c:5d:30:61:4d:17:1d:b9:07:f1:
1b:38:5f:13:0f:78:71:e5:39:1b:8d:b3:c5:18:21:
78:45:25:95:54:d7:5b:d9:85:5f:c7:2a:4f:b2:85:
e6:e7:41:27:5f:96:b6:90:f1:03:3f:f4:aa:07:66:
28:d0:f3:ef:89:8a:8e:04:52:d6:76:86:80:3a:94:
d5:23:3f:25:fc:83:6f:f2:d9:eb:a8:32:ed:9b:cb:
eb:2f:cd:38:cb:4a:56:94:de:02:ba:8a:09:6c:27:
0d:62:90:c6:d1:62:2c:81:7d:d3:25:fa:5d:8d:a5:
9b:d5:9a:46:b1:0d:00:0d:f8:d4:34:55:52:2a:54:
ad:ef:53:a0:69:03:fb:40:34:3e:17:0c:e9:55:2a:
51:87:6d:90:37:c6:20:1d:30:82:94:2f:e2:db:50:
df:57:d5:68:19:cf:7d:be:f9:73:86:61:6e:9a:c2:
73:15:c7:c6:26:9b:f8:82:d2:e1:ce:82:9f:ad:65:
f2:4f:fd:16:1b:81:4a:2d:25:a3:b7:99:c5:42:58:
3a:87:c5:9f:df:01:3c:aa:db:70:f3:80:4b:5d:ae:
51:08:39:59:1a:cd:26:bc:c7:6f:21:25:d5:aa:7f:
39:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E7:9A:49:97:33:BC:2F:05:27:AD:06:4A:45:05:F1:D7:88:8F:E7
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/jueaSZczvC8FJ60GSkUF8deIj-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.12.0/22
Signature Algorithm: sha256WithRSAEncryption
79:10:7c:d3:31:77:21:69:13:ad:fa:a6:8f:12:30:c4:57:41:
03:9b:97:b8:ca:c1:02:4d:4b:02:a2:6a:19:af:6f:43:e5:de:
77:5a:60:8a:b0:b2:e4:61:1a:cd:48:b8:3d:0b:2b:0d:85:32:
0b:27:6d:78:a5:ca:ba:52:5a:ee:1c:d4:0e:4f:70:ad:bd:54:
40:ea:97:e0:dc:a5:c8:1a:81:3e:98:b5:ed:8d:94:09:91:d8:
fa:9f:db:89:25:7f:3b:d4:91:a8:e6:3a:62:15:4f:b6:1d:f2:
c5:64:25:f1:9e:9c:b1:6f:54:08:8c:f1:10:1b:5f:36:c9:de:
b5:6c:44:51:b8:11:fc:08:09:3f:26:d6:70:66:41:f0:b1:2d:
35:3b:7f:ee:c4:63:de:bc:fe:5e:6d:41:40:e2:21:6c:76:6c:
82:cb:c5:0a:a0:32:43:3e:aa:ad:e9:29:62:8b:3d:87:42:f5:
ef:e4:60:aa:b6:43:d0:a1:fd:56:48:72:96:57:90:8e:3f:80:
80:28:36:4f:db:5b:c4:f7:47:67:fc:d0:f8:2d:0a:2b:e3:f1:
d1:a0:37:69:12:12:6c:ea:a5:fb:81:c5:ad:e5:5b:6e:b8:71:
fe:f1:8c:75:88:be:b8:58:b4:2a:49:f8:2a:a7:17:81:b0:c7:
d3:f6:15:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:43 2024 by rpki-client on console-ams.rpki-client.org