Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/jp658-b9Dils-iTiDiP8IjUEUks.roa
File: jp658-b9Dils-iTiDiP8IjUEUks.roa (raw, json)
Hash identifier: iatl9OdiqtT/EsOpaZH4azakWjyH+Gaej9DrB0LSZnU=
Subject key identifier: 8E:9E:B9:F3:E6:FD:0E:29:6C:FA:24:E2:0E:23:FC:22:35:04:52:4B
Certificate issuer: /CN=1795ac843cd8ba90188f7313652bb561299b296f
Certificate serial: 0185715568EFD4277AB65296B008B98021B8
Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/jp658-b9Dils-iTiDiP8IjUEUks.roa
Signing time: Mon 02 Jan 2023 07:15:00 +0000
ROA not before: Mon 02 Jan 2023 07:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62101
IP address blocks: 176.126.221.0/24 maxlen: 32
176.126.220.0/23 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:68:ef:d4:27:7a:b6:52:96:b0:08:b9:80:21:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f
Validity
Not Before: Jan 2 07:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e9eb9f3e6fd0e296cfa24e20e23fc223504524b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f0:04:e6:7b:f4:c8:7c:40:13:9b:97:b0:bf:
39:27:c2:52:25:fc:24:72:d2:11:51:f7:a9:55:51:
78:2a:02:5a:3f:80:ea:06:0c:0c:36:84:20:3a:f7:
59:7b:bc:9c:c9:b1:ba:d9:8d:d3:e9:93:5b:ba:f9:
27:ec:4b:b1:f2:79:af:59:f2:0c:19:5f:5f:af:1c:
fe:57:da:de:ad:60:01:4a:f6:d5:5b:8b:a8:3c:23:
1a:c5:b3:12:45:7e:00:4a:18:55:3c:c5:91:6d:fd:
97:3c:ef:91:77:d9:16:fd:26:f3:42:b8:37:2e:e8:
09:5b:15:a1:04:9e:b7:7e:dd:de:d1:f8:79:46:ef:
3f:a4:93:7f:73:78:90:3d:b5:7e:12:05:7b:50:06:
ea:46:3c:72:56:5e:7b:d6:06:37:8d:60:65:da:75:
82:9b:a1:7f:99:0b:15:a0:de:7d:c0:86:82:7e:43:
57:7f:57:da:a4:f9:27:5e:61:fc:c6:74:8c:23:90:
45:9b:47:0e:2c:9c:12:1c:3f:77:1a:77:2b:2e:a9:
9c:a6:de:fa:49:d7:68:77:a5:dc:e3:84:33:5e:3e:
36:04:99:e0:44:5c:dc:14:d0:36:04:55:6e:f3:a4:
f0:74:f1:7e:e8:aa:64:bb:09:d8:70:86:f4:e0:3d:
de:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9E:B9:F3:E6:FD:0E:29:6C:FA:24:E2:0E:23:FC:22:35:04:52:4B
X509v3 Authority Key Identifier:
keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/jp658-b9Dils-iTiDiP8IjUEUks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.220.0/23
Signature Algorithm: sha256WithRSAEncryption
70:a6:91:d2:43:ca:81:f5:d5:30:3e:57:bf:8e:16:bc:cf:ec:
1e:5f:1a:b7:1e:70:a7:93:a8:46:49:04:3f:46:60:14:00:6c:
e7:1b:f8:9b:4d:da:d4:4b:da:72:28:4a:59:94:09:98:3e:ea:
fb:f4:64:e7:ba:1e:45:b7:83:ed:d5:13:6f:87:1d:d3:4f:9c:
2c:d0:91:6d:97:4d:68:71:aa:85:b6:e6:34:44:7a:48:b2:63:
ff:5b:51:ce:d7:36:ff:af:bd:6c:98:43:f9:a5:6c:25:b3:79:
4d:a7:de:0a:33:aa:de:92:3e:f7:e1:4c:9b:3d:cd:07:a3:3c:
59:67:b2:f1:58:2c:24:b3:8a:0f:c5:84:a9:c4:da:95:6e:94:
e9:8b:aa:8b:e4:f5:56:59:78:97:b7:86:48:7f:37:a4:e8:e7:
d6:bb:c4:7d:8b:d9:9e:5a:73:3e:27:57:67:cd:8b:d5:f4:c7:
d3:eb:14:51:20:75:16:ef:74:9b:4b:2b:70:b1:31:65:a2:d0:
15:a6:02:cd:6d:3b:3c:5c:2b:52:e1:30:c7:80:dc:b2:96:41:
ea:8e:b1:31:45:ad:cd:65:08:d0:4d:e2:78:70:00:c1:ad:5c:
7e:77:50:c6:4a:7c:c9:69:33:df:ca:d6:17:fd:01:85:f8:fd:
8e:c0:b3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:19 2024 by rpki-client on console-fra.rpki-client.org