Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/JruNeOELnjzVIf_je2Vw4aBA0HQ.roa
File: JruNeOELnjzVIf_je2Vw4aBA0HQ.roa (raw, json)
Hash identifier: ypCjXmrJ2j6DDryp+TDzT9QGBsT3M0Mi5ZQaX3NTMig=
Subject key identifier: 26:BB:8D:78:E1:0B:9E:3C:D5:21:FF:E3:7B:65:70:E1:A0:40:D0:74
Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial: 01856DB87841BB490135C364A625CFB38259
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/JruNeOELnjzVIf_je2Vw4aBA0HQ.roa
Signing time: Sun 01 Jan 2023 14:24:43 +0000
ROA not before: Sun 01 Jan 2023 14:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15470
IP address blocks: 193.239.60.0/22 maxlen: 22
195.225.212.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:b8:78:41:bb:49:01:35:c3:64:a6:25:cf:b3:82:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Validity
Not Before: Jan 1 14:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26bb8d78e10b9e3cd521ffe37b6570e1a040d074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f3:ff:1e:e2:d8:7a:9c:ed:82:82:9f:96:61:
b6:aa:19:64:1c:e9:b7:32:28:e2:d3:46:71:22:6a:
cd:87:33:07:d7:e7:0d:85:99:b9:94:6d:7c:b0:43:
08:7a:6b:85:5e:4e:78:92:a2:fa:76:10:05:1e:9e:
76:57:d0:f8:03:7f:46:50:a9:aa:ea:25:12:40:e1:
b5:6e:d1:34:65:f9:6a:d0:8f:cd:56:b5:ed:b0:a6:
e5:a2:1f:23:8e:e0:7a:47:c2:68:18:85:d3:a8:bf:
76:d7:28:5c:bc:22:6f:b1:a8:04:86:99:3b:b9:9e:
27:4b:4e:76:80:a9:54:1f:24:9f:cf:20:a9:07:86:
67:c1:18:ab:e0:77:60:74:d1:da:c9:b6:1a:21:1a:
6e:07:f1:34:9f:42:e2:ec:13:72:e9:15:52:68:3f:
78:5a:8c:97:df:e1:ec:8b:ed:a8:06:72:76:03:3c:
2f:cf:ef:86:c2:bf:a8:27:5f:03:2e:b8:52:58:01:
59:53:17:f3:a8:00:31:28:e3:c9:1b:97:5c:38:94:
da:e8:f1:b3:f6:7c:3d:c1:d4:72:1c:2d:a6:9b:43:
a1:b9:99:5c:61:90:d6:2f:ea:4c:82:54:05:1f:71:
a7:48:64:3b:fb:86:1c:2b:61:99:19:ad:5f:3f:72:
83:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BB:8D:78:E1:0B:9E:3C:D5:21:FF:E3:7B:65:70:E1:A0:40:D0:74
X509v3 Authority Key Identifier:
keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/JruNeOELnjzVIf_je2Vw4aBA0HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.60.0/22
195.225.212.0/22
Signature Algorithm: sha256WithRSAEncryption
77:08:b2:08:71:3c:21:88:cb:2b:98:18:99:cc:5a:7d:7f:35:
e2:62:0b:77:7e:d6:69:7a:d3:16:9a:55:b0:f0:b2:41:67:6c:
24:51:15:0c:b9:dd:5a:3a:08:55:3a:70:ea:5f:94:b3:27:55:
83:2a:43:1d:bf:7a:bb:56:33:c6:da:e0:87:1a:67:06:29:14:
e1:1a:a4:e0:29:4c:ec:5b:07:33:2a:74:d7:98:f7:7f:ae:6a:
9d:c4:cf:6b:c3:de:39:bf:ff:77:a5:ff:56:9a:52:a9:b7:3f:
af:7d:09:f4:e9:2b:90:6f:ec:89:f1:83:74:47:7a:f3:fd:0c:
e6:51:cc:61:46:40:c7:23:f1:58:76:d0:31:a9:8f:b1:1a:d3:
ec:12:e7:f3:78:af:40:34:80:63:d4:8a:75:a5:e7:c3:f8:18:
94:af:ea:6b:8c:ff:23:3b:34:35:76:28:2a:6c:1d:8c:1a:bb:
6b:e8:e1:7f:38:13:46:62:c3:96:73:f8:c6:38:8b:81:89:2c:
dd:fc:bd:94:d1:f8:b7:63:ae:6f:68:3f:6b:92:ba:f7:de:95:
c0:0e:17:da:0e:08:fb:24:17:7b:83:7d:39:03:32:3f:b1:16:
e9:55:da:4f:b8:47:db:43:c3:7e:15:9b:e5:c3:af:46:f6:08:
88:78:a8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:05 2024 by rpki-client on console-fra.rpki-client.org