Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/jzx-hKGq2SiGQCAK9xsjCl0lcTU.roa
File: jzx-hKGq2SiGQCAK9xsjCl0lcTU.roa (raw, json)
Hash identifier: Wj7AeE7ILMCVEw6nF9gl8U3zN9VPygnjGPuP201b5/8=
Subject key identifier: 8F:3C:7E:84:A1:AA:D9:28:86:40:20:0A:F7:1B:23:0A:5D:25:71:35
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 01857139C1458A751244AA8A1B4DCC84AC3E
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/jzx-hKGq2SiGQCAK9xsjCl0lcTU.roa
Signing time: Mon 02 Jan 2023 06:44:48 +0000
ROA not before: Mon 02 Jan 2023 06:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62080
IP address blocks: 194.145.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:c1:45:8a:75:12:44:aa:8a:1b:4d:cc:84:ac:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: Jan 2 06:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f3c7e84a1aad9288640200af71b230a5d257135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:e8:25:13:c3:f7:46:cb:74:41:2d:90:f1:
22:80:01:e7:55:65:83:08:01:9d:56:98:09:ca:7d:
7d:c3:bf:26:e4:bf:43:01:35:b7:4d:12:26:b8:7f:
14:0a:67:d8:92:83:26:87:9a:95:ae:ee:c4:ea:54:
90:f7:f0:1f:ac:a8:0b:df:b5:86:ed:c1:9d:8f:ec:
84:a9:f2:a7:28:5f:69:27:9b:47:c9:31:69:fd:fa:
00:f5:b2:c6:65:3d:d5:15:60:d2:2e:f3:61:bd:57:
b6:7c:b7:7a:b0:7d:a7:52:c2:e6:01:fa:55:72:8c:
1c:0e:6d:56:4b:03:40:e5:df:dd:88:fd:37:39:4a:
45:fa:20:44:41:f9:59:6e:19:d9:0d:6d:29:07:2e:
f1:f1:9b:67:83:11:a3:dd:83:b6:f3:f7:b8:bb:23:
05:ae:b4:e0:51:b2:76:74:0c:8c:96:0d:88:04:6d:
f8:d9:06:56:09:5d:14:6a:5e:25:7e:29:a8:45:68:
1b:c5:af:88:9f:6d:60:dd:bd:7c:b0:66:f5:63:d5:
f2:a2:54:da:3d:c9:34:05:d9:eb:a1:ed:a2:b1:12:
47:80:0f:50:5d:73:d4:a9:51:71:a7:51:ac:55:43:
ea:53:cc:6c:d4:3a:0f:50:a3:13:74:d2:7d:07:71:
79:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3C:7E:84:A1:AA:D9:28:86:40:20:0A:F7:1B:23:0A:5D:25:71:35
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/jzx-hKGq2SiGQCAK9xsjCl0lcTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.141.0/24
Signature Algorithm: sha256WithRSAEncryption
50:76:42:4e:4b:13:f2:fa:32:45:05:a8:47:c3:7c:00:74:29:
dd:35:3e:7c:81:66:16:51:6f:1a:d3:69:51:ea:ae:04:84:04:
c0:d1:32:c5:6a:78:f7:02:2e:d5:2e:c1:f9:39:62:1b:8d:a1:
bd:6b:d3:8d:ed:3d:f7:29:de:9c:8d:91:d4:43:5a:4e:98:b1:
4d:5c:1c:6e:00:ae:b0:2d:47:c3:dc:b5:01:68:61:1a:f6:5b:
15:ee:af:56:b9:76:93:e6:bd:d0:8c:78:ed:ab:8b:df:f1:2a:
b3:f0:33:1c:f2:63:c5:34:b6:8c:63:a9:2c:e5:f3:6b:92:66:
60:90:b1:d9:92:1c:26:3a:43:02:16:2a:11:9a:d4:c6:a3:40:
f1:79:b7:ea:d7:63:77:5c:d9:33:35:22:c4:ac:b1:e5:41:0f:
bb:cd:c1:13:6e:2a:48:35:0e:1d:eb:5c:af:f1:57:b5:34:c8:
88:bf:91:f9:d4:66:08:04:7a:af:21:aa:04:ff:5a:3f:9e:e2:
16:5a:b4:4c:06:be:a8:26:ae:bc:16:2d:36:e5:df:d7:1b:2d:
4b:6a:bf:47:9d:5e:57:fb:33:0f:e5:55:7f:16:ef:08:3a:58:
c0:8f:c5:99:95:37:cc:f2:6f:11:43:5b:73:4d:d2:81:01:9b:
6b:19:0e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:55 2024 by rpki-client on console-ams.rpki-client.org