Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JInxY4-ZF04GV8oFvWb79cRfqc8.roa
File: JInxY4-ZF04GV8oFvWb79cRfqc8.roa (raw, json)
Hash identifier: QRbDynr5Yb/VIhXLjF9UQC9qp97l/yCGfiUdD7Ih/fM=
Subject key identifier: 24:89:F1:63:8F:99:17:4E:06:57:CA:05:BD:66:FB:F5:C4:5F:A9:CF
Certificate issuer: /CN=24954f608ac12b684ef865f39af0e94e250b9454
Certificate serial: 01887399B05C1D0EDB941D3F142BC54EC067
Authority key identifier: 24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JInxY4-ZF04GV8oFvWb79cRfqc8.roa
Signing time: Wed 31 May 2023 20:57:11 +0000
ROA not before: Wed 31 May 2023 20:57:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207108
IP address blocks: 185.139.7.0/24 maxlen: 24
2a12:ab46:5341::/48 maxlen: 48
2a12:ab46::/32 maxlen: 32
2a12:ab46:5343::/48 maxlen: 48
2a12:ab46:5342::/48 maxlen: 48
2a12:ab46:5345::/48 maxlen: 48
2a12:ab47::/32 maxlen: 32
2a12:ab46:5344::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:73:99:b0:5c:1d:0e:db:94:1d:3f:14:2b:c5:4e:c0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24954f608ac12b684ef865f39af0e94e250b9454
Validity
Not Before: May 31 20:57:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2489f1638f99174e0657ca05bd66fbf5c45fa9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:62:43:5f:0c:06:e8:97:b2:6b:ff:b2:1a:ba:
88:2c:09:28:99:4d:80:0a:c0:9d:3b:0d:c7:73:5c:
cb:00:84:20:45:3a:bf:70:b2:d3:b6:ad:89:51:7f:
22:85:a6:a6:12:1a:cf:04:3a:cf:d6:6c:bf:d0:9e:
e0:df:70:5e:6e:fc:b9:fe:64:60:4d:32:66:de:18:
78:e3:bf:62:c7:30:6c:51:91:d8:af:45:ae:74:62:
1e:ae:21:6d:48:a8:9e:1c:75:09:e8:d8:23:d9:fe:
d8:d7:69:5e:b1:34:56:09:cb:4a:60:da:79:14:ec:
8e:13:10:76:1e:4b:e3:92:ac:4b:16:81:e8:6a:4c:
9d:8c:4a:dc:f0:6c:7b:e8:b3:57:94:2f:60:0b:13:
90:a8:e2:26:5a:65:b1:e7:49:5f:59:57:f6:67:e5:
ce:07:52:51:cc:ac:fe:de:56:f7:73:6f:d1:39:51:
35:b7:f9:82:45:d3:25:db:9c:d3:b2:9f:fc:60:a9:
9e:eb:af:1c:39:dc:76:0c:63:5a:81:72:c0:41:6d:
aa:dd:97:ef:7b:c4:16:95:8b:8c:52:51:ea:de:d0:
2b:88:09:9e:dd:16:26:fb:ad:a5:33:d3:6b:4e:5c:
34:22:3d:00:00:f1:0c:5d:13:ce:a6:8b:5a:16:55:
06:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:89:F1:63:8F:99:17:4E:06:57:CA:05:BD:66:FB:F5:C4:5F:A9:CF
X509v3 Authority Key Identifier:
keyid:24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JInxY4-ZF04GV8oFvWb79cRfqc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.7.0/24
IPv6:
2a12:ab46::/31
Signature Algorithm: sha256WithRSAEncryption
84:c4:41:07:81:52:b4:72:b3:1b:19:b2:d5:2f:59:ce:94:ba:
ea:fb:10:d3:ae:ea:a4:35:df:e0:cf:5a:e4:e7:a5:60:fd:45:
1a:65:db:2f:15:a1:15:cb:4b:d3:4f:5d:39:77:8b:02:d1:08:
23:2f:7b:66:71:e7:db:8e:cb:d9:6e:47:45:e7:6b:5f:d0:c2:
1b:40:17:f0:de:5d:fe:3f:a7:a4:c4:6b:a8:f3:73:2a:c2:cb:
84:73:bd:d8:01:b3:d7:78:b7:c7:d4:b6:02:59:7e:c8:1f:03:
01:b9:c0:34:58:1c:f8:b0:2d:65:76:ec:c4:66:77:9f:d1:30:
6f:2f:0b:a6:8c:5e:04:b9:b9:ae:ad:5d:fd:41:53:5a:a6:cf:
90:6e:ee:db:b4:6d:b0:1d:b7:42:a1:2f:5c:f5:9a:a7:cd:a7:
4c:ea:82:2e:b5:07:0f:7e:67:34:89:53:dc:42:13:e6:51:10:
5a:df:08:39:76:2d:c5:cd:13:bc:32:f2:3b:a9:cd:a0:f4:38:
18:76:88:ab:0d:ff:0d:0f:8a:12:d8:b0:f2:1a:57:b3:6e:09:
81:31:f1:c1:f6:ee:eb:f4:06:6b:18:28:fb:d4:5b:59:7b:10:
68:57:33:51:e3:b6:b1:4e:1e:6f:79:30:47:a1:12:c2:95:3f:
b5:5a:c2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:41 2024 by rpki-client on console-ams.rpki-client.org