Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/JZL_ProjEJc896dnCiFuwoLNnYk.roa
File: JZL_ProjEJc896dnCiFuwoLNnYk.roa (raw, json)
Hash identifier: 9toDYEZX3CVidpYzPnp4RMhBSUkIGHmHx4DEBBOIjsg=
Subject key identifier: 25:92:FF:3E:BA:23:10:97:3C:F7:A7:67:0A:21:6E:C2:82:CD:9D:89
Certificate issuer: /CN=69226ceb40c671f30acf11fa36b8d7d1c6754704
Certificate serial: 018CC5DD22EE1B03061F64C2601835947366
Authority key identifier: 69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/JZL_ProjEJc896dnCiFuwoLNnYk.roa
Signing time: Mon 01 Jan 2024 16:30:53 +0000
ROA not before: Mon 01 Jan 2024 16:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38968
IP address blocks: 89.28.216.0/21 maxlen: 21
89.28.220.0/24 maxlen: 24
89.28.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 11:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:22:ee:1b:03:06:1f:64:c2:60:18:35:94:73:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69226ceb40c671f30acf11fa36b8d7d1c6754704
Validity
Not Before: Jan 1 16:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2592ff3eba2310973cf7a7670a216ec282cd9d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:99:00:2d:69:1c:45:0f:e2:e4:63:4a:8e:
6c:61:9b:83:12:1e:9e:44:c8:f6:12:23:6e:6f:ed:
25:ea:6a:58:db:90:2e:ee:17:03:6d:a4:af:cf:51:
44:c6:61:0b:5a:c3:f0:c2:e1:48:36:d4:00:32:75:
bb:ef:9e:05:b4:3a:06:d9:70:a2:33:57:aa:37:23:
58:02:43:a9:6f:9e:63:e2:ad:a2:c1:e7:15:61:fb:
5e:a8:f7:bf:9e:02:12:0c:71:de:51:0e:01:a8:f5:
e8:93:0c:d7:bf:6b:cb:cd:94:c8:fd:56:4b:60:28:
45:f5:b7:93:6d:0b:ba:32:ce:94:9f:b2:31:96:52:
11:73:57:d1:3a:eb:84:04:41:54:e5:f2:24:64:b5:
ee:45:e4:bc:32:1f:73:68:60:45:4f:d6:a6:23:d0:
b7:81:e5:6b:a1:fb:27:1e:9c:40:c3:0a:83:5f:33:
03:22:55:13:af:15:22:d0:c1:32:ec:b4:86:97:21:
0a:05:03:62:97:cf:f9:c8:f1:b0:d7:80:17:cc:cc:
3c:a0:84:09:9c:0e:86:1e:09:7d:f6:96:e4:5b:be:
d9:25:92:15:b5:fa:49:38:48:79:bf:34:0f:84:0b:
2c:81:da:3c:ae:75:bb:8e:63:3e:59:81:c9:9c:d7:
13:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:92:FF:3E:BA:23:10:97:3C:F7:A7:67:0A:21:6E:C2:82:CD:9D:89
X509v3 Authority Key Identifier:
keyid:69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/JZL_ProjEJc896dnCiFuwoLNnYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.216.0/21
Signature Algorithm: sha256WithRSAEncryption
84:32:69:c1:15:c4:91:af:54:0a:04:54:b8:e5:fa:20:c0:71:
95:3a:df:37:b6:1a:f0:5b:83:ee:45:c3:99:94:d8:30:8e:3e:
93:00:43:90:21:3f:39:bc:52:a0:57:22:59:3c:ee:2c:26:1e:
3e:ea:44:26:53:e2:18:68:dd:24:bd:3e:48:13:7a:df:e5:f7:
81:96:91:d7:18:45:17:cb:12:5a:b5:72:9a:bf:88:e4:89:c2:
e2:c6:f9:55:fd:8a:41:c6:77:52:34:bf:16:cb:e6:29:06:1b:
0e:e0:cc:c9:59:85:71:c7:7f:a2:a8:43:bd:b4:d6:ec:37:a2:
75:ef:2b:9c:75:ed:21:7a:a6:8c:82:65:f1:eb:69:0c:59:1b:
cd:2b:b6:8d:55:fc:4a:e2:bf:88:47:0d:28:f1:df:9e:92:63:
1d:19:25:3d:ff:f9:29:86:12:0c:01:32:9f:2b:6a:4c:c4:8b:
47:8e:f0:ee:8a:87:98:04:50:d9:8c:73:10:47:1f:2a:f8:12:
01:9a:e2:23:d2:f4:1d:57:66:be:36:f4:97:5f:12:fe:4e:40:
8e:7e:40:ea:68:ee:5f:6b:fc:c6:53:1a:24:60:26:b2:3b:63:
58:5c:4e:de:f6:dd:b5:61:e1:02:6f:a9:17:66:fb:2c:70:98:
32:59:8e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:12 2024 by rpki-client on console-ams.rpki-client.org