Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/jDzab-useXyTkT7evdWfY9_BF5o.roa
File: jDzab-useXyTkT7evdWfY9_BF5o.roa (raw, json)
Hash identifier: uNdlbviFFtLa1ukRguCT2Cw5cX3AkaqeX6FNknOai4w=
Subject key identifier: 8C:3C:DA:6F:EB:AC:79:7C:93:91:3E:DE:BD:D5:9F:63:DF:C1:17:9A
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 018BAE90E329183C465D80C2BA5918783C51
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/jDzab-useXyTkT7evdWfY9_BF5o.roa
Signing time: Wed 08 Nov 2023 10:53:32 +0000
ROA not before: Wed 08 Nov 2023 10:53:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29141
IP address blocks: 93.89.24.0/24 maxlen: 24
37.247.112.0/24 maxlen: 24
37.247.118.0/24 maxlen: 24
37.247.113.0/24 maxlen: 24
37.247.115.0/24 maxlen: 24
37.247.114.0/24 maxlen: 24
2a03:402::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 27 Dec 2023 22:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:90:e3:29:18:3c:46:5d:80:c2:ba:59:18:78:3c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Nov 8 10:53:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c3cda6febac797c93913edebdd59f63dfc1179a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ef:5f:56:4a:57:ae:38:8d:2e:b7:ca:5b:62:
36:2e:43:98:2d:ef:d3:2b:48:22:d6:a3:eb:0e:ba:
ab:53:f7:bb:c4:1d:ff:f4:07:21:3e:d9:a7:5b:77:
a7:4f:31:42:fe:ce:ed:fa:0b:f4:a4:39:49:b2:e0:
36:73:8b:91:39:64:3c:63:28:44:1c:a8:bc:ec:b6:
fd:68:d8:05:fb:71:07:d1:cd:c3:c3:24:d9:07:28:
72:ca:7b:e1:fb:dc:11:50:f6:6c:0a:10:5e:57:fe:
7e:b4:c5:e3:20:3e:3c:5d:9e:b5:a1:ee:19:f9:d7:
37:33:65:aa:d6:fd:2a:61:64:99:17:38:fd:f3:f6:
73:21:cd:20:42:6a:df:e3:b3:64:2b:4e:2f:c1:97:
64:e8:83:5e:62:27:a0:57:3a:b1:06:65:bb:b3:f8:
d5:23:b7:d0:77:85:bc:c2:75:38:30:fa:fe:b4:37:
c6:ac:07:04:b2:38:5b:ca:9d:27:2f:07:d9:bb:b1:
b6:47:0f:2a:37:36:8d:bb:4c:db:a6:56:d4:15:d4:
13:3c:c1:06:45:32:fd:12:af:41:ff:f4:b0:f2:b4:
a4:93:aa:36:a7:31:f1:9c:19:d0:54:58:6d:ac:1f:
03:e2:8f:98:a7:c6:25:a6:94:4f:ca:b3:42:a2:68:
47:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3C:DA:6F:EB:AC:79:7C:93:91:3E:DE:BD:D5:9F:63:DF:C1:17:9A
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/jDzab-useXyTkT7evdWfY9_BF5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.112.0/22
37.247.118.0/24
93.89.24.0/24
IPv6:
2a03:402::/32
Signature Algorithm: sha256WithRSAEncryption
5a:88:58:76:21:50:9c:fb:68:2b:1a:1d:a5:ea:64:a3:db:7c:
26:a8:71:9d:25:13:9f:8f:b6:f1:63:a4:eb:10:b8:61:5b:0e:
94:76:45:1c:0b:7c:b8:60:d5:13:5c:8e:f1:e0:87:d2:85:ab:
2c:4e:06:9e:f3:42:37:6e:f3:0a:5d:ce:1d:2b:a9:72:e1:dc:
7d:c4:44:03:17:cb:15:ac:c8:42:65:03:5b:f2:f3:d3:c4:42:
f4:4f:39:06:66:3f:4b:95:17:23:20:aa:31:9b:e4:b9:7b:df:
06:cf:b6:b4:47:03:46:43:d0:e0:23:49:c3:6c:61:6b:45:8c:
61:20:37:34:b7:e2:e8:bc:e4:92:ff:ae:23:fe:86:67:6d:38:
e9:54:41:0a:e1:d9:1c:87:6f:6f:0d:62:2a:da:89:91:08:e3:
47:04:e4:40:0d:c5:a0:38:d3:2b:0d:62:a4:e8:7a:ca:39:ae:
15:3d:5e:b9:25:5f:7c:12:02:80:9b:87:e3:4b:8e:85:f9:d8:
aa:d0:b0:bd:1f:7e:bd:b5:52:1c:b2:32:5a:26:1b:73:a0:14:
83:ba:4c:61:2c:72:9e:b6:87:46:5f:68:0a:0d:b8:4a:52:99:
8a:be:91:39:44:51:87:d9:98:b2:4c:54:5a:53:fd:15:11:39:
97:e4:d3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:18 2024 by rpki-client on console-ams.rpki-client.org