Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/JPtnIj8tIU2jnuz6KAypG3R4zLQ.roa
File: JPtnIj8tIU2jnuz6KAypG3R4zLQ.roa (raw, json)
Hash identifier: FEjPqVqT/qSRyli18jgqoGClg2ZthX6VxSwOAOVhaR0=
Subject key identifier: 24:FB:67:22:3F:2D:21:4D:A3:9E:EC:FA:28:0C:A9:1B:74:78:CC:B4
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 018AD89B8BE9B10CF2BFF8ECBC012BB3AFD8
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/JPtnIj8tIU2jnuz6KAypG3R4zLQ.roa
Signing time: Wed 27 Sep 2023 21:46:27 +0000
ROA not before: Wed 27 Sep 2023 21:46:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 93.89.212.0/24 maxlen: 24
93.89.218.0/24 maxlen: 24
93.89.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Oct 2023 16:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d8:9b:8b:e9:b1:0c:f2:bf:f8:ec:bc:01:2b:b3:af:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Sep 27 21:46:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24fb67223f2d214da39eecfa280ca91b7478ccb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4e:89:e2:ce:ba:51:89:88:16:95:e5:85:2b:
a5:65:a3:ca:e9:61:98:26:8a:52:4f:e7:d3:c7:88:
19:02:ac:ce:14:05:3e:32:13:ba:50:1a:7c:2a:2d:
d1:1d:b3:76:75:f6:c3:69:10:6d:53:12:ed:13:c9:
94:fb:ed:c9:d7:ca:60:77:dc:e2:cd:a0:3d:99:f4:
ab:d5:83:44:cd:91:ee:e5:6a:61:99:c7:ff:93:f1:
9a:ca:37:8a:76:bd:e8:4c:2d:73:85:f4:b6:7b:ef:
c8:c6:8e:1d:aa:b2:48:10:c9:ae:ef:77:d5:98:a9:
78:27:62:9a:f3:85:bc:1b:ba:47:77:0e:46:cd:8e:
c1:ed:b1:c9:b8:b7:c6:1b:d1:12:66:cd:b1:f6:bf:
f0:6c:8d:53:74:f6:6c:1b:43:2f:6d:54:34:0d:0f:
53:97:63:9f:6f:bb:18:b9:04:3d:c8:c9:9f:b5:8f:
d0:99:e9:cb:d3:40:9e:82:d5:d4:8a:cc:a5:71:14:
66:a3:a2:47:0c:8f:c3:45:e5:31:b9:94:d0:0a:cd:
12:ac:3a:49:f7:3e:9e:d5:fc:c7:06:f7:34:26:e3:
08:b4:a9:8c:51:e8:e8:87:55:a4:04:65:f2:3d:1e:
30:6a:3b:59:d3:1e:29:42:33:f6:90:de:71:4b:91:
dd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FB:67:22:3F:2D:21:4D:A3:9E:EC:FA:28:0C:A9:1B:74:78:CC:B4
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/JPtnIj8tIU2jnuz6KAypG3R4zLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.212.0/24
93.89.216.0/24
93.89.218.0/24
Signature Algorithm: sha256WithRSAEncryption
05:23:91:3a:d7:6e:78:4b:74:71:65:62:74:7c:26:c8:17:4b:
cb:9b:74:62:b1:71:b8:6f:1e:c0:fa:b0:85:b1:fd:08:ef:7f:
38:7f:6e:b3:9e:d0:0c:1a:13:a4:bf:f2:4e:e6:0d:6b:c2:f6:
48:01:44:3d:01:8d:fc:d1:6b:40:be:41:fa:81:47:9b:a1:47:
cd:63:b3:fc:27:64:d5:91:80:a3:12:db:1d:18:a8:83:25:c1:
5e:92:b4:c6:a0:09:b2:37:8c:1c:44:8a:56:f6:dc:5d:78:2c:
97:e3:16:d4:d0:04:1f:4a:17:f5:ee:67:70:9a:08:6d:c4:06:
39:f9:f7:aa:2b:d4:ef:92:84:26:a4:9a:28:16:a9:65:18:af:
33:7b:23:cf:8b:96:55:79:a2:32:21:55:c7:db:11:20:1c:fc:
67:8f:e8:97:74:6b:ff:aa:d5:0f:22:f9:74:7d:ae:e5:9a:07:
9f:db:75:99:1e:3d:bd:da:bc:22:9c:d3:ef:d7:23:df:b1:24:
be:0a:70:eb:54:58:03:3d:f1:fd:53:17:6b:67:42:a8:e7:07:
99:5c:93:f6:55:a0:a3:e5:ad:66:20:04:29:7f:e8:d4:21:ea:
46:fc:45:af:22:60:35:c4:c2:04:81:b7:5d:7a:6c:97:3d:22:
9f:45:f6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org