Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/JpgkKUl5UoGFcRKwFJHiyVYE7TU.roa
File: JpgkKUl5UoGFcRKwFJHiyVYE7TU.roa (raw, json)
Hash identifier: dZyR5wyNo+jp/9/9z0bWrPtS54BLjGh+xuDBo9nulr4=
Subject key identifier: 26:98:24:29:49:79:52:81:85:71:12:B0:14:91:E2:C9:56:04:ED:35
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018C3487F7A3E34C22606927C0B7BC85FA40
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/JpgkKUl5UoGFcRKwFJHiyVYE7TU.roa
Signing time: Mon 04 Dec 2023 11:12:55 +0000
ROA not before: Mon 04 Dec 2023 11:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197842
IP address blocks: 89.47.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:34:87:f7:a3:e3:4c:22:60:69:27:c0:b7:bc:85:fa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Dec 4 11:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2698242949795281857112b01491e2c95604ed35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:33:40:e8:54:f7:14:85:1a:5e:38:fe:3f:4d:
bf:36:33:8c:2a:66:e2:e6:97:36:bc:7c:18:37:c2:
45:e8:5f:94:0a:21:5c:ee:5b:19:21:d9:5e:9d:4a:
dd:f9:cd:85:4b:c7:50:90:0f:52:09:43:34:03:11:
1f:28:29:2b:b7:53:76:c2:ca:f9:26:cb:0b:9d:0b:
b2:36:68:7d:ea:6d:38:c4:f7:3d:3d:83:1f:6c:d7:
56:ad:34:d2:3d:94:f7:7c:2a:97:2d:8b:7e:e2:5a:
61:bb:ee:29:1e:dc:e7:96:7e:00:23:2d:94:c7:04:
07:8e:6d:f5:ac:c7:c8:ff:9a:25:69:c8:cb:26:c9:
65:04:59:e4:73:df:79:97:06:a6:bf:2c:9a:3d:22:
c0:f4:56:bc:47:16:a7:36:d2:44:ee:fc:c7:c2:14:
13:2f:5d:4f:1e:5b:43:ce:16:90:85:36:76:19:7a:
7a:32:58:de:6b:b5:50:a7:bb:b3:4f:fa:13:25:46:
8f:d8:ba:f5:df:5a:65:56:f3:cc:c2:79:29:67:5b:
82:ad:a4:e5:ed:87:e0:6e:98:a1:a6:07:fe:50:35:
61:a8:f7:30:6e:9e:0e:9a:36:09:99:48:cf:c5:d7:
44:e3:bc:43:dc:76:33:55:d3:f1:a1:d0:15:1e:82:
f0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:98:24:29:49:79:52:81:85:71:12:B0:14:91:E2:C9:56:04:ED:35
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/JpgkKUl5UoGFcRKwFJHiyVYE7TU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.113.0/24
Signature Algorithm: sha256WithRSAEncryption
30:be:17:46:a6:48:ae:e4:72:69:81:cd:4e:e2:75:04:af:8f:
8a:e5:6c:ff:8e:f0:5a:d4:84:3e:34:b7:68:37:ff:b2:ad:90:
c8:61:60:ce:e9:9d:e9:7e:84:b9:9c:9c:db:19:04:4f:fa:82:
fe:19:9b:bb:df:57:c0:d5:23:c0:a7:11:b3:13:53:81:ac:8a:
e9:6b:42:d3:42:6f:aa:80:90:6a:68:bd:46:a5:75:25:51:9d:
53:a8:9a:ee:85:2e:a8:bc:4e:dc:e1:f0:d6:83:c8:f1:cc:3c:
e6:4d:81:46:16:68:f0:4f:a0:31:41:8f:d4:94:12:43:26:6e:
26:9b:99:67:f8:d0:f7:45:af:7e:0e:eb:b5:f4:e6:fc:08:b8:
71:14:63:ff:d0:e7:fe:e9:02:99:da:83:1f:0b:ee:ed:18:33:
46:08:79:ec:a9:a4:01:ac:26:27:5e:fa:17:f7:f2:df:5e:cd:
ba:15:5b:aa:c7:88:5b:93:23:0c:e4:9d:2b:00:4b:65:56:40:
b2:c9:92:8b:b6:71:0d:ac:f7:f2:3e:40:d1:ef:19:ae:cb:98:
07:3b:76:38:8c:55:14:57:57:9d:ee:ff:d4:69:42:16:a7:13:
99:b5:db:bd:0b:10:04:1c:f9:a0:fd:60:cc:31:88:2e:58:f2:
90:48:64:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org