Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/JRj739-m9bD9MRtNEFxqaohpsBs.roa
File: JRj739-m9bD9MRtNEFxqaohpsBs.roa (raw, json)
Hash identifier: JnjjJWAssUt/1GptHYR2msHXg5uI4ftiYKG3Z20U8SM=
Subject key identifier: 25:18:FB:DF:DF:A6:F5:B0:FD:31:1B:4D:10:5C:6A:6A:88:69:B0:1B
Certificate issuer: /CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Certificate serial: 0187A3A837A38CB4431D3F1B1CCDC39CF82B
Authority key identifier: 9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/JRj739-m9bD9MRtNEFxqaohpsBs.roa
Signing time: Fri 21 Apr 2023 11:52:03 +0000
ROA not before: Fri 21 Apr 2023 11:52:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57850
IP address blocks: 91.209.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a3:a8:37:a3:8c:b4:43:1d:3f:1b:1c:cd:c3:9c:f8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Validity
Not Before: Apr 21 11:52:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2518fbdfdfa6f5b0fd311b4d105c6a6a8869b01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f8:70:4e:7a:6c:59:80:b8:5e:ac:2f:18:c6:
b4:83:67:9b:ab:fa:47:fd:77:e0:79:c1:c1:bf:d5:
8e:17:c4:af:45:0a:99:e4:07:30:32:57:3b:05:c1:
bc:cc:9e:e1:a0:b0:1e:db:1f:1d:cc:76:3a:fe:b9:
53:a2:dd:c1:be:cc:c8:32:69:88:a9:ab:3f:7f:ef:
71:fa:80:08:5f:c5:b6:05:cf:fb:7f:dd:fb:be:68:
f9:bf:b8:53:29:9e:0a:43:c1:dc:40:09:d1:c5:ad:
6b:71:e1:e7:d2:a8:ac:8d:56:66:f4:7a:a4:d2:c7:
d3:d8:ec:30:c2:f1:8e:f9:55:8c:5f:3d:2d:c2:dc:
04:bd:00:71:04:af:79:81:cf:a8:21:24:ef:e7:fb:
22:e6:6d:4b:be:4d:48:46:89:43:27:76:73:9d:fd:
5a:93:06:3d:ef:00:59:e5:17:cb:0f:07:a2:57:06:
14:65:41:9c:f9:17:6d:1f:e8:21:2e:ed:3b:bd:00:
8a:1a:94:df:81:66:8b:d8:62:dc:1c:a7:10:d5:0e:
9f:b9:43:9a:8a:43:47:f7:d2:fe:8a:f5:4e:40:3e:
68:29:d1:93:12:84:e5:e7:83:08:01:82:74:6b:14:
c7:28:98:b9:a0:29:b5:fc:63:7a:95:d0:a4:0c:95:
86:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:18:FB:DF:DF:A6:F5:B0:FD:31:1B:4D:10:5C:6A:6A:88:69:B0:1B
X509v3 Authority Key Identifier:
keyid:9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/JRj739-m9bD9MRtNEFxqaohpsBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.60.0/24
Signature Algorithm: sha256WithRSAEncryption
95:e9:a8:c5:5c:83:3f:37:80:d1:3d:0b:d9:44:e6:c6:82:cb:
2f:b5:d0:73:a0:74:24:e6:a8:6d:f3:59:90:7c:6d:1d:50:23:
c9:eb:ac:8c:ea:4c:7b:b7:36:35:4c:2d:54:2e:f5:99:97:f0:
fc:28:19:3e:86:8f:e1:b9:ac:fb:42:f2:cd:7e:d7:a9:b2:59:
95:78:c8:7f:b1:2c:87:43:5c:a4:2d:8e:34:c6:7a:1e:d3:69:
df:08:1b:6f:0f:4e:fa:85:8e:af:39:3b:ab:87:83:d1:b0:c4:
5c:dc:78:7a:46:f9:21:90:f2:48:96:cf:5c:44:87:0b:1f:7f:
d0:33:1f:aa:d5:05:4c:76:34:28:55:52:66:ed:7d:f0:45:33:
aa:9c:68:62:c5:a2:13:b2:e1:e2:5b:9c:7c:40:a9:bb:a3:48:
df:ae:29:dc:c0:85:03:34:42:2a:c7:97:86:3c:00:6b:3b:97:
ee:51:8d:18:26:32:7b:d1:57:cb:d7:01:b8:6f:d5:a9:02:5d:
7d:8d:b7:1c:a1:db:16:7c:cc:18:21:9f:bc:a2:02:84:cc:51:
c7:14:54:82:0e:c7:67:96:45:9e:dc:14:3c:b4:ec:c2:21:a4:
1c:cd:2b:2f:c9:07:84:12:81:ea:8a:f4:3d:97:b8:c8:1c:be:
40:fe:7c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:52 2024 by rpki-client on console-ams.rpki-client.org