Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/jZs_tacYYhMBJPr6PinGCMt5G8M.roa
File: jZs_tacYYhMBJPr6PinGCMt5G8M.roa (raw, json)
Hash identifier: hYBGLN8j9Pdf57mYqOs+J5VYHfJCcH0yc184ZtQWANA=
Subject key identifier: 8D:9B:3F:B5:A7:18:62:13:01:24:FA:FA:3E:29:C6:08:CB:79:1B:C3
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 018BAE5D12FC639887391967105A7BE8A594
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/jZs_tacYYhMBJPr6PinGCMt5G8M.roa
Signing time: Wed 08 Nov 2023 09:56:57 +0000
ROA not before: Wed 08 Nov 2023 09:56:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199242
IP address blocks: 62.106.90.0/24 maxlen: 24
185.234.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Nov 2023 13:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:5d:12:fc:63:98:87:39:19:67:10:5a:7b:e8:a5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Nov 8 09:56:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d9b3fb5a71862130124fafa3e29c608cb791bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f0:cb:07:59:e0:6c:ea:4a:e6:55:62:61:f9:
e6:d0:17:f0:3e:0f:0b:ae:db:d8:e1:e9:61:34:27:
a6:32:40:71:48:f5:65:4c:96:90:e5:e3:80:bb:01:
0f:3e:9d:42:06:8f:af:88:3b:4b:76:2d:02:10:b8:
cb:71:f8:14:44:15:aa:a9:aa:3f:46:5d:9e:06:44:
3d:eb:2c:c7:0e:28:ba:f3:5d:f5:ee:27:2e:b4:55:
e8:66:cc:70:97:f4:11:9c:8f:23:1d:08:d3:c2:93:
77:64:96:34:69:9b:35:c9:5c:ee:0d:03:60:94:c8:
2b:5b:a6:04:f1:32:d7:3d:5c:6f:a3:09:bc:34:07:
d1:3e:ee:be:7c:86:65:69:8e:7b:20:08:6e:ca:f7:
e3:6a:de:36:e2:bb:27:ea:f6:e8:9f:b7:42:9a:85:
ba:0d:21:cd:89:8b:af:36:16:dc:4a:50:2d:e1:b6:
56:23:7e:0e:3d:10:dc:ef:99:a1:ae:33:a1:40:89:
7b:c1:83:8c:51:f0:63:9e:e1:21:46:6c:15:95:6b:
65:6e:e0:73:fb:ca:26:cf:c7:81:59:df:4b:a9:6c:
82:78:f3:92:3c:e6:66:c1:70:65:50:fc:7d:60:ce:
f8:c1:28:48:ab:45:2f:7a:df:c6:3f:67:60:bc:fc:
fb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9B:3F:B5:A7:18:62:13:01:24:FA:FA:3E:29:C6:08:CB:79:1B:C3
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/jZs_tacYYhMBJPr6PinGCMt5G8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.90.0/24
185.234.12.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:cf:ba:bf:68:5f:73:dc:b5:9f:3f:10:5a:85:2d:c1:78:f6:
e3:8f:1e:8b:47:64:78:a4:9b:b3:ec:93:3d:1a:c1:f1:58:8f:
33:cf:9b:d1:72:d0:14:d9:aa:af:a2:27:fd:da:46:58:eb:19:
d6:17:b3:b5:25:3b:21:6c:f4:fc:f7:f4:eb:f4:6d:3d:18:b6:
d0:fb:79:2d:67:1d:56:79:3f:8a:b6:65:1e:b9:86:1b:de:5e:
1d:a0:95:fd:04:a8:22:9b:25:c7:42:0b:50:76:8f:a4:e4:a7:
e1:dd:bc:f4:8f:e5:c2:7a:f3:ca:fc:87:d8:ba:e9:1e:7a:ec:
90:bf:58:3a:9a:21:30:cb:c1:69:81:0d:5d:1b:07:5d:6d:4f:
4f:89:1a:0c:24:1b:71:ed:73:61:bf:cc:0f:39:50:e8:e3:d4:
6a:55:fd:6c:cb:26:8d:2a:6a:bd:24:dd:ef:5d:0d:e0:6c:6c:
66:f3:ae:44:d8:28:00:7a:6a:82:49:73:1e:ee:35:c0:b0:94:
22:2a:ad:54:28:f5:f9:2e:76:4c:52:9b:76:eb:3e:48:c2:d1:
63:5a:ec:f6:da:84:9c:ff:26:1d:2f:8e:8c:f9:97:28:87:d3:
c2:b9:de:ae:8e:12:64:3f:91:ab:9a:cf:f9:f0:45:33:20:42:
a5:cc:84:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:49 2024 by rpki-client on console-fra.rpki-client.org