Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/jJfIihArtM0CKT-vmym-k__ZY94.roa
File: jJfIihArtM0CKT-vmym-k__ZY94.roa (raw, json)
Hash identifier: JYCWvljGod6NvKw15isAGBwQUOXAVYtOdV+bt7xXoec=
Subject key identifier: 8C:97:C8:8A:10:2B:B4:CD:02:29:3F:AF:9B:29:BE:93:FF:D9:63:DE
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 018CC72704320360335857A69C3EFD7BCC04
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/jJfIihArtM0CKT-vmym-k__ZY94.roa
Signing time: Mon 01 Jan 2024 22:31:12 +0000
ROA not before: Mon 01 Jan 2024 22:31:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 147.161.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 08:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:04:32:03:60:33:58:57:a6:9c:3e:fd:7b:cc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Jan 1 22:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c97c88a102bb4cd02293faf9b29be93ffd963de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:77:cb:78:de:33:18:fd:0d:a3:f5:5f:d8:87:
57:da:72:bd:4d:4f:28:24:8c:78:0d:0c:f6:b7:1e:
e6:fe:52:ae:3e:a5:af:ea:63:81:58:80:dc:22:79:
54:bd:1c:11:2d:b0:b1:aa:ba:ec:e7:2a:92:49:d6:
b1:b8:4a:18:64:9e:95:3e:e8:11:38:9c:1d:09:92:
1c:05:5f:e1:f4:a4:4a:02:45:4e:5f:46:e9:f6:5e:
bb:b7:43:44:24:79:88:4d:b5:b2:42:ea:17:0f:21:
4d:59:16:60:a6:b4:1d:69:40:ce:8d:9f:9f:aa:5f:
c5:25:b8:e7:1c:6a:1e:88:de:4d:80:3d:83:0e:bf:
5b:b5:68:20:78:bb:6c:b7:60:01:e7:d0:a0:9c:db:
ca:89:d6:46:54:1c:f4:c7:c9:6f:d2:ed:df:32:7c:
14:c3:b5:36:83:1e:66:12:a7:2c:89:9a:ff:2b:d6:
7e:33:e9:c1:6a:8e:9b:d3:87:11:f8:1a:30:0a:6c:
6d:7f:94:ba:d2:bb:09:a0:e9:99:52:f4:12:f3:4e:
ef:0a:ae:b1:22:8a:85:b7:f2:2e:ee:9e:3f:1e:55:
70:37:b1:3f:ee:41:59:9f:e6:37:a1:04:e8:69:ac:
f8:b5:ff:a0:0f:47:59:13:6d:40:83:64:02:d3:9b:
4d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:97:C8:8A:10:2B:B4:CD:02:29:3F:AF:9B:29:BE:93:FF:D9:63:DE
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/jJfIihArtM0CKT-vmym-k__ZY94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.161.3.0/24
Signature Algorithm: sha256WithRSAEncryption
82:dd:21:d7:d5:05:45:09:22:53:43:72:17:67:08:d9:e8:00:
69:f2:a0:04:f3:ba:ba:5d:8e:23:e3:4a:ac:8e:66:c1:9c:89:
ec:1e:9c:35:2a:23:2b:fa:57:ef:e8:4f:53:e4:f3:21:03:41:
99:7c:9e:61:b5:55:ae:fa:a5:20:9e:30:c2:32:60:25:24:a0:
39:c5:ff:35:47:03:19:21:e4:ef:30:80:94:86:a1:16:55:bd:
5b:fb:9b:0f:72:d1:85:f1:f4:0a:83:b0:9c:94:b3:21:1b:ce:
ca:b0:7c:80:3d:f6:21:a5:90:2d:ae:7f:72:67:54:2b:b9:ad:
e6:7d:04:29:f3:b6:2e:41:52:ad:5d:02:bd:ee:56:8a:31:88:
5b:43:8e:0c:07:81:3c:72:a1:30:d9:ee:4f:6b:62:68:b3:44:
fd:c0:df:d4:aa:c8:0c:3e:01:77:ec:a8:43:bf:e0:e3:c8:35:
36:4a:82:42:f3:29:ba:a6:90:9a:d7:81:a5:87:87:1c:0e:d9:
8b:25:83:bd:62:ff:d7:b7:44:2b:c0:2d:82:77:3a:15:44:8d:
1f:35:2e:f3:83:a0:10:66:f1:71:8e:1a:65:c1:ca:c7:55:06:
23:f3:55:de:4b:b3:d7:e8:a6:7a:7c:3e:4f:23:22:65:f1:d8:
64:b7:33:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:14 2024 by rpki-client on console-ams.rpki-client.org