Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/re8_JfpD_LjjRNhspK4-hx6br40.roa
File: re8_JfpD_LjjRNhspK4-hx6br40.roa (raw, json)
Hash identifier: 1hKBH73f9B5gKvuGh7XUAc7K7c2EJOfT2c5/4c1cHNw=
Subject key identifier: AD:EF:3F:25:FA:43:FC:B8:E3:44:D8:6C:A4:AE:3E:87:1E:9B:AF:8D
Certificate issuer: /CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
Certificate serial: 01856B77C1CADE828AC78732F5CAEFAD0E5E
Authority key identifier: 98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/re8_JfpD_LjjRNhspK4-hx6br40.roa
Signing time: Sun 01 Jan 2023 03:54:48 +0000
ROA not before: Sun 01 Jan 2023 03:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48518
IP address blocks: 176.74.32.0/21 maxlen: 24
194.177.8.0/22 maxlen: 24
2a00:eb80::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 27 Nov 2023 18:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:77:c1:ca:de:82:8a:c7:87:32:f5:ca:ef:ad:0e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
Validity
Not Before: Jan 1 03:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=adef3f25fa43fcb8e344d86ca4ae3e871e9baf8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:7c:1b:b5:9a:9b:4c:a0:f0:91:a3:99:e5:
65:37:af:d2:7e:45:2d:05:67:ab:15:fb:e0:21:4f:
32:93:6f:7a:d8:90:03:ca:47:06:aa:83:08:be:c5:
fa:00:0a:4d:bd:c6:e6:06:3d:83:50:b2:84:f4:de:
02:21:09:4f:13:2e:17:12:ef:83:1c:6a:72:f0:8c:
8b:c5:2f:ff:c2:6d:2b:0b:c5:f6:3c:a0:89:61:9e:
e2:db:0e:90:c9:fa:51:b3:58:33:d3:3c:47:25:c1:
95:f8:9c:d2:e4:6e:83:cd:ff:37:a8:f8:f8:8b:c6:
f9:20:94:3f:49:bd:4b:d0:f6:9c:1f:47:b0:f3:aa:
92:f1:00:49:94:5c:b4:5f:f7:01:e5:4d:c4:30:06:
60:79:96:b7:b9:9b:51:de:7d:44:14:15:f8:77:bc:
54:c3:72:b5:ff:4e:14:1c:14:c1:bd:95:c2:76:09:
5f:9c:c0:f1:a7:b8:0b:ab:ae:3f:6e:a0:47:ea:4d:
37:38:33:19:44:c4:2e:36:ab:af:9a:6b:ff:aa:b1:
e9:ba:f6:c8:41:a4:31:d8:55:ee:58:f3:c7:14:e6:
8e:e2:21:92:9f:24:66:1d:ed:1f:b2:29:98:f0:a2:
4c:52:22:b2:71:2d:66:89:ac:cc:2f:1c:49:4e:9a:
3e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EF:3F:25:FA:43:FC:B8:E3:44:D8:6C:A4:AE:3E:87:1E:9B:AF:8D
X509v3 Authority Key Identifier:
keyid:98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/re8_JfpD_LjjRNhspK4-hx6br40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.74.32.0/21
194.177.8.0/22
IPv6:
2a00:eb80::/32
Signature Algorithm: sha256WithRSAEncryption
13:ba:42:83:e9:f6:8a:7f:08:d5:d8:36:1a:23:4d:e7:a2:ed:
3c:5b:c8:16:da:af:cc:85:f1:ea:50:40:76:0b:35:1e:61:28:
6a:31:49:3e:7a:cf:f1:9d:63:bf:f8:7b:62:06:1b:10:77:8a:
6a:9d:bf:3b:1a:86:1d:62:82:2b:60:8a:24:ef:90:68:43:ad:
94:03:b6:43:73:59:bc:71:bc:45:e9:42:0a:e7:a4:15:73:7c:
67:b0:68:8e:48:47:5d:b4:11:0f:55:1b:13:74:fe:92:58:cb:
ec:c7:b3:f4:2d:a3:cb:74:25:c9:ad:3d:32:3a:0a:71:c2:47:
db:fd:9f:35:16:0b:07:e6:eb:87:7b:ea:b3:41:c8:36:28:71:
cd:39:cb:e7:27:90:7a:9f:2a:40:17:23:7a:45:fa:69:aa:ed:
29:5a:55:b5:68:89:67:a8:cf:e8:25:3a:7c:17:12:37:6f:93:
e9:b8:5c:75:51:64:3e:aa:d2:6b:ee:3e:48:7b:84:9d:81:58:
c2:af:ef:75:4e:9b:87:aa:65:ec:26:02:cd:ce:2d:6d:fb:f4:
bd:12:07:2f:40:a6:05:fd:04:5a:92:35:bd:a5:0b:41:21:ed:
33:54:b3:a1:00:bc:bc:90:0c:49:78:a7:30:91:c2:b6:ab:03:
b9:8b:94:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:20 2024 by rpki-client on console-ams.rpki-client.org