Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/JtKDgDley9ej0yB9P3k8yNgSQd8.roa
File: JtKDgDley9ej0yB9P3k8yNgSQd8.roa (raw, json)
Hash identifier: XTqFHZ/PyQxBmghSdrn+iqb0xdoLoIhqAaT1t8y7Fts=
Subject key identifier: 26:D2:83:80:39:5E:CB:D7:A3:D3:20:7D:3F:79:3C:C8:D8:12:41:DF
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0186EA79AD0EF6D14C4265DAAB6C38793527
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/JtKDgDley9ej0yB9P3k8yNgSQd8.roa
Signing time: Thu 16 Mar 2023 12:51:28 +0000
ROA not before: Thu 16 Mar 2023 12:51:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199425
IP address blocks: 85.209.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ea:79:ad:0e:f6:d1:4c:42:65:da:ab:6c:38:79:35:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Mar 16 12:51:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26d28380395ecbd7a3d3207d3f793cc8d81241df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9c:16:8e:5a:62:f7:19:a3:dc:ea:b7:a2:e4:
e9:4c:c2:88:35:b5:4a:cc:5d:50:42:dc:7c:06:93:
d8:a5:5a:ef:26:e7:51:b3:c7:8e:fd:ba:75:08:b9:
9d:f3:4c:ab:2d:ce:6b:4c:ad:17:78:e5:ef:67:f6:
9e:f2:d5:57:bf:4e:24:dc:90:5e:9a:22:52:c9:8d:
6f:02:6d:29:89:33:32:a9:5e:ed:03:87:20:fd:c1:
84:95:2f:a3:7c:07:47:8c:ec:b6:21:33:ba:07:45:
73:68:6c:57:03:c1:8a:a7:c9:ce:c9:c3:1a:9b:3a:
22:14:05:95:d6:88:d1:f7:a7:c1:e1:91:a9:01:8f:
e3:0d:3f:b5:52:0d:ec:ef:30:58:38:18:bf:ce:f1:
85:20:ae:94:0c:9f:99:ba:e9:1b:57:7c:80:6c:02:
74:d8:a0:cd:db:d6:90:0b:84:d5:a9:de:b9:d0:26:
29:cc:76:99:0d:b1:2c:80:34:69:fa:d0:23:8f:62:
4a:51:cf:c7:7f:f4:34:1b:ad:cb:5f:73:e2:a5:95:
43:5b:1c:1b:ff:5c:a1:3b:05:bb:83:8e:64:6e:19:
0b:fb:04:13:0c:a9:92:59:af:f2:3d:2a:72:d2:a4:
c8:e9:61:8f:f7:66:57:01:91:a1:9d:5f:76:d0:b5:
62:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D2:83:80:39:5E:CB:D7:A3:D3:20:7D:3F:79:3C:C8:D8:12:41:DF
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/JtKDgDley9ej0yB9P3k8yNgSQd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.3.0/24
Signature Algorithm: sha256WithRSAEncryption
12:37:ae:8b:a7:b8:9a:44:c8:a2:66:e6:80:b1:bb:5a:0e:bd:
22:8f:87:cc:b0:f0:d1:5f:42:66:03:48:8b:4f:31:7c:0c:25:
1b:24:3c:6c:24:68:51:5a:27:e8:1d:8b:7c:0c:1f:48:e5:94:
0f:7c:15:42:d7:60:2b:57:f4:20:89:b0:02:31:a0:5e:36:78:
8b:63:e6:84:dd:ef:a2:3e:07:34:67:80:84:4b:22:e2:f1:fc:
30:89:b7:58:c4:f2:86:36:c0:38:18:dc:f9:1e:f0:fb:be:10:
a0:df:c1:cc:aa:69:32:40:8b:2f:f1:57:11:41:84:aa:91:8c:
b4:26:6b:c4:7d:ee:a1:bb:5f:ad:ec:18:45:8e:6a:e3:7e:c9:
ac:b1:8a:a2:80:71:b0:02:43:d4:85:48:d9:37:93:bd:00:c2:
b5:56:6b:28:c4:20:72:5d:3d:17:10:c4:6e:2d:99:3a:d6:36:
b5:e5:e2:ed:86:2f:57:e8:ef:d1:8c:20:ef:b5:a0:d6:56:f2:
74:54:61:bf:9b:cf:3e:c2:34:c2:2b:3a:bd:49:56:65:70:88:
93:2c:de:37:3a:d5:03:62:f6:62:26:f1:b4:fd:54:bf:b3:ee:
2d:2e:94:57:54:8a:c6:be:98:86:e2:c1:e2:7c:ba:ed:73:0e:
52:eb:7f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org