Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ju0qNaqF035qbHbsoJ0khkzF7Zs.roa
File: ju0qNaqF035qbHbsoJ0khkzF7Zs.roa (raw, json)
Hash identifier: 8MvJJdQBqw/WaMetTewXgQtyFIXynI5I2Ivd7kDnfBs=
Subject key identifier: 8E:ED:2A:35:AA:85:D3:7E:6A:6C:76:EC:A0:9D:24:86:4C:C5:ED:9B
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD51D9850A71CFDC79A904198982C6F
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ju0qNaqF035qbHbsoJ0khkzF7Zs.roa
Signing time: Mon 02 Jan 2023 00:15:15 +0000
ROA not before: Mon 02 Jan 2023 00:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41850
IP address blocks: 89.39.248.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:1d:98:50:a7:1c:fd:c7:9a:90:41:98:98:2c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8eed2a35aa85d37e6a6c76eca09d24864cc5ed9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1b:d7:df:76:66:1c:c2:a2:9c:1d:1b:6c:d9:
ea:6d:42:87:ee:a1:78:d2:20:f1:e2:57:c2:1d:0e:
0f:01:05:9a:ec:87:00:6c:53:21:42:47:89:d0:62:
42:fd:74:c9:34:ee:6a:74:0d:26:12:11:a6:95:c0:
02:4f:06:7c:10:8c:4b:85:ad:5b:75:c5:f8:b8:63:
93:cc:99:e9:14:3f:d4:17:cc:f6:f3:ad:d4:de:43:
82:08:99:31:9a:67:a7:bd:50:20:04:a3:fc:b7:9d:
bc:a9:ff:68:ca:19:8f:54:41:cf:9c:ae:9b:9b:77:
9d:24:b5:b3:91:b9:0f:dc:1b:45:fa:ec:ae:de:a4:
4d:3c:99:90:d2:d1:80:ae:f4:31:8c:75:5c:ba:8e:
dc:7f:41:7d:f7:c8:f8:1a:30:1e:d7:8f:35:02:10:
45:4a:90:d6:25:93:38:da:ac:eb:da:b2:df:f1:3c:
78:d0:f4:0a:fe:95:14:ff:96:11:c1:cb:67:65:42:
5d:8e:5e:00:de:cf:c3:92:cc:cb:82:3a:a4:79:bd:
37:66:07:65:d2:43:48:6c:8b:c5:81:2c:e7:28:4d:
e3:cc:d8:7b:68:73:38:3c:63:68:2b:8f:5a:4c:a3:
71:c4:a4:2d:5e:12:2e:2c:6a:b6:4d:55:1f:20:99:
8a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:ED:2A:35:AA:85:D3:7E:6A:6C:76:EC:A0:9D:24:86:4C:C5:ED:9B
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ju0qNaqF035qbHbsoJ0khkzF7Zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.248.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:49:f9:3b:cc:6d:c0:71:24:bf:d0:3b:bd:ea:bf:cb:6d:36:
61:c3:97:75:21:96:b8:45:1a:41:2b:6b:92:65:77:a1:d8:66:
b4:64:97:51:a1:a7:9a:a9:2a:63:ce:50:d4:1c:ef:94:81:c4:
77:56:c3:6c:e6:d4:e9:e2:14:b0:a0:32:41:74:b5:04:c2:e5:
d2:86:30:ca:00:7d:47:48:13:e5:5a:52:cb:c4:8a:04:f9:56:
9d:10:ce:35:cf:a4:ea:45:00:e4:38:a2:67:7e:87:1b:eb:2c:
66:4a:28:6a:21:bd:0d:b2:83:4e:55:d9:3c:06:80:88:4c:15:
ad:a2:83:0e:36:05:08:04:e0:ea:75:5f:8e:aa:c6:f8:ca:2b:
5f:04:e6:08:6c:5b:b2:47:59:2e:8c:c7:59:1b:b0:93:e2:7d:
e7:41:ce:c6:7f:34:de:d4:5d:c3:12:a9:ff:1d:a8:9c:dc:db:
e6:e0:52:81:47:3c:16:ae:fd:f3:85:79:e8:62:43:65:c6:55:
f9:5b:c0:50:ec:92:0f:69:0c:5f:15:7b:ad:d7:b5:82:ae:85:
24:07:d6:1f:df:67:3e:00:f0:6e:0a:14:ff:d0:0b:2b:cb:82:
ed:bf:4b:74:96:3e:3f:f7:37:e6:d0:a2:b1:7e:48:6d:60:56:
ab:70:71:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:52 2024 by rpki-client on console-fra.rpki-client.org