Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/JpYXX7mlWQYrTfIpDWJvR_ZeEsg.roa
File: JpYXX7mlWQYrTfIpDWJvR_ZeEsg.roa (raw, json)
Hash identifier: hcif0KHm2wH+/7B8MjPiPOi7/W/IHdCwZdNFRW3Oh2g=
Subject key identifier: 26:96:17:5F:B9:A5:59:06:2B:4D:F2:29:0D:62:6F:47:F6:5E:12:C8
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018D31C10CDCA519DF56C087101DAB469223
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/JpYXX7mlWQYrTfIpDWJvR_ZeEsg.roa
Signing time: Mon 22 Jan 2024 15:19:11 +0000
ROA not before: Mon 22 Jan 2024 15:19:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 89.40.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 07:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:31:c1:0c:dc:a5:19:df:56:c0:87:10:1d:ab:46:92:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 22 15:19:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2696175fb9a559062b4df2290d626f47f65e12c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:d9:82:27:bb:46:59:09:36:06:33:38:1e:
92:e7:26:f6:4a:d3:39:24:48:9e:20:2e:d6:8e:dd:
d9:b8:1f:5f:8d:2e:20:ac:1c:15:83:e4:66:9b:dd:
04:5c:9d:62:1d:f2:9a:c7:9b:45:30:5f:a9:18:f6:
e5:1e:90:48:36:f2:53:0a:58:ed:36:3f:c1:b9:f0:
b7:97:46:8d:de:66:cd:4f:84:16:65:7d:6a:61:77:
af:c7:60:c9:c2:c1:c5:d3:a5:06:1b:9c:f7:72:6e:
ac:54:c3:32:d2:d3:9b:74:8e:8e:e3:08:0d:21:a7:
2d:09:1c:0d:f0:a7:c6:a7:7c:e1:3c:c3:40:84:19:
56:76:21:64:d7:84:a9:bd:0d:16:1d:11:02:f9:82:
21:25:3a:73:7f:2c:08:5e:d3:7c:0d:2d:d3:b2:c6:
75:98:dd:a9:33:53:b5:02:03:16:fd:c5:f3:0f:a2:
ee:3d:13:b6:1d:a6:e6:8c:b9:2e:5b:7e:86:ad:7a:
38:0b:03:34:ad:08:64:e2:32:09:c2:e9:c9:04:f9:
81:2f:13:25:39:fc:43:40:00:ee:2b:82:91:ec:07:
e5:a3:bd:96:8b:1a:61:ae:0c:70:b1:52:14:a9:31:
6a:dd:50:41:d0:94:12:18:c5:94:a1:b4:4e:67:98:
f3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:96:17:5F:B9:A5:59:06:2B:4D:F2:29:0D:62:6F:47:F6:5E:12:C8
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/JpYXX7mlWQYrTfIpDWJvR_ZeEsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.83.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:97:24:ea:e4:f6:54:cd:4d:ec:31:ea:63:db:bb:65:d7:94:
9d:40:fe:81:07:62:2b:36:c3:47:00:f7:8d:88:34:6a:04:76:
57:a6:52:c2:ea:7b:53:8a:9f:c8:14:12:e1:b1:0f:aa:86:56:
98:a0:2f:63:1a:8d:6a:4a:4f:94:c4:3b:91:12:1e:27:ab:fe:
47:e3:b0:15:d1:79:72:3b:c8:be:38:cb:43:26:1e:de:63:2d:
a6:0e:de:2b:82:9e:5e:8c:45:69:36:9a:4c:be:6c:71:d0:24:
a4:05:9d:d8:73:cd:c9:ef:dd:b5:dd:c0:9d:9d:01:3d:0c:38:
75:88:52:fd:1d:89:a0:be:3f:e1:d5:0a:07:2b:c5:15:eb:39:
4d:dd:a7:72:56:3b:77:b1:54:1c:f0:d9:db:55:6a:7c:da:0c:
13:03:23:62:1a:49:97:70:30:75:61:00:98:49:b9:fc:73:0d:
ec:55:cb:59:1d:d1:bb:49:83:a2:36:96:fd:3a:85:ce:c9:4d:
95:83:02:c0:97:3e:37:6b:9f:c2:3f:55:9b:0a:e4:44:ce:0e:
59:a5:d8:a3:b8:27:38:21:39:38:40:f7:4c:bf:0e:f5:33:47:
ca:43:0e:7b:f2:ed:79:b7:8b:02:fd:2e:e4:17:79:78:fa:3a:
32:46:6d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org