Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/JaMW57tzln17b_nUpSIlfysoY8E.roa
File: JaMW57tzln17b_nUpSIlfysoY8E.roa (raw, json)
Hash identifier: hUAEF1jghqm2cPxllTgNPOh1gaDleXiAejzIgFk+v5Y=
Subject key identifier: 25:A3:16:E7:BB:73:96:7D:7B:6F:F9:D4:A5:22:25:7F:2B:28:63:C1
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018EC43293B2582984F28490ED91A143074D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/JaMW57tzln17b_nUpSIlfysoY8E.roa
Signing time: Tue 09 Apr 2024 18:50:32 +0000
ROA not before: Tue 09 Apr 2024 18:50:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60099
IP address blocks: 84.32.12.0/23 maxlen: 23
88.216.4.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 12:19:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c4:32:93:b2:58:29:84:f2:84:90:ed:91:a1:43:07:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 9 18:50:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25a316e7bb73967d7b6ff9d4a522257f2b2863c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:32:54:cd:b2:34:aa:17:f5:9e:e3:b0:ff:1f:
aa:cc:86:0a:68:1d:1b:b8:46:7e:82:71:ec:1f:fa:
b3:58:66:fe:d7:2d:cc:47:2f:4b:f2:d5:09:50:9e:
d8:0e:5a:58:77:21:de:88:f9:92:b4:46:21:07:f2:
de:10:03:f9:cb:cd:fa:45:ae:ec:1d:65:f0:18:71:
b5:5d:e3:e6:0e:c1:47:b3:65:67:d0:1f:0f:79:96:
a6:fd:ac:17:b3:1a:a3:9e:76:7b:1b:e8:f7:76:0d:
56:d1:df:2d:db:d5:5b:2a:f0:b4:1e:66:b8:3e:6f:
0d:2a:40:72:33:1f:cb:33:a8:4b:ed:ba:aa:c3:05:
96:5e:af:18:d6:fa:86:d4:b6:f5:59:77:e0:a6:e2:
8f:58:cd:b5:62:21:b7:36:2e:56:27:d9:7e:d8:65:
a3:7a:c0:5d:78:03:42:fa:cd:61:52:ee:31:c3:78:
ed:ec:56:bd:30:35:4a:0b:10:b0:4d:d2:24:f5:31:
14:27:ab:7e:96:dc:6e:a9:46:c3:91:f2:74:03:09:
83:e1:0f:0b:5a:40:37:5a:1d:ee:2c:02:8e:b8:63:
b4:f3:de:47:36:28:a0:81:39:5d:63:95:4e:9f:d0:
7a:2f:43:5c:98:54:f7:19:c4:9f:da:eb:ec:59:d5:
9c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A3:16:E7:BB:73:96:7D:7B:6F:F9:D4:A5:22:25:7F:2B:28:63:C1
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/JaMW57tzln17b_nUpSIlfysoY8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.12.0/23
88.216.4.0/22
Signature Algorithm: sha256WithRSAEncryption
84:40:50:83:c4:3c:c1:0d:ac:08:b9:de:b7:74:93:dc:d3:e5:
96:6a:3d:9f:99:2f:0c:b6:52:c3:6b:d5:be:e7:12:d6:7c:4c:
8b:58:5c:43:15:9a:cb:d6:a2:fa:1c:1f:6e:c3:eb:fe:13:0d:
a1:c7:31:15:0f:00:21:04:8e:dc:c6:d6:f4:df:67:dd:94:96:
61:7e:e8:e4:e5:67:84:a4:ae:18:42:4d:fe:ce:22:62:ac:73:
2f:19:28:fc:15:b3:3a:09:ec:ba:06:eb:cb:5d:41:b4:a5:4b:
0d:b0:b8:76:46:49:a2:63:75:d1:6c:95:c3:13:74:72:44:fd:
17:fe:31:30:00:b3:7b:f8:d2:ae:65:22:79:27:59:3d:4c:20:
76:78:98:0c:00:60:84:2b:83:2e:61:d9:25:37:0f:44:d3:be:
c8:a7:89:4d:ce:81:d0:de:81:12:79:cb:64:5f:3d:99:f3:e0:
b9:71:fe:09:4f:d8:f0:a7:a7:6b:d7:d4:50:e8:ab:dd:6c:0d:
f7:0e:1f:4a:76:b6:04:ba:20:db:17:9c:ab:f6:e4:c5:b2:68:
1e:f7:37:f6:86:61:ab:d1:0d:49:6a:8c:24:fe:a5:1e:a8:b2:
9c:af:85:fb:35:be:d8:de:ec:49:ef:4a:8f:ca:66:a1:fd:83:
a8:84:90:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 15:26:30 2024 by rpki-client on console-ams.rpki-client.org