Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JNjRPygxvy92-_IWauGg6-00MHI.roa
File: JNjRPygxvy92-_IWauGg6-00MHI.roa (raw, json)
Hash identifier: dpXDyoRDM5b6Hf0WvMuMCTyW+a39LBP+e/J1XQqustc=
Subject key identifier: 24:D8:D1:3F:28:31:BF:2F:76:FB:F2:16:6A:E1:A0:EB:ED:34:30:72
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0186E501D2182BF9CA35498B1DC1493840B8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JNjRPygxvy92-_IWauGg6-00MHI.roa
Signing time: Wed 15 Mar 2023 11:22:27 +0000
ROA not before: Wed 15 Mar 2023 11:22:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 82.153.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Apr 2023 07:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e5:01:d2:18:2b:f9:ca:35:49:8b:1d:c1:49:38:40:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 15 11:22:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24d8d13f2831bf2f76fbf2166ae1a0ebed343072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a4:cd:44:15:77:e8:6c:e6:75:ff:9f:eb:07:
db:0b:74:67:c8:9b:86:61:ba:2e:60:a4:f4:e3:da:
6e:89:15:69:88:3b:87:b2:ae:7b:8e:5d:68:16:74:
7a:d8:0f:d9:9c:46:42:be:f5:77:d0:5a:71:2a:02:
06:87:3b:43:14:48:ec:ec:26:1f:86:67:af:7f:f0:
71:88:a4:de:9c:ea:23:a5:a6:63:de:80:74:79:96:
f2:e9:4c:d0:47:b4:53:7b:47:f9:be:b4:48:08:df:
93:68:7c:f5:6e:5c:d3:ab:15:06:dc:c8:dd:9b:4e:
19:4a:47:e3:5f:bf:dc:87:b7:3a:54:d6:a3:d3:70:
7d:5f:26:57:e4:db:12:6e:8a:9c:25:a7:0e:60:1d:
67:07:62:48:bc:7c:d1:c2:8e:86:83:2f:48:ea:1e:
80:32:45:f7:f5:15:62:3e:9a:38:0e:6c:8c:02:12:
b2:63:41:6f:ce:a1:58:01:19:d8:df:c9:f7:c3:d0:
c8:fe:d2:15:9f:da:4b:0f:b2:61:85:fb:33:4b:14:
22:fb:11:4e:91:0e:cc:f0:a1:11:13:95:14:db:c9:
b4:03:55:e3:74:56:c1:9e:0c:4c:23:42:dd:b2:db:
5a:da:cf:f7:27:27:6e:97:cb:1f:cc:99:0d:9a:f5:
cc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D8:D1:3F:28:31:BF:2F:76:FB:F2:16:6A:E1:A0:EB:ED:34:30:72
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JNjRPygxvy92-_IWauGg6-00MHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.65.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:4b:56:60:7f:77:3d:42:9e:e0:a2:dc:ed:b6:78:7b:9d:8e:
f8:e4:de:ed:33:2b:e6:4e:7a:f5:47:3a:a3:79:54:11:8c:c1:
1f:ec:33:05:f2:34:64:18:ea:23:7e:b8:ea:d1:8d:5f:fe:3b:
e3:d8:8e:97:59:d7:e2:f4:b6:a6:fb:66:e5:be:f3:d7:ec:29:
71:5c:ce:09:ce:af:6c:c4:fc:ba:46:62:d1:7e:fd:e9:1d:56:
f9:98:fa:8a:f3:03:ba:e5:28:e5:a1:98:d3:59:29:d2:88:0e:
45:8a:ed:36:6d:08:90:a0:bb:f6:12:5e:42:97:c9:67:c7:f7:
6e:c0:0c:e3:e8:f5:0c:e7:37:1d:86:9c:e8:ca:07:06:dd:92:
d1:82:d1:36:3c:f6:b3:10:81:26:42:87:26:e6:2a:a7:d1:48:
b1:1a:40:48:b4:b4:cf:47:0a:8d:ab:e0:d2:e8:e4:14:17:3a:
d5:df:e5:9b:b3:39:3d:08:12:c6:18:40:dd:3b:ae:18:85:75:
02:70:a3:22:b3:a2:a5:eb:a6:54:b3:57:12:0d:9b:54:d6:ee:
1f:d0:6b:c8:50:99:67:1f:fb:3d:0c:ea:ba:7e:55:73:de:6f:
68:16:fd:79:3b:c8:a5:f2:9d:e6:69:2b:a1:1f:71:d5:33:d5:
98:28:ee:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:22 2024 by rpki-client on console-ams.rpki-client.org