Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/8jxq-ilk1cFQ88dHrsp8FH_54Q4.roa
File: 8jxq-ilk1cFQ88dHrsp8FH_54Q4.roa (raw, json)
Hash identifier: ThuUzbGeIpXrDLWtlzSBmVCrsrWWFG2R4oo0PKaTyzk=
Subject key identifier: F2:3C:6A:FA:29:64:D5:C1:50:F3:C7:47:AE:CA:7C:14:7F:F9:E1:0E
Certificate issuer: /CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Certificate serial: 018570B09E8F2317B6DE3CE8B9D755B0E18E
Authority key identifier: 9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/8jxq-ilk1cFQ88dHrsp8FH_54Q4.roa
Signing time: Mon 02 Jan 2023 04:15:01 +0000
ROA not before: Mon 02 Jan 2023 04:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42689
IP address blocks: 195.96.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:9e:8f:23:17:b6:de:3c:e8:b9:d7:55:b0:e1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Validity
Not Before: Jan 2 04:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f23c6afa2964d5c150f3c747aeca7c147ff9e10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:bb:15:10:38:66:9b:7f:c3:9c:6b:c2:c9:
d5:91:8d:56:20:33:a7:f7:4f:3b:e1:d5:b5:29:e4:
62:1a:bd:13:e9:e3:e6:7a:04:99:93:94:a5:73:f4:
dd:5b:11:d3:21:8b:5f:e8:d0:ff:e2:95:f7:39:17:
5b:27:5e:ce:0a:6f:2f:d1:11:9e:4c:a5:8c:a1:58:
5b:d4:93:13:97:8e:ed:fb:09:d4:80:fe:39:d6:a6:
99:5e:4c:64:d8:3b:ac:4e:ed:34:7a:3e:54:09:1c:
c2:03:2b:f3:6b:a1:6c:af:68:db:ad:18:17:f0:30:
a3:79:e9:44:e6:fc:0f:58:5d:9d:d5:37:7f:e1:d0:
47:f4:06:e1:43:11:b8:6a:3f:dd:1d:20:1d:f4:c4:
9f:e4:c6:81:41:d6:c2:07:94:33:b7:d9:1a:04:4b:
45:68:89:e8:12:11:8c:1c:0e:8f:46:9d:16:95:25:
ba:f5:69:5f:cc:96:a5:58:90:c2:ab:38:a4:4f:90:
56:f8:de:c5:07:db:85:4b:82:e4:65:33:68:d1:2e:
9e:11:0c:e2:06:cd:d0:70:1c:30:90:24:4c:f4:21:
cd:7b:5a:f0:a3:b1:31:8d:9f:75:bf:5d:7a:ab:c0:
4b:20:f7:90:54:f4:44:5b:b5:c8:24:8c:4b:1f:45:
f3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3C:6A:FA:29:64:D5:C1:50:F3:C7:47:AE:CA:7C:14:7F:F9:E1:0E
X509v3 Authority Key Identifier:
keyid:9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/8jxq-ilk1cFQ88dHrsp8FH_54Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.138.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:94:42:02:9d:01:f6:a8:1b:5a:d3:e5:24:61:e9:5f:2a:ac:
58:2c:32:ee:b5:cb:b1:40:35:da:30:4e:63:e3:3a:a5:f5:45:
ec:23:ce:b1:b8:6d:e8:d0:eb:25:1f:fd:82:f3:72:bb:99:dc:
bd:80:3d:58:3d:f6:32:32:5f:60:d6:30:d7:f3:aa:c1:a9:7d:
69:32:9f:dd:c8:cc:5e:09:97:75:11:80:93:e7:63:eb:35:5b:
4d:22:43:fd:f4:d5:ff:2a:38:5b:a9:33:62:79:1f:d7:c4:f7:
ba:59:62:20:e9:9f:da:9c:19:d1:ca:7c:70:da:d2:cb:ad:48:
59:05:96:a7:24:b1:56:73:cf:54:b6:7d:db:4d:d8:e3:49:72:
0a:21:69:58:d9:aa:f6:b1:62:92:f8:d1:b9:80:f2:91:88:e1:
bc:e2:3b:97:94:1d:ab:3b:f7:4d:71:ba:43:9b:e2:22:0a:58:
74:16:18:09:45:e2:74:49:db:c4:10:ed:3b:ec:44:2f:2e:0c:
ac:bb:c8:fe:3e:f2:95:7b:92:a3:63:f4:26:d5:f0:54:77:84:
21:54:82:56:40:48:8a:70:67:0d:21:f2:63:39:12:c7:ad:0f:
6e:e0:76:0f:69:07:7c:a2:b1:4b:9f:53:e2:3d:09:91:d2:a0:
0f:b5:5c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:20 2024 by rpki-client on console-fra.rpki-client.org