Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/jn4MUUUIQ8WceWYhqcqIwlv7_iA.roa
File: jn4MUUUIQ8WceWYhqcqIwlv7_iA.roa (raw, json)
Hash identifier: MLjkx1hqEH//5A7sbaP2zFzweRKj99rb4N4rWkFQhPo=
Subject key identifier: 8E:7E:0C:51:45:08:43:C5:9C:79:66:21:A9:CA:88:C2:5B:FB:FE:20
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 01856E01C8397F1FF28A32E8C39193A9BABD
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/jn4MUUUIQ8WceWYhqcqIwlv7_iA.roa
Signing time: Sun 01 Jan 2023 15:44:48 +0000
ROA not before: Sun 01 Jan 2023 15:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41001
IP address blocks: 89.45.232.0/22 maxlen: 22
89.47.184.0/23 maxlen: 23
86.105.118.0/24 maxlen: 24
2001:6b0:5a::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:c8:39:7f:1f:f2:8a:32:e8:c3:91:93:a9:ba:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 15:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e7e0c51450843c59c796621a9ca88c25bfbfe20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f1:f9:8a:11:fd:d8:54:aa:8a:62:9d:25:05:
dd:6b:bc:25:71:08:43:7b:f7:72:5f:3a:6f:28:77:
f3:9f:ef:94:28:00:75:95:e0:f6:17:79:ed:7f:51:
f7:95:1b:ac:2f:a7:cd:19:72:9e:90:47:74:55:87:
95:a0:35:e6:ae:da:01:ad:87:1b:02:12:eb:af:e3:
6e:cc:68:25:2a:ae:d5:e6:8a:fb:1a:8a:20:1e:1b:
c0:48:9f:6d:0b:84:fb:d4:1c:a1:7f:a0:45:33:ec:
73:72:96:8c:4f:4f:30:99:c7:87:a7:92:58:87:33:
9d:0f:2e:12:8b:fd:c4:30:90:fb:15:cd:c0:ba:4e:
3d:53:11:c7:7b:fd:a6:15:e8:72:32:dd:53:fc:c8:
1b:62:32:46:d6:11:d1:38:6a:97:7b:f6:4b:31:fe:
0d:7a:81:81:cf:15:c1:2b:ff:b7:38:63:0a:ce:4d:
2e:ad:ae:2f:e9:3f:42:10:43:68:32:3d:8c:15:a0:
1e:a6:3b:22:1e:22:b1:3d:64:66:60:0b:88:bb:d5:
0c:3e:e8:ac:ad:6c:87:00:f4:87:5f:24:f9:75:f8:
fb:28:0d:64:9e:98:ca:7e:03:e7:a3:ab:9d:82:2a:
92:ea:c6:7c:ab:4d:08:2f:89:9b:73:a3:ce:ae:9a:
34:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7E:0C:51:45:08:43:C5:9C:79:66:21:A9:CA:88:C2:5B:FB:FE:20
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/jn4MUUUIQ8WceWYhqcqIwlv7_iA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.118.0/24
89.45.232.0/22
89.47.184.0/23
IPv6:
2001:6b0:5a::/48
Signature Algorithm: sha256WithRSAEncryption
71:18:2c:cf:81:e0:5b:83:20:09:b1:8b:1e:62:0a:f4:68:dc:
ba:79:35:d7:6e:ad:13:33:e6:66:f8:0b:01:06:e6:76:c6:71:
2f:0a:66:0c:13:03:49:bf:65:6e:95:2f:60:aa:ce:8a:94:33:
40:19:0c:e5:71:e6:8c:44:3f:fc:04:7a:dd:dd:9e:d6:d0:14:
08:a4:7e:07:a0:eb:bd:47:b9:ed:c6:45:1a:c8:7d:fe:86:ce:
4a:43:26:7f:53:ca:c7:cc:d4:70:1b:4a:c0:15:25:6d:ef:b9:
58:5b:b5:65:eb:df:09:c6:88:6a:c1:b9:04:6d:27:ef:f4:2f:
19:3b:7f:4a:b8:ea:ed:1c:ed:f9:96:d1:37:01:73:7e:67:9c:
f4:32:ae:93:ce:8c:29:fd:38:1c:09:f5:91:69:73:d8:aa:77:
7d:7d:98:b9:79:54:93:eb:85:ba:64:ce:39:d2:08:c4:78:9d:
0f:fa:a9:bd:77:59:22:6d:74:8c:a2:d3:35:7a:c2:92:f3:89:
52:1a:b7:a5:84:89:b0:7e:34:95:a3:5f:63:bd:e4:39:b9:e8:
f4:aa:99:38:a5:f3:0f:04:a5:0a:3f:75:1d:86:07:76:af:bc:
0d:86:96:32:06:f3:78:cd:14:82:d9:3a:2e:e5:b1:12:b6:24:
50:9b:b5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:12 2024 by rpki-client on console-ams.rpki-client.org