Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/jyMpM33Gt5HgBEgLAxODUTMSHP0.roa
File: jyMpM33Gt5HgBEgLAxODUTMSHP0.roa (raw, json)
Hash identifier: inmqte+acGsmHoN99p7FnHAZhz0BruPIjamonFyVSYU=
Subject key identifier: 8F:23:29:33:7D:C6:B7:91:E0:04:48:0B:03:13:83:51:33:12:1C:FD
Certificate issuer: /CN=a29d9751f3675f51332734da68ea960260045b12
Certificate serial: 01856E78C9C8492AD4908EC6D8A49D633B12
Authority key identifier: A2:9D:97:51:F3:67:5F:51:33:27:34:DA:68:EA:96:02:60:04:5B:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op2XUfNnX1EzJzTaaOqWAmAEWxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/jyMpM33Gt5HgBEgLAxODUTMSHP0.roa
Signing time: Sun 01 Jan 2023 17:54:47 +0000
ROA not before: Sun 01 Jan 2023 17:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 93.185.144.0/21 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:c9:c8:49:2a:d4:90:8e:c6:d8:a4:9d:63:3b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29d9751f3675f51332734da68ea960260045b12
Validity
Not Before: Jan 1 17:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f2329337dc6b791e004480b0313835133121cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ac:32:64:59:f4:cc:16:3a:c3:94:39:7b:8f:
63:d3:40:31:e9:90:ea:ce:fe:7d:b7:c4:dc:67:87:
af:4b:fc:09:f2:54:57:2f:c2:00:a5:bc:03:1a:3d:
bf:f7:c1:f0:2f:c8:9f:6c:b4:50:03:d6:31:99:c4:
5e:0e:7a:37:a3:ff:09:21:b1:34:f4:83:4c:a0:ac:
b0:0e:d0:e7:46:b1:4b:06:be:95:bd:a4:33:c1:c0:
33:59:47:eb:0d:b1:99:93:34:83:3a:75:68:3b:58:
14:9a:28:d5:8b:1f:97:a8:60:0d:9c:ba:3e:c9:92:
bb:1d:38:1e:69:2c:63:f5:24:67:9b:c1:f4:27:ef:
d6:70:18:cf:36:77:04:4c:5d:eb:1d:41:e8:e0:53:
b9:91:f9:80:4c:2e:4b:6d:76:73:48:e5:5a:e4:d0:
32:6a:7d:5b:e2:b6:51:fb:99:b5:2e:02:0d:c1:c7:
c3:8f:a0:b2:7b:f5:ea:89:b9:90:cb:1e:48:a5:f7:
e5:fd:bf:f8:e2:2e:7b:28:ba:39:01:db:ce:01:22:
b1:00:2a:6e:bb:9e:75:6b:8b:1a:e9:26:2b:54:d9:
b5:5e:b6:f9:00:8f:fc:e1:60:7f:8b:94:4c:bd:e1:
21:d4:22:9b:2d:8a:37:5f:da:29:cb:7b:52:47:55:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:23:29:33:7D:C6:B7:91:E0:04:48:0B:03:13:83:51:33:12:1C:FD
X509v3 Authority Key Identifier:
keyid:A2:9D:97:51:F3:67:5F:51:33:27:34:DA:68:EA:96:02:60:04:5B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op2XUfNnX1EzJzTaaOqWAmAEWxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/jyMpM33Gt5HgBEgLAxODUTMSHP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/op2XUfNnX1EzJzTaaOqWAmAEWxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.144.0/21
Signature Algorithm: sha256WithRSAEncryption
34:13:da:6f:9b:31:3a:76:87:4e:a5:de:4e:68:01:05:df:fb:
62:53:e6:54:67:05:9f:32:92:58:99:6c:e6:c2:95:29:27:a0:
db:e5:7b:62:52:e6:25:be:20:67:86:a3:e6:b9:2b:42:7e:a4:
56:fc:62:81:23:73:dc:c7:a2:fb:0a:11:66:73:70:77:62:67:
f3:54:48:e1:77:5a:c8:b6:12:69:c9:be:1a:70:33:8f:a0:d1:
09:fc:ab:45:db:f7:47:97:22:23:2d:f8:36:3e:32:cf:dc:34:
47:d5:f6:1b:0d:bd:15:fe:bf:db:ea:3c:ff:29:ca:1c:97:14:
eb:17:3d:91:4c:fe:5a:54:db:d5:a9:4d:d4:1d:32:43:38:e9:
47:e1:03:c1:74:37:8f:96:e0:e6:82:26:d6:69:02:96:58:53:
0a:ba:8a:6c:ed:12:a3:fc:8d:4e:bc:e3:8e:a5:cb:f4:af:40:
29:25:3c:27:78:e0:78:13:19:ea:c9:34:c9:30:51:80:04:63:
8d:38:5a:f9:f5:db:fa:a3:89:f9:0c:ff:58:35:1b:52:14:de:
bc:b2:38:3b:a3:79:24:ce:8d:f6:06:32:32:89:cc:22:c5:5d:
ae:c4:96:43:6a:28:33:1f:2d:51:72:f1:d1:01:52:93:10:7e:
c7:a0:32:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:34 2024 by rpki-client on console-ams.rpki-client.org