Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JsZDpnIi-AllTUS5kHpoHBuUfas.roa
File: JsZDpnIi-AllTUS5kHpoHBuUfas.roa (raw, json)
Hash identifier: 2Oh5qOY96IFAm+wkME31KapnIgW/fgFfCzPYPhO5kqI=
Subject key identifier: 26:C6:43:A6:72:22:F8:09:65:4D:44:B9:90:7A:68:1C:1B:94:7D:AB
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0189E457ACDEC7E7906EA0FE9A5073ABB729
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JsZDpnIi-AllTUS5kHpoHBuUfas.roa
Signing time: Fri 11 Aug 2023 11:24:58 +0000
ROA not before: Fri 11 Aug 2023 11:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 89.34.106.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
89.47.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Aug 2023 17:20:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e4:57:ac:de:c7:e7:90:6e:a0:fe:9a:50:73:ab:b7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 11 11:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26c643a67222f809654d44b9907a681c1b947dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e6:5e:7d:24:37:c6:51:c0:72:99:23:aa:ef:
6a:f0:46:9a:1b:97:1d:29:85:70:fb:a4:a2:19:aa:
37:77:57:60:5a:39:a6:a5:90:65:ec:41:99:5d:e0:
c5:09:4b:6f:ba:1b:dc:26:08:e2:25:8b:1e:fb:80:
e1:b9:34:fc:22:f2:b5:47:47:e3:5a:85:c2:59:24:
17:2b:41:fd:43:bc:02:86:31:6f:12:96:68:bb:3c:
5a:fb:e0:74:46:e7:fe:1a:93:4e:57:02:32:be:65:
4e:ec:4c:2b:44:df:24:70:40:1a:30:14:fc:52:94:
eb:8b:55:e7:cc:60:9a:34:5a:7d:8a:47:22:60:7f:
d3:03:af:5b:e9:81:99:ae:63:54:40:45:3b:4e:2a:
bc:8d:13:4d:d2:53:1c:01:89:9a:2d:31:f3:82:9c:
f8:9c:32:20:8a:ce:3d:d6:21:81:89:79:2a:3f:d3:
1f:d2:fa:77:ff:6e:17:34:63:f7:fa:55:b2:4e:94:
b1:b1:c3:f3:dd:52:e9:f7:22:01:85:ec:42:93:f2:
a6:e3:bb:61:e7:9f:2c:bc:97:35:cf:61:fe:d5:28:
f5:97:94:e1:28:71:d3:94:dc:d7:35:f3:1a:27:d1:
1e:c4:32:e1:48:84:d3:a9:40:77:2c:87:b2:72:67:
1b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C6:43:A6:72:22:F8:09:65:4D:44:B9:90:7A:68:1C:1B:94:7D:AB
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JsZDpnIi-AllTUS5kHpoHBuUfas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.106.0/24
89.34.219.0/24
89.47.36.0/24
89.47.55.0/24
Signature Algorithm: sha256WithRSAEncryption
10:49:19:6b:26:60:82:d2:31:e2:17:56:0b:72:7f:2d:bf:df:
e1:66:e4:5d:0d:bb:b3:e9:19:8d:a4:00:07:46:69:5a:21:bc:
2f:d7:c3:d7:a6:48:e7:ed:9c:05:b9:5c:07:d7:ea:e0:db:46:
4c:3a:bd:3d:ef:9d:c5:79:e9:1d:8d:fd:d7:a6:22:31:f2:ba:
50:9a:8a:cc:92:96:53:8c:7d:47:d5:5b:f2:29:eb:7a:59:5b:
e2:35:26:cc:46:87:ed:c5:b9:40:e7:7e:79:e7:1d:8c:aa:b1:
4a:e0:24:28:cc:44:0d:d1:01:97:92:29:65:c5:fd:df:b0:c4:
e5:92:f1:73:61:f2:2e:fa:60:95:3d:15:2b:db:84:78:f6:6f:
7f:a6:9d:0b:59:27:e9:54:58:4b:17:dc:8e:b4:13:93:d1:54:
9c:80:4d:70:63:a9:ba:26:6f:fe:d0:b1:0e:79:6b:5a:20:2c:
b2:4a:12:23:81:38:c1:2d:ef:02:a8:1e:31:e2:64:1a:f8:59:
ec:75:44:1e:34:8b:69:03:eb:e5:7f:71:0d:88:f6:64:6f:2e:
e4:62:ef:31:9a:db:0c:16:9a:1d:e3:2f:ec:0f:cd:20:ad:1b:
ef:da:fd:fb:43:9a:32:df:d0:0d:af:6b:eb:ed:6a:80:a0:ba:
db:7d:78:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org