Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/JYS7nZmcT1VM318JV0RPfVMySUI.roa
File: JYS7nZmcT1VM318JV0RPfVMySUI.roa (raw, json)
Hash identifier: 1q5XN0Ig9sN5OAv81+d//kExYsuTi3bx/7AdxtCX9dA=
Subject key identifier: 25:84:BB:9D:99:9C:4F:55:4C:DF:5F:09:57:44:4F:7D:53:32:49:42
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 0188F9196EC530773476D36A452CF2D4FE26
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/JYS7nZmcT1VM318JV0RPfVMySUI.roa
Signing time: Mon 26 Jun 2023 19:06:13 +0000
ROA not before: Mon 26 Jun 2023 19:06:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.23.80.0/24 maxlen: 24
89.23.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jul 2023 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f9:19:6e:c5:30:77:34:76:d3:6a:45:2c:f2:d4:fe:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jun 26 19:06:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2584bb9d999c4f554cdf5f0957444f7d53324942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:cc:b0:58:9c:d2:ae:b5:f5:03:ea:8a:cf:
2f:f0:30:4c:db:cc:cc:1d:c8:66:a8:86:89:8e:59:
ee:b2:03:33:b9:47:c4:c6:f6:15:ac:6a:59:05:f0:
73:a0:49:44:bf:54:87:33:a4:bf:6c:b7:c4:07:6c:
9e:96:6c:76:c9:fc:bc:cd:f5:16:66:46:bd:3c:93:
c8:0a:1d:c7:3a:ed:25:6a:bc:fe:ef:ef:5a:28:27:
5c:5f:8c:de:fc:a2:12:9c:08:49:12:94:eb:b8:e3:
83:66:ae:35:91:a4:3b:b4:11:67:59:1c:f0:1e:94:
41:ad:33:bc:a0:00:41:e6:12:53:7d:91:39:36:73:
98:4b:31:8b:63:f8:05:63:f3:af:aa:f6:99:10:d0:
f8:8b:e4:c5:48:48:aa:68:a0:33:fb:80:7f:1e:88:
c6:18:69:d9:71:9f:1a:1b:37:c9:46:f3:a2:c5:f8:
60:ef:12:dd:9a:4d:e1:e4:ac:f2:64:f3:23:f0:c7:
67:00:c1:8a:84:54:1d:03:8f:f2:0a:b7:21:7c:ba:
43:d7:e5:2a:25:22:ce:99:8b:18:1b:ce:50:b5:f3:
18:f1:39:65:bd:97:df:6c:43:4d:59:ed:c5:e5:4b:
32:ad:87:66:a3:f3:4f:e9:b3:50:4e:68:a5:ca:4b:
40:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:84:BB:9D:99:9C:4F:55:4C:DF:5F:09:57:44:4F:7D:53:32:49:42
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/JYS7nZmcT1VM318JV0RPfVMySUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.80.0/24
89.23.87.0/24
Signature Algorithm: sha256WithRSAEncryption
68:4a:9b:62:e5:f0:5b:91:29:5b:bb:30:9e:77:94:40:2a:b0:
59:b3:46:ed:57:6c:70:fa:ec:5e:2a:9d:9a:4b:c6:41:be:b0:
7e:2a:1e:c6:da:71:77:90:5e:fe:a2:44:7f:5f:44:6e:5b:01:
b1:58:29:90:b8:85:e3:fa:4e:22:bc:98:a7:7f:46:e1:cf:14:
4a:43:39:ee:b3:7e:01:73:f0:19:eb:a3:e9:3c:3d:c6:f5:eb:
58:3f:49:eb:af:3a:6b:5b:69:c0:7d:b3:22:97:79:87:c5:05:
22:f1:b8:41:13:93:75:c2:6d:99:ef:00:a1:c7:83:2a:bd:02:
8c:fa:75:81:54:13:a4:e5:79:ec:af:d2:bb:90:ef:5d:0a:04:
dd:da:ac:df:09:8b:df:b6:bd:ac:17:01:c9:98:bc:30:0a:75:
1f:09:25:d3:fc:6b:3e:9d:48:69:76:b2:47:f9:26:61:77:f2:
67:ef:2a:1d:6d:52:2c:0e:07:ac:78:f9:05:af:9a:a8:0b:55:
39:f3:53:7a:1c:cd:ff:f9:c7:c9:44:25:4c:f1:eb:0e:b3:b8:
b6:20:80:b1:21:e2:3a:7e:a6:28:ab:04:ba:f3:d4:af:5c:ae:
f6:25:01:c2:fa:5a:29:71:70:d3:8b:a2:d6:d9:4c:58:6b:85:
f6:7b:fb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:41 2024 by rpki-client on console-ams.rpki-client.org