Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/mj13c22yggMeG6ZQJf_97m_JYos.roa
File: mj13c22yggMeG6ZQJf_97m_JYos.roa (raw, json)
Hash identifier: 7l7onyHsFoLrbDK6yIbImeezcnY60q+ENvvlk6/ogn0=
Subject key identifier: 9A:3D:77:73:6D:B2:82:03:1E:1B:A6:50:25:FF:FD:EE:6F:C9:62:8B
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 0185714C3BEDCD0472D24D3F005E1EFAF686
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/mj13c22yggMeG6ZQJf_97m_JYos.roa
Signing time: Mon 02 Jan 2023 07:04:59 +0000
ROA not before: Mon 02 Jan 2023 07:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8412
IP address blocks: 86.62.32.0/22 maxlen: 24
94.16.18.0/23 maxlen: 24
94.16.28.0/23 maxlen: 24
185.81.210.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:3b:ed:cd:04:72:d2:4d:3f:00:5e:1e:fa:f6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 2 07:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a3d77736db282031e1ba65025fffdee6fc9628b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d0:c6:de:d1:cc:b6:2b:08:44:95:2f:9e:70:
00:45:38:7a:30:2d:2f:61:26:92:e8:d8:a3:94:37:
65:ec:5e:c9:3e:c2:19:3a:5c:42:ba:f8:f6:09:92:
ef:e2:e5:a3:43:37:72:96:b3:56:8b:9c:b2:ec:ae:
b0:67:d2:65:1d:63:f0:fa:10:7c:5c:91:69:3f:db:
04:b9:ec:65:6d:be:7a:d4:7b:2a:6c:70:6b:e5:6f:
0a:4a:8a:96:13:03:1a:e0:d1:73:5e:d4:3e:cd:06:
6d:3b:07:ed:78:f9:54:0c:3e:fd:b3:c4:ae:55:46:
d4:d3:e0:a5:af:43:93:64:ba:42:05:77:c3:80:14:
aa:b0:8b:0f:35:8f:88:c0:33:ef:ca:82:6d:36:6e:
28:3c:f7:14:a2:d0:d3:44:6c:2a:4c:f5:d1:a4:0d:
91:eb:b5:8b:56:10:44:be:15:91:0d:82:2c:88:15:
f3:1c:9f:ae:04:5d:34:20:7b:8f:23:e9:a1:d2:cf:
72:a8:ff:5b:3e:1e:22:3f:f3:38:9e:a3:a4:db:5b:
16:01:ba:e4:83:32:dd:c9:ac:8c:8f:61:17:72:95:
b9:5b:bb:a6:a9:59:71:9c:89:a6:6f:7c:82:0b:64:
30:5b:43:76:c0:e1:b6:f1:01:51:1a:26:30:01:cf:
8d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3D:77:73:6D:B2:82:03:1E:1B:A6:50:25:FF:FD:EE:6F:C9:62:8B
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/mj13c22yggMeG6ZQJf_97m_JYos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.32.0/22
94.16.18.0/23
94.16.28.0/23
185.81.210.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:5d:57:e9:11:9d:01:18:ca:61:f0:f7:a0:14:67:e2:76:05:
54:f3:66:53:70:8d:d5:da:d0:25:c0:bb:60:5b:5d:c5:9c:bf:
72:50:c7:56:7f:1b:7b:70:b4:03:af:32:16:a8:af:db:9a:15:
57:e4:c1:15:7a:38:c2:57:c3:98:87:b5:83:d2:3d:d7:e3:cf:
2f:ed:0e:c3:fd:49:cd:5c:77:b5:59:ed:a6:59:67:6a:11:4d:
f9:5e:8e:23:d3:20:ff:60:d7:aa:54:00:86:c3:5c:c2:61:15:
de:34:63:ff:28:37:13:7f:e9:dd:44:e6:5b:1c:cd:a7:d1:87:
c4:f0:c8:37:b0:62:7d:e4:8c:f8:70:ff:57:1f:56:3f:95:24:
b3:f1:57:ef:ec:ab:6a:70:4a:93:1b:04:bd:e8:1c:26:88:84:
3b:0d:67:3d:28:00:1f:90:e2:24:a6:23:ae:2a:4a:d8:91:ce:
ce:88:8f:b3:a8:05:97:ae:d4:ca:60:b8:68:2e:e9:b0:30:cd:
66:12:1e:19:d3:10:1c:62:ee:59:9e:60:16:73:72:35:bc:8c:
cf:55:94:94:db:ad:2b:1e:97:d5:fd:90:aa:55:8e:55:a8:88:
c9:6e:38:81:ac:01:67:e7:39:c8:7e:e3:7c:12:51:82:81:de:
e3:44:ac:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:51 2024 by rpki-client on console-ams.rpki-client.org