Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/jJS8h7aZuZeAhJtk4QceKXDaqg4.roa
File: jJS8h7aZuZeAhJtk4QceKXDaqg4.roa (raw, json)
Hash identifier: w1PTDpwHF1rkzHYM9H/iP80Dmtslq9MTuCDallymkaU=
Subject key identifier: 8C:94:BC:87:B6:99:B9:97:80:84:9B:64:E1:07:1E:29:70:DA:AA:0E
Certificate issuer: /CN=a15d9596b7a5ef0889a73971000d12630daca9a6
Certificate serial: 019012AC36FAEDD084571B5D2101E73179D9
Authority key identifier: A1:5D:95:96:B7:A5:EF:08:89:A7:39:71:00:0D:12:63:0D:AC:A9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/jJS8h7aZuZeAhJtk4QceKXDaqg4.roa
Signing time: Thu 13 Jun 2024 17:36:34 +0000
ROA not before: Thu 13 Jun 2024 17:36:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5421
IP address blocks: 62.44.96.0/19 maxlen: 32
2001:67c:20d0::/47 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Jun 2024 16:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:12:ac:36:fa:ed:d0:84:57:1b:5d:21:01:e7:31:79:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15d9596b7a5ef0889a73971000d12630daca9a6
Validity
Not Before: Jun 13 17:36:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c94bc87b699b99780849b64e1071e2970daaa0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:6e:19:02:6a:ce:74:c6:03:93:07:95:a7:
7a:a3:06:7f:8f:7d:a1:47:ed:2f:e4:b4:01:4d:7f:
8d:45:7d:58:0f:f5:0a:66:23:84:c5:2f:97:b3:5d:
e6:6d:37:be:3a:24:d1:dd:f2:a5:bc:b2:c5:ec:e4:
6b:e7:26:1b:8b:bd:23:48:3d:65:34:a5:84:33:87:
7e:46:ae:0d:9d:eb:49:b5:2c:45:77:04:df:15:3f:
cd:af:80:13:ca:ef:cd:c9:3d:41:80:b5:c0:da:91:
91:15:ac:17:b0:25:f4:55:04:84:c3:7d:49:9e:13:
3b:4c:b2:e3:1e:aa:24:8f:f5:d4:92:68:96:6b:e0:
37:07:74:7a:79:8c:71:75:e3:23:8c:8e:c0:e7:fc:
8a:ec:1d:9b:7d:d9:48:28:b2:1f:5b:5e:68:49:d2:
b3:14:7b:ae:c4:d5:aa:59:9a:85:2a:e8:6e:91:5a:
c5:cf:73:58:97:8b:9e:e6:ae:4d:89:43:4b:88:0c:
ee:d1:56:f0:99:f1:9a:66:bf:fa:a2:70:b0:6b:66:
2b:eb:dd:72:a7:41:93:55:8c:cd:f9:e2:04:49:a8:
48:bd:d7:72:46:cc:22:6c:0b:b7:50:30:2c:47:c4:
8e:10:c4:a5:f2:d2:d2:c5:eb:d6:c5:52:ca:89:d5:
64:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:94:BC:87:B6:99:B9:97:80:84:9B:64:E1:07:1E:29:70:DA:AA:0E
X509v3 Authority Key Identifier:
keyid:A1:5D:95:96:B7:A5:EF:08:89:A7:39:71:00:0D:12:63:0D:AC:A9:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/jJS8h7aZuZeAhJtk4QceKXDaqg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.44.96.0/19
IPv6:
2001:67c:20d0::/47
Signature Algorithm: sha256WithRSAEncryption
4b:2e:ed:64:c7:f8:14:48:05:4a:d4:63:0b:a6:1f:76:fd:fa:
73:ff:61:33:ca:5f:3e:eb:3e:65:e5:8a:ab:0d:78:a2:e6:96:
69:ed:fa:d3:2a:74:2a:7c:78:ce:67:e5:50:2e:f7:9e:db:90:
9d:3d:19:ef:47:f9:32:34:98:f0:6a:69:1e:9e:51:53:a9:81:
e4:11:bd:4f:fd:e6:23:90:1c:f0:df:78:28:f0:b4:e5:3c:5a:
78:92:50:d0:31:44:3a:d5:d0:f8:98:d0:66:e5:f5:b3:17:0d:
df:6e:b6:dc:a9:e2:31:7b:5c:38:34:ec:6f:2a:75:7b:e3:54:
e5:55:55:c2:30:e2:5e:0e:86:04:de:6f:a6:ba:ca:b0:e9:e1:
51:d3:30:21:37:97:e7:85:a3:5b:29:44:8a:ce:aa:3e:dc:46:
8e:a0:83:7e:82:44:d6:9c:6d:97:57:07:8e:62:3f:61:93:2b:
a6:d5:2a:cd:ed:78:3f:e1:d0:c3:9a:e7:ae:96:c6:e2:f3:6b:
97:e7:1c:90:c5:66:c7:dc:97:31:7c:0e:10:26:15:71:4f:b5:
03:80:76:c0:30:8c:4d:96:e1:47:1a:2b:89:15:37:74:7a:a2:
17:bb:e8:8b:3c:b8:8d:13:58:89:f9:42:8f:eb:9b:30:e2:df:
10:8c:34:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:58:44 2024 by rpki-client on console-ams.rpki-client.org