Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/sjPBCOGDBVaLwhEE6nHyUH_JCTM.roa
File: sjPBCOGDBVaLwhEE6nHyUH_JCTM.roa (raw, json)
Hash identifier: PbaFKUZXK3Hk0AdPXXRxs9uySX5vKSyPk9hHvXxUK1g=
Subject key identifier: B2:33:C1:08:E1:83:05:56:8B:C2:11:04:EA:71:F2:50:7F:C9:09:33
Certificate issuer: /CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Certificate serial: 01856D5D161903375D46C74F447ED56C9D65
Authority key identifier: 32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/sjPBCOGDBVaLwhEE6nHyUH_JCTM.roa
Signing time: Sun 01 Jan 2023 12:44:55 +0000
ROA not before: Sun 01 Jan 2023 12:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42189
IP address blocks: 77.240.96.0/20 maxlen: 24
185.115.8.0/22 maxlen: 24
2a00:1aa8::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5d:16:19:03:37:5d:46:c7:4f:44:7e:d5:6c:9d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Validity
Not Before: Jan 1 12:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b233c108e18305568bc21104ea71f2507fc90933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:44:0c:b3:25:4c:96:e5:a5:b4:3b:8e:95:43:
99:c9:7b:06:1b:2b:d0:80:f4:9a:87:5d:ce:83:a5:
20:2b:4e:3b:0f:c9:f8:a0:28:8a:1f:fa:74:8a:4e:
02:87:f7:0e:66:d4:e3:d0:41:0c:25:48:ea:a9:93:
eb:65:a0:d4:72:9e:d7:f8:14:4c:e7:cc:1a:98:86:
d1:22:3d:f8:7c:ab:65:b7:e7:8d:d8:5f:6a:24:ed:
75:b6:d0:a7:f6:0a:33:10:9e:76:86:68:d7:46:78:
5b:17:e9:be:63:15:42:67:4f:18:7f:41:04:92:04:
b3:78:ad:10:8c:ae:94:ba:8e:39:da:e3:5b:7e:d3:
55:b6:05:07:17:6b:37:e8:83:39:be:cb:89:a3:55:
4c:a9:4e:e9:59:c9:4d:e0:64:9c:ec:71:fe:62:11:
68:17:2e:a6:64:b8:d2:d0:06:b3:5d:88:8b:8d:f9:
14:5d:35:f9:91:c8:4b:ba:9e:63:bc:7e:f5:7e:69:
cb:79:15:c3:43:d2:63:c2:26:ea:de:86:5e:5b:f0:
c9:ac:8f:81:4d:74:df:a0:57:cc:96:0f:07:b5:27:
5f:7a:3f:e2:13:3e:2a:a7:29:0a:11:69:69:8b:8e:
3d:4b:4a:47:ac:93:c8:29:6d:26:c9:aa:e3:bc:09:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:33:C1:08:E1:83:05:56:8B:C2:11:04:EA:71:F2:50:7F:C9:09:33
X509v3 Authority Key Identifier:
keyid:32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/sjPBCOGDBVaLwhEE6nHyUH_JCTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.96.0/20
185.115.8.0/22
IPv6:
2a00:1aa8::/29
Signature Algorithm: sha256WithRSAEncryption
4c:98:aa:03:22:18:2a:01:d1:df:64:d7:b9:ec:89:95:76:30:
e0:69:6d:2d:4b:76:4b:b4:8d:71:da:16:cd:65:63:d7:f8:b0:
c8:3a:44:f1:59:dc:32:10:7d:4a:d3:e6:8b:4f:1b:54:46:be:
b1:ca:8b:5d:74:90:87:82:5b:28:c1:a0:5b:b1:82:d0:2a:8a:
37:3d:20:47:4a:70:c8:e5:13:ee:ab:3d:c2:d4:7a:92:62:4a:
bb:77:21:46:e5:74:4e:10:ce:b8:6b:e0:66:dc:0d:e9:9c:73:
d1:33:36:d3:0b:82:eb:2d:02:2d:b9:ac:bc:0f:33:0b:47:e3:
af:2e:25:18:34:ba:62:66:ed:51:fc:ad:61:28:27:cb:0b:fe:
e9:49:86:05:a6:c2:b1:52:98:6f:56:d7:a9:59:b8:54:0b:5b:
f6:90:64:b0:cf:7e:c1:db:0e:cb:c4:d8:c6:f9:a1:47:29:ee:
d5:a5:95:cf:4c:90:6f:d5:e9:f8:b3:94:a1:af:07:fe:66:a1:
4a:79:7d:0d:4b:65:bd:fb:09:5d:04:ae:ca:52:58:a6:96:ce:
94:43:7a:61:dd:5c:7d:64:b5:f2:8f:ea:80:e8:52:ca:bf:1d:
44:a4:dd:01:a5:24:4b:ab:b5:b2:bf:10:4e:79:9e:92:7e:84:
cb:c3:f3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:43 2024 by rpki-client on console-fra.rpki-client.org