Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/JPRcIMFO0sPWEpWGO6o0SkHQ6uA.roa
File: JPRcIMFO0sPWEpWGO6o0SkHQ6uA.roa (raw, json)
Hash identifier: 3HnYbDGQw34O4x3pQ4dTvA7n+SrOMZCcF1wms0h0aQM=
Subject key identifier: 24:F4:5C:20:C1:4E:D2:C3:D6:12:95:86:3B:AA:34:4A:41:D0:EA:E0
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0187FF49F49A66816A6CDA7C82796B822680
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/JPRcIMFO0sPWEpWGO6o0SkHQ6uA.roa
Signing time: Tue 09 May 2023 06:54:09 +0000
ROA not before: Tue 09 May 2023 06:54:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 93.89.212.0/24 maxlen: 24
93.89.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Jun 2023 16:59:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ff:49:f4:9a:66:81:6a:6c:da:7c:82:79:6b:82:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: May 9 06:54:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24f45c20c14ed2c3d61295863baa344a41d0eae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:8f:d9:43:f8:13:58:8a:63:ab:70:d4:cf:
79:b5:9b:40:6e:d0:a7:d2:d0:9e:fe:87:84:ee:33:
e5:35:c6:f3:90:c3:c0:6e:fb:2a:94:a4:e6:8b:13:
09:5b:b0:8d:33:06:83:a4:43:fd:cf:6d:ae:5f:be:
df:38:b4:6b:d2:02:c1:b5:79:f0:f8:09:d4:7b:7e:
7a:98:1f:c7:0c:ac:89:9a:b2:7b:60:31:ed:18:23:
70:8f:f8:66:46:30:94:04:55:82:9f:80:57:98:c8:
4d:62:ee:50:ba:5b:ea:2e:30:aa:37:14:22:a9:6f:
62:47:17:14:fc:32:84:4f:41:b1:a9:bc:8b:03:43:
33:d6:3d:03:65:12:86:78:cd:82:ac:0c:ad:76:a1:
10:74:82:3a:71:46:f9:28:be:20:a2:d5:1b:89:30:
1a:ae:10:21:6c:75:32:0c:e8:d8:9e:bd:b5:ca:6b:
4c:be:f5:56:42:47:13:2f:33:72:5b:16:8d:a6:6d:
82:fd:7a:ca:c2:8d:6c:14:9e:b8:a9:17:d8:e0:b1:
aa:a4:1b:92:95:5e:88:28:3c:71:7c:5c:03:61:14:
ec:18:dc:84:49:53:70:08:81:39:16:9a:76:5a:9d:
49:a6:ad:07:59:3c:94:4f:89:ff:ca:06:b8:b1:d8:
69:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F4:5C:20:C1:4E:D2:C3:D6:12:95:86:3B:AA:34:4A:41:D0:EA:E0
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/JPRcIMFO0sPWEpWGO6o0SkHQ6uA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.212.0/24
93.89.223.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:1d:72:6a:33:b9:55:ce:fd:d8:b5:5d:4f:3f:1e:e1:e8:b7:
5f:94:e1:8d:37:00:04:fb:6b:21:28:05:10:c1:3e:6a:52:f1:
41:38:98:9c:41:8e:25:03:cc:9e:3e:2f:28:1c:02:65:f3:36:
b7:e7:aa:6d:f6:c1:d8:ae:81:a7:c6:ea:61:86:6a:57:2d:c9:
3e:52:6a:28:f4:bd:4d:ed:8d:e7:00:30:b3:a2:67:56:9f:9c:
db:24:68:fe:cd:8a:98:4e:26:64:e4:ae:cb:d9:ee:11:fd:d8:
12:c5:5f:11:c9:d3:99:13:bb:37:df:9b:23:58:4a:87:5a:88:
5f:40:96:34:ad:4c:1e:c3:8a:c9:eb:a1:ef:c1:0b:c8:a5:c4:
3f:dd:75:73:63:0f:b3:c2:bc:07:80:e2:02:22:db:5c:50:25:
f9:27:b4:16:0c:58:1b:56:a0:c1:76:4d:94:e4:8d:47:b6:35:
6f:01:1a:5d:f7:42:76:74:08:0f:68:96:9d:b1:42:44:25:58:
ce:75:41:85:a1:b8:18:fe:b5:aa:8d:73:7c:c7:d9:02:9f:4f:
02:04:8d:14:13:d1:5b:0b:67:39:14:87:a2:88:d1:bf:b3:87:
25:0d:15:22:1a:bd:8d:4e:de:56:7d:23:d8:06:1e:36:88:4d:
d6:aa:fc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org