Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jeyl-K3jlkAVNweW2O8hCAS0Wmk.roa
File: jeyl-K3jlkAVNweW2O8hCAS0Wmk.roa (raw, json)
Hash identifier: vPCy+QH1Lbonm76A9pNYBe6sQH4ZaqOBi1/9gFcDFEw=
Subject key identifier: 8D:EC:A5:F8:AD:E3:96:40:15:37:07:96:D8:EF:21:08:04:B4:5A:69
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0190D98485978BAE6ED3BD17039230DDDC2A
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jeyl-K3jlkAVNweW2O8hCAS0Wmk.roa
Signing time: Mon 22 Jul 2024 08:17:38 +0000
ROA not before: Mon 22 Jul 2024 08:17:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 89.251.20.0/24 maxlen: 24
109.122.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 01:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d9:84:85:97:8b:ae:6e:d3:bd:17:03:92:30:dd:dc:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jul 22 08:17:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8deca5f8ade3964015370796d8ef210804b45a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:91:ba:ad:38:c9:76:b8:f6:85:45:a6:6b:
d2:f9:4a:85:6d:53:8e:56:ce:6a:26:98:4f:d3:97:
fd:3d:7e:0f:2e:13:d0:45:11:83:d1:b5:a0:87:56:
bb:f9:99:b6:3a:2d:0a:d9:35:a9:59:c0:19:72:f3:
d5:bc:06:93:f5:fb:53:70:af:c9:8a:25:e0:e8:ac:
a4:b2:e7:42:26:01:21:82:24:4a:16:c0:75:a3:4e:
a2:0c:31:c4:96:bf:40:78:3d:16:20:ad:0a:ef:bb:
b3:ed:4b:03:d8:5e:07:36:a8:da:51:df:75:30:a8:
bd:0b:81:23:72:fa:4d:d3:62:d9:48:5c:0b:7c:cc:
d0:26:e8:23:5a:2f:4b:6e:61:6c:3c:2f:7f:8e:d8:
d1:45:76:7a:8c:05:f6:1f:b2:d0:05:cf:fd:3a:cc:
89:60:81:94:d6:d7:01:93:52:ea:d6:ca:fd:61:50:
97:f3:22:02:dd:93:a9:09:86:1a:e1:3d:ed:a6:a7:
c9:4b:63:22:a8:ef:22:18:2a:57:95:da:3b:40:ca:
3d:a9:36:64:1b:0b:72:f3:40:09:79:0b:ff:9c:e6:
23:cc:91:0c:e0:e4:ac:61:d0:b4:8d:ca:b9:cb:d4:
97:d3:30:67:47:56:75:f5:2a:1a:5c:65:7d:8d:f7:
de:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EC:A5:F8:AD:E3:96:40:15:37:07:96:D8:EF:21:08:04:B4:5A:69
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jeyl-K3jlkAVNweW2O8hCAS0Wmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.20.0/24
109.122.44.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ae:7d:0a:e7:a2:ff:94:27:60:31:e4:68:24:ff:8b:91:a7:
62:0a:74:c3:93:e5:b2:e8:5c:61:34:9b:ca:3a:9e:ed:16:0b:
31:d3:47:f1:94:02:71:e6:4a:2d:d9:5e:27:28:8b:44:aa:02:
63:9c:83:18:62:3f:1f:24:41:d8:9b:eb:c9:cf:91:f7:2c:2c:
07:f1:4f:eb:cc:9b:e1:fd:27:be:0e:bd:8d:32:ac:1a:8a:16:
9f:11:67:a7:60:85:f0:a0:f6:2e:cb:25:45:2b:b9:03:1f:4e:
55:a5:6f:a3:a5:b0:5c:d3:19:fa:e1:e6:77:1e:f1:1c:2e:fa:
d4:e8:c3:f8:01:12:01:48:48:4b:9f:de:9b:f4:b4:d9:5f:b7:
51:c9:71:c3:05:62:4d:22:37:5e:44:61:b7:3b:45:da:67:9e:
f6:b4:a1:c9:a2:97:d2:7e:84:e4:41:46:b1:64:99:e1:37:be:
2e:82:e4:01:b2:7b:67:93:1b:d2:4c:ce:5f:40:81:b9:c6:a9:
d1:83:de:3c:79:84:c5:87:b9:24:f0:f7:bc:0a:36:4a:f9:cb:
62:c1:05:e6:1b:28:ec:f5:92:ec:01:76:ef:2d:37:73:e7:f8:
df:d8:e4:ca:d3:c7:0b:f1:2e:c3:9f:56:b7:a3:0b:ac:b1:46:
46:b8:dc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 03:16:19 2024 by rpki-client on console-ams.rpki-client.org