Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Jv1-8SmFUAb9DCm2IugrminnCsU.roa
File: Jv1-8SmFUAb9DCm2IugrminnCsU.roa (raw, json)
Hash identifier: qAmjtnZ2scerfknLsTk2HWkTqBREoJRF2X/AIQcfeBs=
Subject key identifier: 26:FD:7E:F1:29:85:50:06:FD:0C:29:B6:22:E8:2B:9A:29:E7:0A:C5
Certificate issuer: /CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e
Certificate serial: 01856D386962176A8AD5E6432315C496B18D
Authority key identifier: 26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Jv1-8SmFUAb9DCm2IugrminnCsU.roa
Signing time: Sun 01 Jan 2023 12:04:51 +0000
ROA not before: Sun 01 Jan 2023 12:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202173
IP address blocks: 185.79.100.0/22 maxlen: 24
91.220.120.0/24 maxlen: 24
2a05:7280::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:38:69:62:17:6a:8a:d5:e6:43:23:15:c4:96:b1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e
Validity
Not Before: Jan 1 12:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26fd7ef129855006fd0c29b622e82b9a29e70ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0d:3a:59:aa:01:ff:93:d9:23:56:df:b6:9b:
89:23:8a:4f:eb:da:29:a1:11:f9:c2:ad:77:2c:38:
6b:16:73:35:45:ae:1a:93:0e:53:cd:f3:98:9c:91:
48:aa:c2:0f:2c:c6:a1:58:39:75:36:f9:32:e3:e5:
64:0e:1b:ea:13:24:1f:a5:6a:9e:3b:86:94:0b:33:
98:7e:76:87:19:b5:7f:fd:a6:e6:b2:1b:4f:82:6e:
b9:71:07:0d:0d:24:43:bb:d9:c1:3b:8d:a0:cd:54:
c9:cd:a8:d4:66:b2:64:7f:fc:3b:79:fe:99:5d:6d:
e8:e5:5d:e0:6a:d9:ea:37:3c:7f:ac:e7:02:bf:7a:
66:86:91:af:8f:4a:2a:92:93:95:eb:5e:d5:1b:8e:
4b:d9:25:46:55:b6:36:ed:31:eb:97:7e:1c:ff:37:
06:23:5a:a1:7a:41:df:ee:96:6a:25:56:bf:be:02:
c2:12:a6:a2:c0:ea:3c:ed:90:2e:94:fb:44:cc:81:
b4:46:80:28:bb:82:0c:5c:8f:9f:95:21:4a:cb:21:
6d:f8:49:ec:54:c6:84:21:39:95:2c:68:30:2d:12:
df:c3:7c:45:86:50:5e:3a:c3:60:bf:b3:44:5f:04:
0d:e0:31:73:d2:91:fd:30:79:c8:a7:50:1b:cc:2c:
c0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FD:7E:F1:29:85:50:06:FD:0C:29:B6:22:E8:2B:9A:29:E7:0A:C5
X509v3 Authority Key Identifier:
keyid:26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Jv1-8SmFUAb9DCm2IugrminnCsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.120.0/24
185.79.100.0/22
IPv6:
2a05:7280::/32
Signature Algorithm: sha256WithRSAEncryption
ac:df:8c:ff:7c:cc:84:fe:8c:12:b6:db:f3:bd:e1:81:39:e5:
9a:48:99:7a:66:48:29:1f:6c:f6:b6:5a:09:02:56:ad:04:d4:
28:02:46:1c:12:9b:8b:29:96:e0:3f:c6:52:c8:b0:81:a1:ad:
5c:bc:30:a6:f3:a7:45:c9:43:80:eb:4a:da:9d:57:2d:ee:19:
b1:1a:bf:38:c3:72:5e:5b:66:cb:62:15:90:e6:c9:b5:de:c9:
62:5f:e1:02:09:fc:c1:7c:96:e8:68:67:a5:5d:31:58:9f:9b:
57:df:81:0c:00:8d:61:d1:8d:99:0f:8f:09:b7:c0:e9:77:aa:
e7:2b:e6:a0:87:11:1c:3b:5a:f2:7c:93:96:75:88:5b:24:59:
7e:2b:6b:6c:c6:53:28:10:27:d1:0d:39:eb:c8:f0:a2:e7:de:
fc:02:13:7d:eb:26:af:a4:44:2b:52:5c:ec:de:4b:a4:77:0d:
30:2d:47:50:96:8d:0f:c1:91:b0:08:99:be:02:eb:db:cd:9e:
90:fc:1a:29:eb:c7:a3:49:96:e5:96:05:36:98:fd:66:d2:0d:
8b:6e:81:3c:c8:90:6a:56:b7:c4:3b:0b:a1:d5:5f:d5:4b:f3:
62:57:db:bf:e7:12:b4:9d:df:2f:51:ab:43:c7:08:14:2d:37:
7d:ed:0a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:48 2024 by rpki-client on console-ams.rpki-client.org