Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/jaP_t7t8HUJIKeSGyCsLvGuMg3I.roa
File: jaP_t7t8HUJIKeSGyCsLvGuMg3I.roa (raw, json)
Hash identifier: c0G70I7pVbtnf0AlGz1bH3BNdEcfs7olB+HIZnjxnYM=
Subject key identifier: 8D:A3:FF:B7:BB:7C:1D:42:48:29:E4:86:C8:2B:0B:BC:6B:8C:83:72
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01856D0AD66F27EA95EBAA4A25F5D2CB26DE
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/jaP_t7t8HUJIKeSGyCsLvGuMg3I.roa
Signing time: Sun 01 Jan 2023 11:15:04 +0000
ROA not before: Sun 01 Jan 2023 11:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43763
IP address blocks: 213.176.192.0/19 maxlen: 19
79.132.32.0/19 maxlen: 19
95.171.128.0/19 maxlen: 19
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:d6:6f:27:ea:95:eb:aa:4a:25:f5:d2:cb:26:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 1 11:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8da3ffb7bb7c1d424829e486c82b0bbc6b8c8372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:cd:dd:65:26:bb:82:8c:fa:93:c2:01:54:
7b:97:99:af:8e:9d:0c:20:bb:fe:79:2b:7b:d6:7f:
0b:8d:d8:a0:ca:fe:19:80:a9:69:fc:f7:4d:1f:06:
9a:25:e6:e3:36:da:e7:40:22:b1:1a:ee:7e:23:ac:
bd:25:3b:dd:8e:98:93:cc:70:65:21:a5:75:d1:ce:
f3:ba:78:be:93:73:92:42:01:6e:72:6d:05:25:01:
e6:87:8c:d6:eb:ba:f6:8c:2e:22:2e:52:53:58:a7:
eb:25:63:43:49:43:48:58:af:0c:d9:00:c1:f2:b5:
8b:c1:0b:e1:cd:de:56:37:93:d1:16:15:6b:22:8c:
50:14:1f:c1:19:26:9b:2c:72:b9:c2:21:1f:d3:b2:
6c:59:db:e8:ec:dc:e5:b7:2c:b5:83:ca:3e:42:3d:
34:70:9c:4c:01:66:5c:81:ea:b1:a5:a8:1a:89:3d:
e1:66:1b:bc:63:a4:6b:1f:16:fc:03:5a:b7:8e:80:
cc:9e:a4:23:0b:68:ee:de:18:3c:90:b4:92:29:c2:
23:14:8b:11:d3:b6:ac:a5:29:a4:d7:1c:72:56:7b:
49:16:47:53:fd:34:fb:85:18:8d:81:c5:51:6c:17:
f2:c1:69:39:2e:b8:25:72:e9:d9:51:1e:45:c5:8e:
01:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A3:FF:B7:BB:7C:1D:42:48:29:E4:86:C8:2B:0B:BC:6B:8C:83:72
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/jaP_t7t8HUJIKeSGyCsLvGuMg3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.32.0/19
95.171.128.0/19
213.176.192.0/19
Signature Algorithm: sha256WithRSAEncryption
39:b9:72:31:d7:30:ca:fd:28:d0:e3:5d:f6:ef:6a:8a:70:85:
5d:92:27:22:7f:20:6c:3e:18:af:07:5a:ed:bf:7d:1b:28:e6:
64:4e:56:ed:3c:af:06:23:40:bc:82:bc:85:c2:ca:4e:86:e2:
9e:61:05:01:d0:d3:27:95:04:c0:23:b6:7f:7b:1e:75:05:f1:
9b:1b:b2:52:2d:85:05:3b:02:93:1d:a8:58:e4:98:8d:07:fd:
37:63:ad:c5:13:6b:44:6f:32:9d:9e:4e:87:c3:b0:b5:bd:e8:
dc:2a:75:22:97:80:fe:a8:86:bd:fb:62:2e:0e:ad:12:88:1f:
bd:d9:79:4a:85:16:c6:b8:e3:8e:d6:f6:5d:ac:8e:b7:3b:5c:
ea:a8:ed:5d:73:df:5b:96:d4:1c:fd:13:a1:e5:a7:82:14:6f:
54:b0:b8:c3:33:51:6b:d6:96:c2:e4:94:9a:00:1c:5b:03:31:
48:2a:a6:51:f9:51:0e:eb:ff:0a:96:59:11:54:1a:f7:08:4d:
c6:ba:2d:7b:1e:00:75:77:b8:85:9b:be:c3:5e:8e:c8:2b:10:
b4:ff:1c:11:57:a9:a6:86:44:de:11:55:93:15:f3:7c:67:e3:
3e:6f:88:a2:78:12:f8:5f:d3:9f:2f:ea:73:e8:f5:e4:32:13:
01:65:30:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:50 2024 by rpki-client on console-ams.rpki-client.org