Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/jimmE0KoDN1TYk3NFhpyktmCImo.roa
File: jimmE0KoDN1TYk3NFhpyktmCImo.roa (raw, json)
Hash identifier: Z89XH+34FHoz/y0/PgNj1/rsx7clFuNzYdrdR65FJyc=
Subject key identifier: 8E:29:A6:13:42:A8:0C:DD:53:62:4D:CD:16:1A:72:92:D9:82:22:6A
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 0185DE2C3434AF3ABD4F7178C3E8C59F5F12
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/jimmE0KoDN1TYk3NFhpyktmCImo.roa
Signing time: Mon 23 Jan 2023 10:28:37 +0000
ROA not before: Mon 23 Jan 2023 10:28:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51897
IP address blocks: 109.122.248.0/24 maxlen: 24
109.122.251.0/24 maxlen: 24
109.122.249.0/24 maxlen: 24
109.122.250.0/24 maxlen: 24
46.143.192.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:2c:34:34:af:3a:bd:4f:71:78:c3:e8:c5:9f:5f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 23 10:28:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e29a61342a80cdd53624dcd161a7292d982226a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8c:6c:75:28:ce:78:a4:b3:5b:84:32:74:29:
05:ea:62:cf:58:16:31:0b:6a:2f:f8:99:4b:77:5a:
ae:e1:54:48:cf:f8:55:79:d0:d2:1e:fb:96:04:12:
4a:c5:c2:d4:18:5e:f2:5d:61:cf:3e:19:2b:e4:5a:
7e:67:65:c7:ca:1a:da:0c:60:f0:cd:fa:79:cf:d0:
4f:e1:62:28:ff:da:29:72:cc:23:5f:11:c0:2a:c4:
df:0d:b7:b3:32:cc:03:62:d6:9a:33:9c:ed:04:2f:
c3:17:67:4b:9b:47:f4:32:8a:0f:6d:5c:c0:7b:f1:
da:8d:ad:cb:f1:fb:f7:57:3c:84:f4:d9:27:0f:59:
24:8c:a3:44:41:07:34:99:1f:97:73:b5:ca:1f:69:
74:c9:ae:89:12:d8:24:dc:bd:a9:35:37:41:12:d6:
e2:69:55:5e:40:f2:76:c8:9b:86:c1:47:1c:68:7d:
09:70:60:d4:04:6c:9a:72:fd:98:5c:fb:ea:61:23:
01:d6:ed:64:a2:4f:35:4b:ab:3e:4d:f1:1d:3b:10:
a9:51:a2:54:3d:08:d9:d1:9a:c8:60:12:36:32:67:
45:03:dd:9f:07:a7:e6:e7:50:0a:28:e3:16:9e:94:
8d:71:58:1b:bd:92:e2:7c:56:7f:ed:0e:91:32:4e:
8e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:29:A6:13:42:A8:0C:DD:53:62:4D:CD:16:1A:72:92:D9:82:22:6A
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/jimmE0KoDN1TYk3NFhpyktmCImo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.192.0/19
109.122.248.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:3e:02:5d:b4:2b:32:ae:9d:4d:4d:f3:00:eb:39:c3:d7:c8:
d9:06:81:08:ef:71:ca:34:b4:a0:64:5e:99:bf:cd:44:1f:71:
1b:45:f1:fe:63:33:bf:06:aa:1c:28:59:03:20:ce:04:fe:89:
93:f3:c6:cc:63:60:68:52:1a:88:62:b0:ef:90:99:40:d2:0a:
f4:b6:68:21:9c:88:86:79:61:6d:73:68:71:51:27:ef:b5:ff:
dc:c0:5f:9b:41:9b:04:c3:13:db:7e:10:6f:a8:13:00:ab:3e:
48:f2:29:57:ce:57:12:5b:ee:a7:e4:e2:0d:a3:08:22:9d:8f:
50:a4:67:75:96:79:e4:40:71:d5:79:ad:16:6a:61:9f:7e:bd:
ee:31:59:44:83:bc:c7:d5:1f:22:2e:f1:9b:f2:ce:eb:b9:65:
2a:e3:c6:2c:73:4c:9f:90:d2:5f:bf:c7:ac:54:b5:e2:c7:a7:
84:27:73:b6:4a:39:2f:3a:f2:58:04:cd:63:c7:fc:b3:4b:da:
97:97:98:98:b1:57:79:f0:46:50:78:45:3b:a3:bf:63:f5:94:
13:39:dd:78:38:e7:f4:86:b5:04:8c:ce:b2:e3:dc:19:db:f8:
cf:c7:58:fa:5e:23:00:59:9b:9d:a7:c2:b3:36:0d:5e:7e:61:
6f:75:dc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:02 2024 by rpki-client on console-ams.rpki-client.org