Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/JrQvgwK_eThR63lCQxynMMgZE8Y.roa
File: JrQvgwK_eThR63lCQxynMMgZE8Y.roa (raw, json)
Hash identifier: N/TbAhviE7goWVZIywfrLko3LMBxH6BL2tcu/3uXIqc=
Subject key identifier: 26:B4:2F:83:02:BF:79:38:51:EB:79:42:43:1C:A7:30:C8:19:13:C6
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 018935BAF223EFE6E310C7D1A0D27CDE7944
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/JrQvgwK_eThR63lCQxynMMgZE8Y.roa
Signing time: Sat 08 Jul 2023 13:39:51 +0000
ROA not before: Sat 08 Jul 2023 13:39:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199984
IP address blocks: 185.123.100.0/23 maxlen: 23
2a11:840:24::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 12 Jul 2023 17:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:35:ba:f2:23:ef:e6:e3:10:c7:d1:a0:d2:7c:de:79:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jul 8 13:39:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26b42f8302bf793851eb7942431ca730c81913c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8f:24:1c:fc:29:6c:63:be:16:20:40:6a:0a:
21:96:11:52:c0:77:66:8f:f4:41:e5:6c:7f:a4:32:
e1:0e:f1:4a:36:72:6b:8d:2e:0c:a5:90:c4:5f:b7:
23:37:76:31:86:5d:ce:68:a1:1d:68:f1:ba:16:98:
92:ab:a5:01:dd:8c:57:c0:6e:35:c3:30:88:c9:df:
c6:5f:e9:57:ee:e7:48:13:b9:a0:17:e4:db:4b:2c:
00:2c:17:0f:3f:9a:4f:09:7e:ed:91:7c:a8:ba:d3:
3a:37:a6:17:50:73:9d:e8:1d:a6:4b:1c:37:34:71:
2d:1f:6a:21:08:c8:c4:57:b2:9e:d7:bb:80:64:ff:
b1:6d:2b:a3:71:55:02:db:f6:bf:f6:c7:9b:4b:06:
fb:76:a3:7a:69:a9:9b:8c:1c:de:2c:a5:64:fe:7c:
45:1b:f6:7c:3e:83:27:b4:ca:1c:35:6e:c2:a3:f6:
fd:2c:4f:a1:66:a3:5e:79:e0:c9:20:1a:72:d9:f5:
08:51:b8:65:c6:ff:57:fe:de:28:7e:58:78:b2:63:
b7:5c:d2:45:33:b4:a4:87:bf:d6:8b:1c:53:81:9f:
98:ff:9a:9b:51:c1:f9:35:90:47:27:da:9d:a2:15:
d2:65:cc:45:1f:db:80:23:be:40:72:de:26:03:a0:
2a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B4:2F:83:02:BF:79:38:51:EB:79:42:43:1C:A7:30:C8:19:13:C6
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/JrQvgwK_eThR63lCQxynMMgZE8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.100.0/23
IPv6:
2a11:840:24::/48
Signature Algorithm: sha256WithRSAEncryption
39:7f:41:05:a9:b4:04:c3:45:b2:46:45:22:8d:68:6c:25:ab:
b5:8d:d1:c7:05:c0:25:44:d2:73:ac:89:db:77:0e:2d:a9:05:
35:44:08:03:69:06:23:f0:49:3f:17:e6:db:d5:cd:c5:7f:5b:
c9:74:33:07:9c:44:54:27:c1:37:5a:d4:12:b9:e4:3a:88:08:
4c:67:cf:ea:51:1f:c8:d5:c9:72:5a:fa:94:fe:37:11:4a:1e:
27:cf:7f:54:92:bb:5c:46:ff:b7:d2:95:e0:2c:3f:8f:02:26:
f6:e9:e3:06:1f:c9:04:82:58:cf:19:84:d3:81:1e:68:ba:48:
0a:2c:e9:96:ba:98:65:63:3c:5f:b0:71:d2:f0:46:40:66:0c:
0a:47:c1:7f:5c:72:56:34:0f:54:54:ea:33:d6:a6:27:92:cf:
ca:8c:e3:74:d8:90:15:da:41:3a:09:38:e2:83:88:6f:99:09:
e2:2c:fd:ea:ed:cb:40:55:2d:25:6b:63:1d:6e:25:a0:90:45:
93:47:d6:34:2e:51:f9:cb:8b:00:e7:50:68:c5:43:1c:5c:f7:
e5:3f:94:e8:f1:80:35:c1:2f:cc:23:4d:4a:32:dd:71:d6:b6:
0e:4e:27:77:72:84:c6:d5:01:5b:9a:16:92:86:fb:a3:25:a0:
74:9d:5a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:51 2024 by rpki-client on console-ams.rpki-client.org