Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/JDENb-cNSX6YkZoqXy5tY6iDFok.roa
File: JDENb-cNSX6YkZoqXy5tY6iDFok.roa (raw, json)
Hash identifier: nRKkbqGXd0LSL3l7jdiaCs55QeUGJwBy5p+H9E1z4Tw=
Subject key identifier: 24:31:0D:6F:E7:0D:49:7E:98:91:9A:2A:5F:2E:6D:63:A8:83:16:89
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 0189F2EE1E1DF4BB98403CA8AA6472632866
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/JDENb-cNSX6YkZoqXy5tY6iDFok.roa
Signing time: Mon 14 Aug 2023 07:23:58 +0000
ROA not before: Mon 14 Aug 2023 07:23:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.23.91.0/24 maxlen: 24
89.23.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Aug 2023 22:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f2:ee:1e:1d:f4:bb:98:40:3c:a8:aa:64:72:63:28:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Aug 14 07:23:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24310d6fe70d497e98919a2a5f2e6d63a8831689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d9:e5:22:be:e4:0d:95:6a:02:e7:39:72:c7:
3c:c8:3d:b6:fb:77:84:37:40:8b:5c:17:2e:8f:2f:
22:45:27:10:df:96:4b:a0:d2:e7:b3:0e:5d:8e:0c:
f4:4e:95:86:b8:37:49:92:36:32:50:0d:80:d0:00:
8d:5b:b2:eb:3f:01:a1:89:7d:41:1e:14:07:92:fd:
11:29:2d:df:82:37:66:b0:d1:78:a6:47:56:dc:78:
8a:c7:4d:14:49:a0:17:c4:cf:1c:1e:0a:f6:0d:d0:
c9:36:c5:9d:5c:5e:0a:c4:16:59:5a:ec:3d:15:c9:
0d:10:d1:20:d3:2a:ba:c7:ff:ea:b9:9b:51:7f:96:
a2:62:eb:b4:2e:2e:80:d7:66:32:0c:ff:42:8a:27:
a4:72:9f:91:91:b9:59:75:16:c2:b5:0f:1c:2c:ff:
bc:e9:cd:53:dd:d1:5e:3e:2a:78:08:d2:31:be:f4:
b7:e6:62:38:d4:9a:ff:b6:32:ff:24:7f:d5:0a:df:
b2:5b:cc:33:0f:0a:fb:14:ab:47:93:41:a8:d9:5f:
63:26:78:5f:e5:da:39:cb:63:39:2e:11:4a:e5:2c:
f0:5c:f5:04:c3:68:81:fa:09:70:e9:80:79:1d:f4:
66:35:6a:0f:96:1e:ba:52:4a:9e:70:62:55:ea:74:
c0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:31:0D:6F:E7:0D:49:7E:98:91:9A:2A:5F:2E:6D:63:A8:83:16:89
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/JDENb-cNSX6YkZoqXy5tY6iDFok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.90.0/23
Signature Algorithm: sha256WithRSAEncryption
29:97:26:96:ef:44:3f:21:7e:40:5c:43:35:97:2d:4a:12:f2:
9a:24:03:df:8d:b5:53:54:04:18:fe:32:60:d3:85:31:f7:12:
c2:1d:c1:cf:9e:9e:fa:2f:ee:5d:58:68:98:46:95:b2:19:8f:
13:6a:a4:9a:24:76:2e:d2:46:64:1d:6f:f4:85:62:a9:66:a4:
6d:dc:db:eb:c1:35:f3:e8:a1:b8:27:d4:52:a5:c1:29:dd:0e:
c9:9b:5b:a8:49:75:67:b6:9b:ca:0d:c5:50:35:76:9a:2b:17:
c4:81:99:8f:56:7d:6a:02:ff:3b:c1:14:36:01:e5:85:ea:cf:
f5:4e:0d:f0:d0:1a:bd:9d:45:bb:df:43:49:67:9e:50:41:72:
1f:2b:b4:5b:a0:eb:72:57:df:d1:32:20:91:18:86:76:c3:3f:
e2:0b:d6:ce:2d:a0:9c:67:5e:ba:f2:c4:e4:29:56:a9:20:b0:
b7:51:a1:ba:56:38:6d:87:d7:8c:46:c1:ea:c2:0c:d1:04:5b:
2b:a1:02:da:e1:34:b6:6c:c0:6c:79:cb:10:8b:68:2e:cd:6f:
54:ed:b5:7b:2e:53:a2:a8:9e:78:bf:76:d4:52:d5:85:ab:ca:
fe:07:9a:80:6c:5a:1e:4f:79:99:bb:ae:12:23:70:56:e8:64:
d8:77:c9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:41 2024 by rpki-client on console-ams.rpki-client.org