Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RPJUbro_xAyaYrm08c6dM57A5Bo.roa
File: RPJUbro_xAyaYrm08c6dM57A5Bo.roa (raw, json)
Hash identifier: OFHqyZ1uXZGsAspmc3bxNSdna/GXnolXIRvSZwUmXJQ=
Subject key identifier: 44:F2:54:6E:BA:3F:C4:0C:9A:62:B9:B4:F1:CE:9D:33:9E:C0:E4:1A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01885BFFE0A91BAB68BC13A6D9A77E3F5F10
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RPJUbro_xAyaYrm08c6dM57A5Bo.roa
Signing time: Sat 27 May 2023 06:57:55 +0000
ROA not before: Sat 27 May 2023 06:57:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 82.153.240.0/24 maxlen: 24
81.5.189.0/24 maxlen: 24
82.152.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 May 2023 08:27:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5b:ff:e0:a9:1b:ab:68:bc:13:a6:d9:a7:7e:3f:5f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 27 06:57:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44f2546eba3fc40c9a62b9b4f1ce9d339ec0e41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:12:88:a8:62:55:44:3a:94:11:db:9e:bf:ed:
01:aa:70:fc:9c:49:89:4a:59:f2:02:51:4e:5b:08:
91:92:76:38:ac:a9:35:6b:b3:fd:de:1b:a8:67:c3:
cf:aa:79:43:15:2e:a2:6c:6c:3f:23:f5:0b:2b:8f:
65:aa:38:28:f3:fa:a4:42:e9:70:14:f5:a7:cf:b0:
91:a5:1d:e7:26:c9:60:5a:65:4d:76:d6:79:8d:5f:
18:de:e6:c5:0e:32:a0:43:73:ed:6e:a4:da:b6:4d:
9c:09:28:36:41:13:ee:3e:d9:23:46:b9:93:44:a4:
1d:9f:17:ca:6f:72:6d:d1:cd:08:af:d5:11:80:2b:
86:21:2f:78:ee:9f:6b:67:ec:fc:1f:ef:23:3f:a5:
7b:8c:30:a8:ff:56:90:5e:9f:f5:b9:a0:b6:79:f8:
fe:1f:3d:3d:1c:f9:50:74:ab:18:89:9d:43:62:8a:
f7:78:cc:1d:ca:26:85:40:9d:52:a3:65:d2:e1:d0:
d5:09:ca:f3:d9:1c:ce:8f:db:ee:a4:92:33:68:72:
86:8c:94:e4:46:19:46:89:c2:c6:a9:bd:8f:31:c2:
7a:e5:81:8b:ed:6d:8a:e6:35:04:6d:a3:a2:e0:fe:
01:6c:3e:3f:d0:63:bb:67:67:eb:a5:04:e0:73:48:
51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F2:54:6E:BA:3F:C4:0C:9A:62:B9:B4:F1:CE:9D:33:9E:C0:E4:1A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RPJUbro_xAyaYrm08c6dM57A5Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.189.0/24
82.152.178.0/24
82.153.240.0/24
Signature Algorithm: sha256WithRSAEncryption
52:19:4c:4d:34:80:e7:6b:25:5b:95:78:72:96:bc:0c:36:5e:
ff:45:63:76:f7:b3:bc:72:d1:da:51:96:d2:8c:bc:2e:52:6e:
0f:7d:21:3d:ce:4e:31:d7:c2:be:31:a9:2f:9c:7d:e5:46:5e:
07:5f:03:3b:b3:af:39:0d:fb:39:2e:5e:6a:44:93:f0:78:00:
90:d3:b1:42:a0:a7:1e:49:cb:be:ed:a4:5c:fe:1e:11:9f:e8:
fd:d0:60:b3:4a:34:42:64:4c:f6:91:f4:0f:af:30:b4:c2:dc:
78:2d:8e:35:fd:52:57:c7:05:be:68:56:b7:ca:eb:d5:a2:2d:
1a:5e:b3:1a:6f:85:f7:5b:43:3f:c8:80:40:89:0e:ec:33:5f:
bf:1e:38:53:b7:17:13:34:4f:56:16:e1:49:fe:54:a9:f5:d9:
32:15:b6:59:84:d5:fe:61:fe:4d:fc:3e:60:e5:c0:04:c0:f0:
48:19:94:dc:e0:6e:16:42:5b:8e:e0:a1:c3:90:99:b0:c0:af:
51:0c:55:b0:9b:f4:c6:46:c0:bb:73:f4:ec:83:93:70:8f:f2:
15:b4:ca:28:37:a5:47:41:90:c1:f1:3c:e5:3f:24:bc:40:d1:
93:97:16:31:08:a3:6b:fb:01:42:c6:26:47:74:93:fc:15:ba:
2a:4c:cb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:23 2024 by rpki-client on console-ams.rpki-client.org