Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JppayWpPIx-gMYGhJOJhgLsHaWg.roa
File: JppayWpPIx-gMYGhJOJhgLsHaWg.roa (raw, json)
Hash identifier: NuqIyBytY68U+TXXkMAWSDgkAADaA7dDuQvR8tXc35A=
Subject key identifier: 26:9A:5A:C9:6A:4F:23:1F:A0:31:81:A1:24:E2:61:80:BB:07:69:68
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018B3E66CDF3A108C005B22CAA1416F6E749
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JppayWpPIx-gMYGhJOJhgLsHaWg.roa
Signing time: Tue 17 Oct 2023 16:10:06 +0000
ROA not before: Tue 17 Oct 2023 16:10:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.213.176.0/22 maxlen: 24
89.213.180.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.32.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Oct 2023 07:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3e:66:cd:f3:a1:08:c0:05:b2:2c:aa:14:16:f6:e7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 17 16:10:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=269a5ac96a4f231fa03181a124e26180bb076968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:94:ec:9f:37:5c:b4:b4:76:dc:90:64:32:c5:
7c:0f:1b:52:10:d6:77:5c:95:07:b6:47:b1:43:bc:
0f:62:91:7c:90:22:c1:af:dc:b7:d9:29:e9:89:d1:
b8:e1:f5:2c:1b:2c:94:de:45:a5:f9:16:38:97:1f:
65:3e:af:89:d9:1c:db:83:f8:b6:89:45:95:38:3a:
6c:b9:24:d1:31:38:5e:ec:9c:fb:dd:50:40:76:ca:
25:20:64:1d:c2:7e:a8:60:76:b8:61:97:7d:f0:ac:
4d:90:b4:38:47:c2:b4:13:f6:77:a6:10:63:e6:fa:
b4:1a:bc:be:f5:74:48:71:6b:0f:8c:fb:2b:df:86:
4d:c8:4c:c6:5e:b3:f7:6d:0e:de:cf:e9:e5:d6:60:
6a:28:0c:2a:a6:5c:30:91:a5:a3:3d:b8:63:dd:09:
54:e3:57:e7:13:1d:c8:ef:af:5b:28:99:05:27:a1:
81:56:d6:60:df:29:56:5f:91:df:23:32:4b:32:eb:
25:3f:63:61:81:51:46:76:4d:69:f6:50:72:12:55:
8f:c8:d3:77:5b:f5:39:69:ef:e1:4a:83:ab:0d:a9:
75:89:f5:94:96:80:07:b4:e2:be:a3:c0:94:b8:33:
21:f2:b5:f5:59:3f:dd:aa:ba:b8:ac:ea:75:a8:7b:
bb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9A:5A:C9:6A:4F:23:1F:A0:31:81:A1:24:E2:61:80:BB:07:69:68
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JppayWpPIx-gMYGhJOJhgLsHaWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
81.168.123.0/24
82.153.32.0/24
82.153.136.0/22
89.213.148.0-89.213.159.255
89.213.176.0/21
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
38:0f:28:66:0a:14:18:8b:9b:e7:ec:cb:24:7c:52:61:4a:30:
19:0a:14:84:0b:f8:77:d8:8b:4c:a8:eb:f2:2d:bc:7f:20:86:
8b:3b:06:c2:a1:ff:8b:c0:23:58:b7:44:78:12:b3:c3:f3:ae:
9e:04:1f:62:7f:0f:08:f3:c5:44:b8:61:86:94:4a:9a:33:ab:
49:13:88:fd:17:36:a2:87:78:99:73:7c:cc:17:44:c0:bf:4c:
35:65:60:ae:dc:e9:3d:10:fc:c9:ca:b5:1a:4b:2e:48:91:96:
88:87:ec:30:a4:ea:da:7d:ad:e2:f1:4f:6e:3a:08:01:8d:56:
84:9b:c1:a6:ac:60:88:8b:fa:fd:02:77:3f:39:85:7b:6b:d9:
d6:d6:4c:45:8e:db:78:64:0d:c5:2b:b3:d5:20:45:0f:ae:75:
86:f4:e5:87:5a:d4:4b:f9:62:39:61:ba:13:23:69:58:55:d8:
11:a1:63:01:b2:12:14:67:2b:dc:cd:26:fe:c4:18:46:08:54:
41:9e:65:97:eb:dd:9b:a3:d8:dd:5e:61:a9:a1:7d:60:3a:dc:
ee:c1:bf:1d:a5:47:48:b2:a8:01:34:42:8a:c5:bb:01:d5:3b:
90:bc:96:76:eb:99:f0:8d:61:41:52:23:6d:6d:06:79:c0:a5:
7d:00:02:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:22 2024 by rpki-client on console-ams.rpki-client.org