Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/CJBH-Re7c8Gh7ebULAjK9OggKBo.roa
File: CJBH-Re7c8Gh7ebULAjK9OggKBo.roa (raw, json)
Hash identifier: cR3wFKXQWYnMhYa4CpSK8opLwnTHBPtEyQNnK9suigs=
Subject key identifier: 08:90:47:F9:17:BB:73:C1:A1:ED:E6:D4:2C:08:CA:F4:E8:20:28:1A
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 018ACDC69127D698FB3ECBBA0C84B68EAA56
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/CJBH-Re7c8Gh7ebULAjK9OggKBo.roa
Signing time: Mon 25 Sep 2023 19:17:37 +0000
ROA not before: Mon 25 Sep 2023 19:17:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49022
IP address blocks: 185.105.238.0/24 maxlen: 24
45.139.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cd:c6:91:27:d6:98:fb:3e:cb:ba:0c:84:b6:8e:aa:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Sep 25 19:17:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=089047f917bb73c1a1ede6d42c08caf4e820281a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8b:2d:0f:3a:cc:a4:31:17:cc:cb:0a:e8:6a:
13:f3:be:49:ef:63:ec:ad:a2:e0:41:14:93:27:2f:
8d:00:6e:37:87:c3:5c:59:f5:7e:6b:7b:d5:0d:6f:
97:c4:1d:26:71:20:0d:1f:b6:8f:1f:80:02:fc:d6:
dc:28:dd:d0:59:df:31:e4:3b:03:5c:61:70:22:5c:
25:8c:50:90:a7:dd:dd:1f:f0:e7:90:e6:c6:34:1f:
d1:17:9b:fc:03:3b:a5:7d:0d:95:58:ca:9d:60:d0:
fe:03:df:00:6e:45:0b:b7:28:8b:4b:78:a9:6f:1e:
4c:68:dd:df:8f:87:ea:70:7b:68:d8:70:b6:eb:89:
16:ca:1e:a3:d5:bd:23:27:c9:6b:40:1c:b3:84:a8:
82:e3:45:48:21:8b:54:62:01:9b:65:84:8f:0b:40:
a2:24:b6:18:aa:1e:6a:7a:3d:a5:78:08:1c:fd:24:
04:ad:4c:95:3b:87:6a:d7:9e:ec:53:0d:07:6f:41:
35:1d:33:9c:e6:fb:6f:f8:bc:70:33:7b:de:f5:41:
a0:a1:38:9f:97:99:4c:84:cb:48:63:c2:7e:34:a9:
24:16:8c:b9:97:22:a6:e7:90:e4:35:f4:83:8c:fc:
bf:54:69:7e:9e:aa:d5:41:93:29:74:f0:61:dc:72:
bb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:90:47:F9:17:BB:73:C1:A1:ED:E6:D4:2C:08:CA:F4:E8:20:28:1A
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/CJBH-Re7c8Gh7ebULAjK9OggKBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.8.0/24
185.105.238.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:29:c2:2c:3f:bf:1b:26:a8:f0:7f:66:0d:85:67:99:a2:7b:
d4:b4:e8:6d:5d:36:ba:c6:62:0b:30:eb:15:1c:92:2d:6b:19:
af:a4:d4:7e:e6:74:c0:b6:55:f0:f1:1f:7b:90:78:41:36:df:
c1:0b:3d:2f:b4:6c:24:a4:b7:fd:3d:bc:bb:f8:cc:4b:dc:7f:
44:e8:b0:54:21:30:9c:1f:04:2f:3a:39:42:f0:8a:40:45:0d:
f9:c0:e4:69:c5:dd:b4:d8:7e:a1:25:8d:50:2b:27:44:33:5a:
87:fe:be:95:b1:b1:db:06:7f:53:67:03:de:b5:f9:f1:2f:5b:
19:db:8a:3f:dd:42:be:69:1b:11:e0:f0:6b:49:a1:ed:d4:23:
75:0a:75:0c:aa:20:ae:59:b0:91:49:59:06:24:63:d8:03:8d:
c6:a6:43:b4:cb:54:72:96:3f:a3:15:2c:44:0a:91:1a:49:86:
17:81:f4:bc:b4:2e:97:1f:51:04:58:13:cf:02:18:fe:6e:f2:
5b:06:aa:df:93:e5:85:b2:6a:3c:83:96:f9:09:76:a1:94:0d:
cf:79:ab:37:98:d4:5f:d8:1c:28:63:38:ea:c0:fe:11:b4:51:
61:4d:2a:fa:cf:33:e3:cf:5a:ff:5a:52:6b:28:93:6f:e4:95:
55:04:b9:07
-----BEGIN CERTIFICATE-----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Generated at Sun Nov 19 16:24:07 2023 by rpki-client on console-ams.rpki-client.org