Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/jeeQMebzVybxV4JxBuOKUWv-zDw.roa
File: jeeQMebzVybxV4JxBuOKUWv-zDw.roa (raw, json)
Hash identifier: GL3YFwXWbI2WRGZtjaQxWlPQdQ1O5+xpPNsWZHZRZvo=
Subject key identifier: 8D:E7:90:31:E6:F3:57:26:F1:57:82:71:06:E3:8A:51:6B:FE:CC:3C
Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial: 018C3F2F517AE5F959C34F665F0BCB035562
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/jeeQMebzVybxV4JxBuOKUWv-zDw.roa
Signing time: Wed 06 Dec 2023 12:51:54 +0000
ROA not before: Wed 06 Dec 2023 12:51:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202421
IP address blocks: 185.85.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3f:2f:51:7a:e5:f9:59:c3:4f:66:5f:0b:cb:03:55:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Validity
Not Before: Dec 6 12:51:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8de79031e6f35726f157827106e38a516bfecc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c0:6f:af:ec:51:b7:98:60:2f:18:d0:90:be:
6f:99:d1:0a:d9:c5:64:90:95:65:47:f5:b1:17:e0:
c7:8b:7a:e5:11:17:52:7b:cf:20:d0:3a:ce:a4:56:
9e:bd:1b:ca:15:2f:20:5d:15:42:bc:4c:9b:9d:ba:
c4:4b:68:cb:15:00:c9:ca:8f:90:08:c7:6b:c3:1a:
97:7f:10:ab:e8:54:3d:2e:4f:2f:cd:cb:ab:16:55:
aa:57:67:38:e1:94:d5:55:fb:cd:b1:96:93:4c:a9:
d6:41:f3:58:bf:11:0c:32:57:05:9e:5a:6f:18:c4:
65:f7:43:fd:d9:f6:6f:b9:37:dc:a1:97:ae:83:98:
03:1a:fd:0b:7c:aa:8a:2c:7f:62:3c:28:76:6c:31:
f3:2d:c9:b7:b3:02:85:bf:7a:28:e1:f2:56:ac:c3:
59:dc:26:4a:dc:f3:51:3d:3a:59:28:9b:4b:16:11:
40:00:2a:ef:8e:cf:72:62:e9:e1:08:f6:4d:4b:46:
f0:c2:5d:34:f3:b0:ed:37:5d:e0:a1:f0:89:65:e2:
b2:5c:b4:12:3d:1c:aa:c6:36:98:ac:90:9e:cb:56:
64:1c:85:7d:ba:dc:c9:14:b5:de:86:7a:ec:16:36:
e6:30:a2:4c:87:f9:33:52:f8:53:cd:80:95:ed:1b:
60:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E7:90:31:E6:F3:57:26:F1:57:82:71:06:E3:8A:51:6B:FE:CC:3C
X509v3 Authority Key Identifier:
keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/jeeQMebzVybxV4JxBuOKUWv-zDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.254.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:63:af:f4:94:67:7e:ed:d7:14:4c:48:54:78:3b:de:25:57:
e0:47:5c:0a:35:7f:1f:b5:9b:b4:89:31:25:89:60:fe:1a:a2:
23:10:76:c4:60:e7:8a:d9:c1:19:d7:f5:4a:ff:bc:77:1f:b8:
53:65:80:0a:3c:73:a7:d4:4a:c8:dc:59:38:ff:54:8a:81:90:
95:39:b8:5d:95:65:00:28:78:1b:4c:83:4c:e2:c8:b6:22:d0:
9d:b3:6f:56:15:e4:b8:d4:fe:1e:dc:92:68:5e:06:75:ca:16:
8a:fd:57:b6:b8:de:90:89:b2:89:7b:5e:c4:77:5b:41:72:94:
7b:31:03:3e:80:cc:17:f8:36:ef:8a:50:f9:f7:38:52:f8:e5:
f1:f7:d8:3e:42:b8:e5:74:0d:8e:bf:f3:86:a2:5f:f1:0a:0e:
17:89:b8:bb:69:93:39:83:ee:81:63:55:48:89:75:34:10:28:
72:0b:1d:28:2e:7f:b6:59:1a:22:f1:0f:7e:51:25:cc:3e:de:
96:57:13:cf:75:2f:53:e0:01:1e:e4:f4:b3:73:9e:fb:d5:ec:
29:a6:07:60:13:eb:b3:25:dc:d2:93:6a:65:cb:97:35:ee:a7:
8a:c4:8d:d2:06:e8:96:66:52:c5:f6:c1:e2:6f:84:d1:bd:de:
d0:87:13:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:13 2024 by rpki-client on console-ams.rpki-client.org