Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/JC2f_HtRe5NXxtYujcK8ZVXW2Ko.roa
File: JC2f_HtRe5NXxtYujcK8ZVXW2Ko.roa (raw, json)
Hash identifier: Ielf/FmcGPGS5ypJbc9JcbC4JR1uLxvMXoaMAQenqYs=
Subject key identifier: 24:2D:9F:FC:7B:51:7B:93:57:C6:D6:2E:8D:C2:BC:65:55:D6:D8:AA
Certificate issuer: /CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Certificate serial: 0191AB9E958CC8622F258FE02D82DC709CB1
Authority key identifier: F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/JC2f_HtRe5NXxtYujcK8ZVXW2Ko.roa
Signing time: Sun 01 Sep 2024 03:26:22 +0000
ROA not before: Sun 01 Sep 2024 03:26:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43581
IP address blocks: 89.169.8.0/24 maxlen: 24
89.169.9.0/24 maxlen: 24
89.169.10.0/24 maxlen: 24
89.169.11.0/24 maxlen: 24
93.183.68.0/24 maxlen: 24
93.183.69.0/24 maxlen: 24
93.183.70.0/24 maxlen: 24
93.183.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 12:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ab:9e:95:8c:c8:62:2f:25:8f:e0:2d:82:dc:70:9c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Validity
Not Before: Sep 1 03:26:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=242d9ffc7b517b9357c6d62e8dc2bc6555d6d8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dc:38:c4:94:4b:3c:d3:d2:c0:9f:cf:48:51:
f0:cd:53:83:3d:5a:e4:68:9b:2d:b9:dd:81:58:ed:
c7:a6:ef:78:79:c1:5a:67:91:0a:e3:df:87:70:7f:
55:b6:ba:dc:7a:e2:33:75:f0:ac:ad:12:97:3a:24:
b1:f3:3d:cc:05:af:ca:20:21:32:6b:c7:3c:dc:5b:
5b:f4:5f:cc:f0:63:2d:75:c3:7d:ee:a4:4b:73:f3:
74:da:31:af:16:01:33:54:ca:a9:2d:db:71:67:d7:
52:e9:53:f3:ba:e9:bd:0d:8c:bc:8e:94:e4:65:89:
e5:71:dd:f7:7e:39:b8:35:47:ce:ea:9d:69:91:35:
45:fa:a1:ac:7a:9f:1d:f8:55:67:89:0d:4a:4d:89:
fc:56:44:7f:0f:bc:e9:d0:9a:03:e9:cc:0b:0a:71:
6e:06:04:ef:23:ac:18:e2:0c:cc:58:96:5b:2a:57:
58:cb:f2:50:df:45:a7:3a:44:6f:0d:fe:5e:04:d7:
15:dc:2d:fe:70:7e:5d:76:ce:02:bf:d6:eb:82:71:
4e:ac:17:76:24:6f:98:27:60:27:79:74:46:58:fc:
0b:41:0e:e5:8c:5c:a2:26:2b:54:22:70:18:bf:93:
8d:a9:b5:0e:f3:4f:05:61:1d:6c:dd:4d:fd:9a:5c:
d3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2D:9F:FC:7B:51:7B:93:57:C6:D6:2E:8D:C2:BC:65:55:D6:D8:AA
X509v3 Authority Key Identifier:
keyid:F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/JC2f_HtRe5NXxtYujcK8ZVXW2Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.169.8.0/22
93.183.68.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:80:cb:08:71:ab:57:39:62:74:4a:b6:80:93:f3:df:8a:2f:
4a:bb:69:79:6a:90:b8:93:13:79:37:f7:fd:cd:ab:d6:61:0e:
3d:1c:5b:eb:56:6a:2c:f3:be:1c:46:b6:c7:02:e2:20:dd:73:
4f:0a:e4:d8:0c:c0:3d:1a:ff:62:c4:39:99:19:d5:7b:cf:37:
ab:07:4c:e7:5a:08:0e:31:f9:eb:48:bf:68:c3:fd:47:a8:ba:
dd:68:e6:76:f0:57:ba:b5:70:77:df:c6:41:a6:68:f9:3f:55:
61:b0:3d:6f:39:c4:d5:87:83:db:cd:c3:11:16:a8:72:4d:09:
58:a3:bd:cf:00:0f:1e:bb:6f:b8:5b:f4:a1:f0:de:e7:aa:19:
bc:59:c8:19:e8:58:fa:e1:46:c1:7a:25:86:ea:ac:09:4e:c4:
a8:96:d2:df:a8:8a:e7:27:87:1d:65:f2:ef:39:80:94:57:28:
20:8f:46:a4:28:75:3e:67:ae:f8:ad:63:72:0c:4b:9e:34:4a:
8c:5c:ca:ff:8b:92:13:ce:34:c2:63:d1:9b:2b:50:c3:4c:a5:
b0:5a:b1:1e:dc:10:14:33:d5:ae:35:3b:d5:4b:26:6b:32:ef:
fb:00:a8:0b:b5:c0:00:d9:c7:cc:ff:17:9c:6e:c8:91:de:72:
f4:62:56:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 14:50:24 2024 by rpki-client on console-fra.rpki-client.org