Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/JaVF4ETOXRikbpdBCHqTzGBFEoY.roa
File: JaVF4ETOXRikbpdBCHqTzGBFEoY.roa (raw, json)
Hash identifier: YTgdHbKoj/V1callinNKhXZ5bdHot0jAiS/9VTiB5Hg=
Subject key identifier: 25:A5:45:E0:44:CE:5D:18:A4:6E:97:41:08:7A:93:CC:60:45:12:86
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01867E7897B9D5E92397044AC3B181F35481
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/JaVF4ETOXRikbpdBCHqTzGBFEoY.roa
Signing time: Thu 23 Feb 2023 13:31:17 +0000
ROA not before: Thu 23 Feb 2023 13:31:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 188.253.8.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 24 Feb 2023 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7e:78:97:b9:d5:e9:23:97:04:4a:c3:b1:81:f3:54:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 23 13:31:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25a545e044ce5d18a46e9741087a93cc60451286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ef:e3:75:c8:5f:ec:82:84:e9:67:4d:ec:9e:
01:66:9f:66:d6:b3:ca:61:af:ae:92:c4:b1:8c:a7:
1b:d7:4a:78:30:93:19:a0:1c:1b:ca:b8:24:20:5a:
aa:58:e0:13:d6:69:66:2d:61:c8:6f:43:de:e1:a5:
98:4d:17:1b:63:86:4d:66:4f:fb:cd:2b:ac:be:3c:
bc:fe:9c:68:ce:6b:6a:3a:7f:10:93:d9:f5:9e:3b:
57:91:a2:43:d0:07:78:9d:18:65:dd:74:91:9f:f4:
72:b6:55:8f:25:9e:a5:30:3b:53:9b:11:a6:2b:69:
fb:08:45:27:87:c2:13:eb:dc:fe:2e:d2:08:30:c5:
36:08:63:6b:3a:d3:19:e7:9b:20:6f:f5:e9:d4:7f:
b8:ef:8a:b6:1c:ec:97:50:a9:8e:f9:d3:30:dd:d2:
5f:ef:d6:ed:d8:8c:3a:53:19:7b:42:93:69:02:1a:
a3:fd:1a:22:33:35:db:af:0f:6b:36:8c:7f:ea:f8:
86:07:d2:9e:0b:19:05:2f:67:4d:94:9b:4c:79:2d:
e4:2b:02:ae:8d:26:5e:c2:b5:8a:37:07:a8:73:12:
4d:72:bd:13:e4:bd:d3:54:1d:cc:e8:dc:4d:fb:fb:
e9:ba:a0:02:9c:bc:31:05:86:73:81:f0:5a:c4:69:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A5:45:E0:44:CE:5D:18:A4:6E:97:41:08:7A:93:CC:60:45:12:86
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/JaVF4ETOXRikbpdBCHqTzGBFEoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.253.8.0/21
Signature Algorithm: sha256WithRSAEncryption
12:e3:03:59:fb:c7:ce:1a:0f:d8:11:34:86:b8:49:d7:e4:2d:
55:c8:27:c9:31:a9:69:26:61:6c:05:02:8c:9b:fd:a0:81:1f:
45:b9:b5:e4:08:66:1c:13:f0:3d:fc:50:d5:45:f2:40:aa:f9:
e8:98:c0:fc:18:8e:f0:70:be:ab:f4:f3:7a:a2:94:47:6d:cd:
91:0f:1c:53:38:65:3c:c1:65:c0:5f:1a:df:8c:be:02:c8:f8:
a6:e3:82:d8:e2:ed:36:8a:01:8e:be:c2:50:0f:fb:33:a9:24:
dc:c1:25:5b:d7:4a:4d:4d:50:40:79:5a:77:e3:65:ce:d3:6a:
b2:88:54:e1:39:59:52:d5:21:9d:57:5d:b6:d9:ee:0d:3e:06:
0b:f3:aa:20:54:e7:3e:77:ef:e7:a1:3c:45:cb:99:5d:76:4e:
17:0b:4c:30:87:73:44:1e:d0:b8:2f:7d:46:8f:12:4b:52:6b:
c2:c2:5c:e7:12:2d:e2:f3:39:93:97:72:27:25:10:9c:3e:75:
0a:6a:75:e6:09:26:6b:f2:db:85:6e:37:5e:9b:02:74:88:bb:
c1:8a:1d:11:3e:3f:2d:20:4c:2e:90:91:1e:2a:63:90:9e:70:
80:51:85:72:18:1e:2b:c4:51:f6:34:56:4e:57:01:79:2c:c9:
17:3a:b6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:34 2024 by rpki-client on console-fra.rpki-client.org