Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/JUKNOt2bPuA2N3Dlh5WyJ6_ZmMw.roa
File: JUKNOt2bPuA2N3Dlh5WyJ6_ZmMw.roa (raw, json)
Hash identifier: q/tqGNVMTTBtgqu28Ou6HvS5zR8WCuS2H8I77L2SWj4=
Subject key identifier: 25:42:8D:3A:DD:9B:3E:E0:36:37:70:E5:87:95:B2:27:AF:D9:98:CC
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 01856EA68A5F8FEAD3D9FE951F24EC74F045
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/JUKNOt2bPuA2N3Dlh5WyJ6_ZmMw.roa
Signing time: Sun 01 Jan 2023 18:44:46 +0000
ROA not before: Sun 01 Jan 2023 18:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212335
IP address blocks: 213.139.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 05 Apr 2023 08:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:8a:5f:8f:ea:d3:d9:fe:95:1f:24:ec:74:f0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 1 18:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25428d3add9b3ee0363770e58795b227afd998cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:2c:a0:6c:a2:8b:e1:39:81:ce:4e:2d:c0:
d8:79:1c:42:ec:b6:4c:41:22:23:20:e1:44:63:57:
cb:bb:0d:ef:b8:14:2f:53:5d:5b:d9:61:11:b7:aa:
7d:20:f1:f3:be:cc:be:89:8a:ac:a4:da:47:3f:c2:
57:6f:17:bc:a5:62:86:93:b4:50:40:61:96:a5:e5:
9c:e9:30:9c:ff:22:5c:98:ec:6e:1f:85:10:ac:60:
c3:8a:4f:0b:05:b3:66:c9:53:be:15:43:e6:45:df:
21:03:be:e9:e3:41:f7:10:31:f6:e2:02:94:39:77:
ad:0a:38:af:f5:d7:b8:68:68:e8:06:7b:2f:b0:e2:
13:9f:0f:da:00:db:58:a9:13:9d:10:cb:6a:e7:72:
ad:5c:e4:4a:4f:3d:14:76:bb:aa:51:1d:05:3d:00:
0b:fb:9e:87:19:99:a5:f3:70:7b:07:03:af:da:96:
c0:1e:09:70:32:26:6d:57:de:71:59:64:42:00:ae:
fe:fd:a3:af:e2:94:56:a3:a9:f4:d7:60:16:a7:5a:
ad:4b:04:c2:d1:9d:db:a1:e0:79:e8:1e:67:7f:36:
33:20:5b:78:79:d6:6d:ac:18:d5:3f:a6:d3:42:92:
d7:bc:9e:96:1b:61:8a:db:2d:c8:b2:d3:83:ba:59:
15:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:42:8D:3A:DD:9B:3E:E0:36:37:70:E5:87:95:B2:27:AF:D9:98:CC
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/JUKNOt2bPuA2N3Dlh5WyJ6_ZmMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.204.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:64:9a:a1:b3:80:fa:30:f1:f5:f0:d2:69:39:20:cb:e3:d0:
40:29:cf:b7:8e:c8:ff:f4:eb:cc:b1:58:00:a1:c8:3e:b1:23:
f4:82:15:d8:45:46:5a:a7:46:c0:7d:c7:75:8b:06:9b:ba:b8:
7b:b7:65:61:df:e8:a0:45:ec:79:17:50:92:5c:96:28:e4:61:
e8:02:07:c3:01:cf:f2:3c:0b:9b:c4:25:ee:2a:3f:17:1d:db:
40:d4:b6:10:5b:cb:4b:03:2f:74:80:a1:7e:3b:2b:18:92:08:
f3:cc:43:44:1e:78:04:b7:0a:54:90:de:d8:fb:61:fd:ac:41:
01:e4:b9:fb:6b:d3:17:90:e7:1d:61:ee:d5:5d:91:d6:8b:52:
7e:b2:31:45:12:db:ef:4d:4f:e8:d8:dd:1c:65:a4:b6:cd:18:
cf:c4:91:90:42:08:f7:83:df:50:83:9d:4d:8c:e8:ea:f1:e0:
48:7d:b8:de:d3:1f:93:82:e1:b3:04:8b:ff:20:45:f6:f6:36:
63:dc:1e:6a:4c:91:da:f8:cb:4c:d5:b9:d0:14:47:a1:5a:98:
da:b0:8d:79:92:ca:c1:ec:19:63:e9:b5:a6:7f:5c:10:8b:d3:
d6:8a:0a:60:c6:c1:13:bd:58:7a:c6:64:48:f6:e0:95:40:1e:
55:1e:52:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:30 2024 by rpki-client on console-fra.rpki-client.org