Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/C_JTBjIDu4g6LXBq_z1FDYxGmWw.roa
File: C_JTBjIDu4g6LXBq_z1FDYxGmWw.roa (raw, json)
Hash identifier: eU+rnBSWVzTsiHDm5RIDZ6/zbdPlP6iHtXhuHAFiMfc=
Subject key identifier: 0B:F2:53:06:32:03:BB:88:3A:2D:70:6A:FF:3D:45:0D:8C:46:99:6C
Certificate issuer: /CN=96344400396d0af4cb79e3c94666671b7b391f55
Certificate serial: 018CC3B6B5C1C4977CDAD30884108CA1B614
Authority key identifier: 96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/C_JTBjIDu4g6LXBq_z1FDYxGmWw.roa
Signing time: Mon 01 Jan 2024 06:29:40 +0000
ROA not before: Mon 01 Jan 2024 06:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16089
IP address blocks: 79.110.60.0/24 maxlen: 24
91.209.79.0/24 maxlen: 24
2a0c:3bc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 11 Jan 2024 00:22:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b5:c1:c4:97:7c:da:d3:08:84:10:8c:a1:b6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96344400396d0af4cb79e3c94666671b7b391f55
Validity
Not Before: Jan 1 06:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bf253063203bb883a2d706aff3d450d8c46996c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:24:3c:a0:5e:76:59:30:4f:c0:23:9b:6b:f9:
a2:e9:9f:e4:a1:e5:16:4f:08:b7:54:58:88:7e:4a:
51:97:c5:ab:72:07:7c:76:c3:bf:8c:82:e4:9c:be:
2f:7b:cf:b6:6b:8c:7c:b0:33:31:4d:dd:59:36:ff:
af:98:51:31:1f:6e:71:01:9f:f1:c6:f8:8a:81:f1:
3e:e6:fa:f4:84:c6:b0:30:1f:51:b3:dd:67:a2:0f:
18:e0:1a:1a:4d:f8:48:19:dd:f3:64:2b:d6:79:2e:
8a:83:84:cb:ae:b0:a9:4c:90:3b:09:26:8b:87:37:
a1:3f:0d:c4:1c:d0:35:3e:fb:0d:26:38:45:1d:81:
1b:14:49:f0:94:3a:98:52:03:10:93:1d:97:6c:91:
ab:31:3e:08:e1:71:96:0c:f3:60:02:63:6b:5a:65:
67:58:41:76:09:03:b9:00:92:42:e1:ed:c7:8d:22:
6e:93:dc:92:ce:df:aa:37:a6:9f:25:86:f5:77:2f:
d3:ee:b8:37:61:92:52:06:62:2a:41:38:bc:ab:d0:
55:d7:c6:c6:bb:3c:2c:ad:15:e3:8b:02:84:cd:cb:
7d:3a:e1:b8:ec:30:d3:f0:57:bd:94:e9:74:fe:08:
b8:1e:56:e1:ad:7e:31:20:4e:62:fc:69:63:a8:bd:
aa:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F2:53:06:32:03:BB:88:3A:2D:70:6A:FF:3D:45:0D:8C:46:99:6C
X509v3 Authority Key Identifier:
keyid:96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/C_JTBjIDu4g6LXBq_z1FDYxGmWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.60.0/24
91.209.79.0/24
IPv6:
2a0c:3bc0::/29
Signature Algorithm: sha256WithRSAEncryption
92:67:f1:9c:c9:8c:a7:5c:87:db:04:1a:de:ef:34:36:ff:3c:
07:c0:bb:57:2c:79:29:5e:1a:d6:86:a5:49:b2:83:75:ea:76:
ee:66:40:c6:db:0b:bc:46:a3:36:a4:f3:d7:d2:72:c5:5f:a3:
bf:07:d6:2a:18:15:4f:30:db:30:9a:b4:bb:84:8b:b5:8a:eb:
15:85:8a:4e:cb:48:ed:b9:16:f4:cb:77:85:b5:76:59:c5:65:
9c:37:a4:c3:17:d1:59:17:dd:52:c5:12:c2:42:f6:ce:6c:8e:
9d:09:d4:61:e6:da:34:5c:45:ea:70:c0:42:c5:52:81:b2:7e:
03:17:d3:58:1a:51:4f:71:38:2c:2a:e2:70:d6:26:dd:5b:69:
81:47:6f:dc:ad:27:d6:4b:30:7e:22:6c:4d:37:3e:db:98:aa:
aa:88:e9:a4:9b:dc:44:37:7f:3a:8d:79:42:c9:15:73:17:a2:
e6:04:33:95:9d:01:3b:fa:db:f2:10:b1:89:69:27:bf:4c:85:
c5:87:61:81:5d:5f:9a:40:52:14:85:fe:3c:18:0d:58:18:9a:
1f:a3:44:42:04:25:90:b6:28:c9:56:e1:ff:f4:6f:2f:c5:6f:
17:1b:8b:63:20:12:01:b0:b0:33:90:bc:ec:cd:2c:e6:c3:61:
9a:2d:03:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 02:23:02 2024 by rpki-client on console-ams.rpki-client.org