Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/jX18i7P_ATZiMO9HY4Ndrg8IejY.roa
File: jX18i7P_ATZiMO9HY4Ndrg8IejY.roa (raw, json)
Hash identifier: P0D5s3wbcNkGspG90PhvWSPJyHDWcd2WT5wGaackkDs=
Subject key identifier: 8D:7D:7C:8B:B3:FF:01:36:62:30:EF:47:63:83:5D:AE:0F:08:7A:36
Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Certificate serial: 0185714C35A491B277B907303C0D2A4F04AB
Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/jX18i7P_ATZiMO9HY4Ndrg8IejY.roa
Signing time: Mon 02 Jan 2023 07:04:57 +0000
ROA not before: Mon 02 Jan 2023 07:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13259
IP address blocks: 188.0.40.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:35:a4:91:b2:77:b9:07:30:3c:0d:2a:4f:04:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Validity
Not Before: Jan 2 07:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d7d7c8bb3ff01366230ef4763835dae0f087a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c8:31:2b:22:e2:ee:99:9c:b8:3d:14:06:97:
f7:88:1a:84:dc:d2:c6:db:ac:c5:37:cc:c8:c7:79:
1a:4d:e4:45:60:fa:39:d5:8c:21:be:f2:da:e9:e9:
11:48:5f:99:e7:9f:31:f8:40:b0:f3:88:21:70:97:
f6:9a:a3:e2:f2:a5:ba:ac:da:e1:e9:9a:cb:b4:d8:
53:c0:94:21:3c:02:10:e4:e4:0a:33:38:bb:aa:be:
a2:95:ff:85:a6:96:24:65:aa:00:67:de:e6:4b:eb:
4e:01:e5:b2:33:6d:71:a2:6b:9e:33:ae:a3:97:b9:
26:fa:13:36:c8:4c:e1:e7:a5:4f:44:aa:45:bb:e7:
39:50:9c:7e:05:8c:88:06:a7:eb:c4:8b:e8:89:cd:
0d:f5:da:54:db:0f:fb:32:b7:d5:a9:da:7f:6c:25:
cc:41:b1:81:7a:47:ee:0d:f3:59:91:08:40:cd:62:
b4:6f:e1:a8:1c:9a:3e:2f:85:15:e3:ec:a4:62:33:
c4:54:85:2c:23:f8:49:ca:bd:63:b4:e9:9b:7a:ba:
8a:c1:53:21:97:e8:6f:ae:17:95:e3:5f:35:77:cb:
d2:a4:a1:f4:f7:55:9e:e6:86:3b:bb:b1:d9:55:c2:
bf:8e:8d:49:bb:ec:29:5c:d8:b3:94:67:57:a0:de:
80:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7D:7C:8B:B3:FF:01:36:62:30:EF:47:63:83:5D:AE:0F:08:7A:36
X509v3 Authority Key Identifier:
keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/jX18i7P_ATZiMO9HY4Ndrg8IejY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.0.40.0/21
Signature Algorithm: sha256WithRSAEncryption
10:f7:f5:1b:85:d8:31:89:b8:44:63:95:3d:a7:65:18:90:66:
64:f5:4c:b1:0d:8f:1d:01:08:64:60:56:dd:89:8d:85:10:e6:
85:32:65:df:92:be:52:0f:35:d6:f0:63:04:21:66:af:05:1a:
62:67:a4:84:67:e6:da:dd:49:d0:9a:cb:7c:d8:8c:37:c0:33:
84:7d:b7:01:4b:d0:f7:db:52:3c:8d:52:83:b0:2b:6a:dc:fe:
2e:ff:fd:7e:98:aa:5f:f7:8c:c3:88:54:be:ef:3f:8d:d5:06:
7a:0b:b0:66:ef:df:8a:3a:3a:a4:86:c2:0b:85:6f:6d:6e:f9:
bc:c9:a0:6a:3e:11:55:8f:16:97:cc:60:75:6d:0f:0b:92:1e:
78:c7:5e:6b:e0:23:fa:e7:60:c1:1a:48:fa:44:8c:19:f5:fe:
cd:ce:1e:f5:5f:d1:4d:75:91:0b:b4:61:4f:6e:0d:4b:81:29:
95:60:55:d4:f4:b6:a9:05:1e:49:71:84:4b:52:d5:91:be:20:
0d:6b:d2:cf:58:4b:ca:8f:ab:49:0a:3a:9a:00:7d:6e:af:31:
98:9b:cd:81:5d:b7:59:2e:15:43:2e:26:5f:35:bb:e6:11:43:
42:45:d2:66:e5:1f:7d:52:5d:f4:ad:25:07:0c:da:f4:2c:cd:
7d:d7:87:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:40 2024 by rpki-client on console-ams.rpki-client.org