Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JoJPmJtDbV9sp0Ckx7yE5Sxe6jU.roa
File: JoJPmJtDbV9sp0Ckx7yE5Sxe6jU.roa (raw, json)
Hash identifier: Cdc14wt94tL8Srzwh7Lq32B/P1F5A8mFsOrO4JUT3to=
Subject key identifier: 26:82:4F:98:9B:43:6D:5F:6C:A7:40:A4:C7:BC:84:E5:2C:5E:EA:35
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0189C16F38B1DC624021761E0E0805F1A990
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JoJPmJtDbV9sp0Ckx7yE5Sxe6jU.roa
Signing time: Fri 04 Aug 2023 16:43:58 +0000
ROA not before: Fri 04 Aug 2023 16:43:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35409
IP address blocks: 89.213.179.0/24 maxlen: 24
89.213.175.0/24 maxlen: 24
89.213.159.0/24 maxlen: 24
109.176.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 07:38:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c1:6f:38:b1:dc:62:40:21:76:1e:0e:08:05:f1:a9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 4 16:43:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26824f989b436d5f6ca740a4c7bc84e52c5eea35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:80:66:dd:9c:a9:e4:09:1f:85:dc:3c:f0:18:
0e:ea:c9:df:34:90:f2:dd:7b:98:c1:94:d0:b9:39:
3b:fd:6e:c9:d5:1d:90:fd:e4:52:0b:86:7b:66:56:
fc:bd:6b:37:37:fe:34:64:11:63:5a:14:13:5c:24:
7a:3c:84:58:9b:71:95:dc:4a:58:6a:1b:18:9c:18:
5f:91:33:f6:5a:70:c2:f1:7f:b0:a7:7b:0a:e6:4a:
14:98:09:13:8b:cd:b3:fb:dc:d8:da:d9:be:5c:3e:
c5:92:47:d2:ed:33:74:d0:8b:66:cc:5b:58:76:0e:
2d:ec:6c:16:2d:dd:f2:8f:1a:a2:2e:53:ca:d9:70:
10:c3:37:ee:4e:68:24:e6:5f:bf:a6:4a:17:75:15:
42:c4:cd:a8:39:72:3f:28:2b:b8:02:bd:97:1e:8c:
cf:08:d3:aa:aa:bb:a9:21:0b:32:c7:2e:4e:b4:b9:
f3:b4:a5:33:cf:c9:78:02:9a:ce:21:18:ca:fa:f9:
68:21:16:52:11:9e:e3:dd:b7:d5:95:19:5a:ca:74:
d7:75:8a:10:72:72:2e:66:85:8b:f8:1b:63:f7:c8:
a0:03:51:81:43:2c:7e:84:26:9f:2c:49:4e:36:ab:
5f:47:38:00:55:52:07:d0:48:7e:ac:7d:a8:c2:40:
48:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:82:4F:98:9B:43:6D:5F:6C:A7:40:A4:C7:BC:84:E5:2C:5E:EA:35
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JoJPmJtDbV9sp0Ckx7yE5Sxe6jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.159.0/24
89.213.175.0/24
89.213.179.0/24
109.176.248.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d6:be:85:78:b1:d1:a3:6c:31:b0:bd:a1:75:69:7e:4d:c5:
79:a0:89:4d:04:ab:d9:21:3c:fa:57:60:dd:e1:c5:f6:9c:21:
f5:55:5e:92:27:95:a6:64:37:7d:d3:4e:a4:c5:6a:38:11:93:
2a:b8:af:30:08:db:23:68:95:23:66:e0:cb:23:a4:12:6a:31:
eb:52:38:f8:4f:f5:98:10:6e:ac:46:46:3a:64:b5:59:50:48:
de:90:f1:24:b4:35:68:3d:ce:85:1f:97:5e:d0:7f:51:81:12:
31:2f:1c:5f:54:94:83:80:ef:43:1d:6f:e5:69:05:74:d8:7e:
59:49:f4:97:06:e3:63:28:32:86:1d:b7:08:1b:92:ee:c8:66:
3f:f0:e2:4e:ab:be:e9:1e:c0:30:6c:09:28:b6:dd:c1:ac:0b:
71:78:88:ef:80:14:b6:92:cb:3a:a5:9d:bd:27:98:a8:1c:9f:
6b:d4:ee:14:52:a1:16:40:cb:52:fc:ba:04:8f:80:09:ad:60:
04:38:9b:7b:12:d1:a9:50:83:1a:78:ac:fb:98:25:12:58:19:
0f:72:7f:53:3b:6d:ca:0c:56:ed:c7:72:fd:1a:52:d2:d9:42:
6f:2a:00:da:0d:01:6a:15:85:3f:f9:c4:61:51:63:02:16:f1:
68:63:83:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:22 2024 by rpki-client on console-ams.rpki-client.org