Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/JpmzzJs9Ef4csFlVKgLYm665H30.roa
File: JpmzzJs9Ef4csFlVKgLYm665H30.roa (raw, json)
Hash identifier: 2S2E8FHPCP8G0TxmNlok3h+F5ekOnnVi/AH2z0aDLWc=
Subject key identifier: 26:99:B3:CC:9B:3D:11:FE:1C:B0:59:55:2A:02:D8:9B:AE:B9:1F:7D
Certificate issuer: /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Certificate serial: 01856D2F451E002A51C081FE6B98AF8F6CF4
Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/JpmzzJs9Ef4csFlVKgLYm665H30.roa
Signing time: Sun 01 Jan 2023 11:54:52 +0000
ROA not before: Sun 01 Jan 2023 11:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49010
IP address blocks: 185.147.144.0/22 maxlen: 22
91.236.210.0/23 maxlen: 23
2a0a:5400::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:45:1e:00:2a:51:c0:81:fe:6b:98:af:8f:6c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Validity
Not Before: Jan 1 11:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2699b3cc9b3d11fe1cb059552a02d89baeb91f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:78:bb:d1:0e:e2:81:3d:98:dc:8e:00:a7:d4:
c3:cf:20:f5:aa:5a:bb:81:5f:bd:7f:8d:dc:3c:b6:
d4:7a:32:4a:14:08:67:4b:c6:11:63:1e:9a:1b:9f:
9c:d4:6f:99:85:29:03:88:00:71:7d:33:9b:b5:3d:
6c:a7:67:b5:32:d8:af:13:14:48:a4:1b:b2:1a:b3:
94:f7:76:66:53:5c:0f:35:e8:bb:cc:94:23:db:7d:
2c:61:12:a6:73:07:2c:7d:f5:09:af:11:53:48:6f:
0c:23:47:27:49:3e:5c:ab:db:20:6b:42:4c:67:b4:
ee:8a:1b:d1:82:aa:b5:85:c3:1a:f4:bf:9d:77:3f:
6e:a7:31:63:23:c6:68:49:7d:ea:05:74:22:08:b4:
ed:51:da:46:89:76:94:d5:1d:e3:8c:cd:61:da:b5:
09:37:62:56:30:6f:5b:e5:f3:6c:d5:5a:c1:d2:ce:
b1:d0:8f:d0:cb:03:9b:c2:8d:69:59:6d:f2:22:06:
6f:c5:10:1c:b1:3e:81:ff:3a:b7:57:4f:fd:d9:7c:
94:8a:17:e0:c0:0d:f0:18:6f:19:1c:96:30:ea:51:
e7:8d:ff:34:2d:c2:02:c9:c1:96:d2:0c:f6:fa:98:
75:1a:35:48:cc:e6:d7:02:cf:1e:aa:1f:35:03:32:
58:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:99:B3:CC:9B:3D:11:FE:1C:B0:59:55:2A:02:D8:9B:AE:B9:1F:7D
X509v3 Authority Key Identifier:
keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/JpmzzJs9Ef4csFlVKgLYm665H30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.210.0/23
185.147.144.0/22
IPv6:
2a0a:5400::/29
Signature Algorithm: sha256WithRSAEncryption
30:fa:0a:b2:78:c2:a2:62:2e:4b:71:39:6c:d6:0c:ba:2e:a1:
d3:75:e9:9b:57:dc:27:c7:c3:46:72:50:59:e1:95:55:7e:9d:
32:4f:92:2d:42:94:d3:56:c9:8f:01:1d:c3:eb:16:c3:83:c8:
c1:c1:f8:05:61:7a:7a:4e:e9:66:3d:fb:35:01:3a:44:79:66:
02:b1:8b:79:17:d7:1a:30:21:f3:40:9d:cb:af:39:1e:43:11:
00:5e:a6:f6:b0:ae:ae:34:6b:2d:8f:2c:c7:c1:53:ac:ff:7b:
6d:39:fe:3e:e1:f7:c9:7c:cb:98:87:a4:51:2e:62:30:67:cd:
f5:66:62:0f:0a:cd:63:d4:c6:d3:0d:bf:c2:c5:e9:39:a2:85:
ab:8e:c0:71:8f:7a:8f:76:7a:78:96:dd:5f:99:ce:53:43:aa:
8e:79:dd:77:9e:21:38:8b:57:2d:27:71:04:8f:23:e6:ed:5b:
c7:0b:e0:31:c7:9f:79:6a:c8:e4:53:7e:b9:79:09:ee:56:6d:
8c:c1:f5:dc:f8:cd:40:b1:6c:c8:a7:97:45:87:24:bd:2a:5f:
4b:3e:ed:20:68:cd:95:e0:33:d2:8a:c3:a3:a9:f4:7a:e5:41:
0a:9d:be:9c:98:e4:ef:70:d3:3d:14:38:d1:40:59:42:31:4b:
84:99:d0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:19 2024 by rpki-client on console-fra.rpki-client.org