Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/js-N_efFD2nZvRUS4_0SpvuQV9g.roa
File: js-N_efFD2nZvRUS4_0SpvuQV9g.roa (raw, json)
Hash identifier: AjGCZwWxmlW4MvinZw0hpimOTn9NK4r2qUQm4eqUpKc=
Subject key identifier: 8E:CF:8D:FD:E7:C5:0F:69:D9:BD:15:12:E3:FD:12:A6:FB:90:57:D8
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018938F2E7AF1C479C7F160F507239F8FB40
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/js-N_efFD2nZvRUS4_0SpvuQV9g.roa
Signing time: Sun 09 Jul 2023 04:39:50 +0000
ROA not before: Sun 09 Jul 2023 04:39:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.200.222.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
91.226.56.0/24 maxlen: 24
89.251.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jul 2023 19:59:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:38:f2:e7:af:1c:47:9c:7f:16:0f:50:72:39:f8:fb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jul 9 04:39:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ecf8dfde7c50f69d9bd1512e3fd12a6fb9057d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b5:24:46:2f:87:de:b4:90:52:2b:a2:61:55:
9e:fa:f5:f1:80:5a:01:dc:e6:82:7f:35:30:0e:00:
b6:87:15:6a:a5:a7:31:17:5f:a3:ed:f7:c7:e7:5b:
80:14:eb:ee:1b:67:10:c1:e1:63:c9:cf:22:94:b8:
db:aa:0a:a7:70:b0:d6:e1:a4:c0:59:78:b6:d2:cb:
a3:c6:50:f5:cd:c8:59:54:fb:05:e3:c8:3b:fb:5f:
fd:b7:d3:12:9c:a0:6a:28:cf:58:73:93:f4:ee:0e:
25:92:a2:0f:46:0b:7a:54:58:98:60:93:0f:ad:7f:
13:47:c2:a5:be:0c:73:77:97:a1:bf:81:2b:51:98:
1c:dc:9f:71:d2:c7:44:94:3b:0e:54:97:d5:e6:4c:
81:c3:3a:5c:de:2c:c9:a3:db:d1:d5:05:76:e9:8b:
49:87:c9:c0:c9:0f:89:78:31:d2:a2:1a:bc:f1:53:
4d:5a:13:ed:36:62:14:d0:49:3f:bf:44:03:c6:62:
c8:0d:72:f4:81:66:7d:a4:d1:f7:50:d0:4f:e4:4e:
6f:49:ea:61:48:4a:ae:39:f4:09:84:4c:8e:6b:60:
0e:2f:f4:1b:06:a8:dd:d7:ab:5f:4d:d7:c5:b1:4f:
07:1d:bf:27:eb:f2:f2:08:fe:b7:05:d1:63:42:ed:
f6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CF:8D:FD:E7:C5:0F:69:D9:BD:15:12:E3:FD:12:A6:FB:90:57:D8
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/js-N_efFD2nZvRUS4_0SpvuQV9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.21.0/24
91.200.222.0/24
91.226.56.0/24
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:7e:b6:70:d3:8a:3a:5d:8e:4d:a3:d3:df:bf:42:80:05:96:
55:7a:a4:8e:68:43:90:d8:e4:89:e1:7b:f7:c5:7b:4e:86:d7:
b8:4b:7a:20:22:79:67:c0:fd:32:7c:58:cd:38:ea:d6:a6:2a:
bc:6d:16:96:cd:ed:04:cb:dc:2a:90:4a:a2:d4:54:4e:23:90:
cc:60:83:a4:22:5e:7b:94:9e:5d:6d:c5:9b:56:95:49:0d:82:
8d:5d:4b:82:82:61:b4:26:93:1a:6c:7e:2f:9a:a9:0f:bf:df:
98:8e:6c:0b:58:99:37:da:62:81:a1:e1:9b:e2:5d:9c:d1:99:
d1:93:d5:08:8f:15:6c:94:ed:d0:88:61:94:4e:22:8b:19:31:
e2:c0:28:4b:95:f7:3d:2a:3c:35:01:da:07:4d:c3:ba:35:d3:
82:14:ca:84:13:18:ae:83:1d:f1:dc:c2:08:e3:3d:bc:ae:82:
1d:6f:f9:11:79:5c:a1:9c:36:c9:a6:68:8e:a4:fd:bd:34:e5:
48:5e:39:5d:91:a4:22:04:f0:02:86:d4:ed:f2:b6:d8:3d:42:
9e:ba:0e:57:c6:51:2f:9b:07:2c:99:ac:47:cf:97:23:8a:d0:
87:75:ef:ed:f6:dc:5e:cd:c6:f7:67:21:93:2b:3c:2d:ce:d0:
84:b5:4b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:37 2024 by rpki-client on console-fra.rpki-client.org