Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/jyBcnFX_9QZjEWqdmLA5W0zlmSw.roa
File: jyBcnFX_9QZjEWqdmLA5W0zlmSw.roa (raw, json)
Hash identifier: sdfLALvPOFe//tmgkh70N47VxK66ok37PItt6ye23k0=
Subject key identifier: 8F:20:5C:9C:55:FF:F5:06:63:11:6A:9D:98:B0:39:5B:4C:E5:99:2C
Certificate issuer: /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial: 018CC424E4F09D71361E800F9C4AEA55299D
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/jyBcnFX_9QZjEWqdmLA5W0zlmSw.roa
Signing time: Mon 01 Jan 2024 08:30:01 +0000
ROA not before: Mon 01 Jan 2024 08:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19994
IP address blocks: 185.194.86.0/24 maxlen: 24
185.194.87.0/24 maxlen: 24
91.230.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 13:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:e4:f0:9d:71:36:1e:80:0f:9c:4a:ea:55:29:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Validity
Not Before: Jan 1 08:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f205c9c55fff50663116a9d98b0395b4ce5992c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:11:4e:24:74:b8:17:83:69:41:b5:a9:f9:05:
12:64:b2:f9:cc:1b:ac:2b:f1:8e:6e:b1:85:06:e0:
3d:42:55:fb:66:25:3f:b6:39:fc:85:02:ac:38:f8:
d9:84:54:cc:f3:1e:f5:36:7a:11:a6:4a:d4:89:74:
3b:56:2c:3a:03:3b:2a:17:7a:f6:e7:c6:ef:ce:a9:
7d:c0:0b:43:37:cb:a8:51:3c:3a:18:57:4f:45:30:
14:69:d5:1a:cf:c3:71:b1:db:7c:a4:fd:23:b0:4e:
8d:a0:2f:75:5b:7e:b3:76:00:00:7c:61:92:0d:4b:
33:5b:02:17:3a:b7:36:0a:4d:79:51:90:83:6c:c4:
6d:87:4f:7e:af:ff:ef:e4:21:80:a5:8f:40:1e:aa:
11:87:bc:84:14:f5:b4:1e:97:b2:06:4c:69:31:09:
02:33:b3:0a:32:c4:9f:9e:40:7a:cc:5f:1a:07:54:
cb:23:53:c5:11:4e:f8:75:9f:7b:7f:91:50:db:b0:
d7:24:b7:4c:a2:02:50:58:a3:60:f0:c8:02:d1:12:
38:07:60:f3:55:30:78:9a:f5:90:2d:8f:c8:91:06:
99:b9:85:42:02:d2:c6:4b:c1:26:b6:ad:c0:3b:e3:
3b:f2:f3:8d:0c:d0:e0:6e:9b:b7:d0:4f:bd:64:fe:
62:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:20:5C:9C:55:FF:F5:06:63:11:6A:9D:98:B0:39:5B:4C:E5:99:2C
X509v3 Authority Key Identifier:
keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/jyBcnFX_9QZjEWqdmLA5W0zlmSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.179.0/24
185.194.86.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:54:81:05:8d:11:56:6a:a3:12:70:b0:54:11:a0:04:0e:46:
0f:ba:45:52:62:fc:62:e4:51:bb:f9:f8:ee:1f:dd:5a:ce:07:
0f:e2:6e:32:23:8e:2f:40:b2:f3:47:39:51:d6:8c:97:76:68:
c3:d0:56:c6:f5:56:46:8c:7f:0e:0a:76:1e:25:ff:c6:bd:d2:
89:2c:62:78:5b:ea:17:8b:52:d8:5e:dc:1a:62:55:e2:45:e5:
21:7a:ea:dc:96:8f:95:a2:12:88:e1:05:f7:30:99:35:bd:f8:
e7:07:7f:9f:bf:70:c5:1a:96:dd:c3:8b:aa:fd:e3:a0:35:16:
77:ae:13:0e:11:ab:d3:98:f7:98:cd:ae:dc:3c:a5:f7:4a:d2:
73:2d:92:96:b1:29:df:ac:21:d6:37:5b:10:e5:ea:07:83:91:
69:ef:80:11:aa:bd:a7:aa:61:60:b9:cf:98:0e:a2:6f:2a:0d:
98:ef:89:b1:45:16:49:35:99:53:a2:1c:14:c7:c4:01:82:41:
c8:5f:bf:96:71:1a:dc:c8:62:a7:09:c6:37:2a:0f:72:f0:90:
72:58:ac:ad:50:20:ae:6a:96:01:29:98:41:82:b6:a4:9b:dc:
cd:d7:78:42:be:2a:83:27:ed:02:de:be:29:ae:51:bb:14:ea:
36:71:25:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:04 2024 by rpki-client on console-ams.rpki-client.org