Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/a3_9JuktANWnr-JkqeRODEPbVoE.roa
File: a3_9JuktANWnr-JkqeRODEPbVoE.roa (raw, json)
Hash identifier: RXq3FN6jtfvbkYIGI5qn+ETzVksQpuJ7RWY+B+YEAZw=
Subject key identifier: 6B:7F:FD:26:E9:2D:00:D5:A7:AF:E2:64:A9:E4:4E:0C:43:DB:56:81
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018898600F736EEFDE52FDFBD085771B53B4
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/a3_9JuktANWnr-JkqeRODEPbVoE.roa
Signing time: Thu 08 Jun 2023 00:20:12 +0000
ROA not before: Thu 08 Jun 2023 00:20:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 188.240.83.0/24 maxlen: 24
89.37.128.0/24 maxlen: 24
89.40.43.0/24 maxlen: 24
94.177.113.0/24 maxlen: 24
94.177.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:98:60:0f:73:6e:ef:de:52:fd:fb:d0:85:77:1b:53:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jun 8 00:20:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b7ffd26e92d00d5a7afe264a9e44e0c43db5681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:50:b8:11:c3:5d:da:41:f8:53:3e:54:3e:
d8:8d:fc:83:ce:94:7b:f9:e8:53:a8:1b:9b:02:e5:
a7:25:a6:ea:d8:8f:03:e4:c0:90:56:f1:14:48:a1:
22:a4:ce:dd:d6:0e:0f:34:45:39:0d:3a:e7:98:0b:
96:9a:dc:27:a9:12:a0:06:62:17:ee:70:32:1c:fe:
91:fa:32:83:73:fe:9f:6c:b1:c0:bd:2f:15:88:26:
9c:5a:12:2e:d4:b4:64:b1:4b:8e:9f:fb:5f:8c:b9:
63:41:45:ca:fb:16:6a:20:45:74:76:5f:6a:75:c4:
9d:f6:a3:9d:ae:b3:c4:69:7c:45:29:d5:3b:e9:16:
32:9c:79:59:51:1c:04:7e:4b:a0:10:f5:ab:fb:c9:
ea:38:69:b7:33:9c:26:0d:29:16:ab:1e:21:16:ea:
94:6c:d6:2b:8f:9d:84:8d:97:d0:8c:58:bb:ce:fe:
21:dd:95:d8:88:e5:3e:b0:82:4a:51:23:e6:52:29:
73:1f:73:3c:64:3d:9f:d9:7e:72:b3:b2:90:ed:1b:
02:79:c3:b1:bf:ab:dc:c3:f9:2c:fb:71:b7:43:1f:
97:71:b4:8f:2c:d2:e3:81:ec:67:16:5f:7a:7b:2a:
fb:12:d2:4b:c8:bd:20:bc:e6:86:ad:5f:ce:68:bf:
03:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7F:FD:26:E9:2D:00:D5:A7:AF:E2:64:A9:E4:4E:0C:43:DB:56:81
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/a3_9JuktANWnr-JkqeRODEPbVoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.128.0/24
89.40.43.0/24
94.177.113.0/24
94.177.118.0/24
188.240.83.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:fb:05:20:89:95:02:9d:d4:45:f6:66:53:29:23:79:33:04:
c7:5f:0a:51:d4:9e:df:00:59:80:f7:50:d7:e6:38:ca:7c:ea:
00:51:c6:c9:b6:e4:5e:7a:c5:cf:80:bd:03:71:0f:92:0a:78:
99:2d:d5:06:87:85:2a:40:99:03:73:5c:f1:06:a8:53:e6:08:
71:a2:85:81:fd:0d:1c:a3:e4:80:f8:b5:eb:81:05:63:62:8d:
9d:84:86:66:97:08:c7:93:1d:84:ea:03:78:12:4b:b9:ba:24:
4d:b4:cd:d4:f5:81:3a:6d:e4:3b:d9:a1:b5:62:66:1b:82:f8:
9b:80:cf:7f:bc:60:fe:05:39:78:d2:97:0c:de:bf:72:8a:72:
ef:44:ad:fa:56:47:e0:3f:d2:52:df:31:ca:66:10:a5:e8:7a:
77:2d:3d:a7:65:a2:39:84:ff:8d:47:15:54:5e:ad:d5:d7:33:
ec:2f:61:f9:b5:d2:d3:4b:c0:8d:08:c1:cd:d2:84:90:ac:dd:
3f:f9:2f:f1:3c:d0:bf:6a:36:af:cc:51:45:11:68:04:88:1c:
21:fd:f4:21:40:5a:78:79:21:7d:70:1d:5f:22:b0:3f:3e:7f:
ad:84:a4:2d:6c:09:46:79:ba:c6:19:81:3f:d9:be:ce:47:3b:
ce:dd:9b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org