Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/JZt9JqOuhGx8EimAssp8y1Kfhz4.roa
File: JZt9JqOuhGx8EimAssp8y1Kfhz4.roa (raw, json)
Hash identifier: MfG0oblDMKbAG0Llhf7+QXbU4oF9Wy3QRmq0/BiYQjg=
Subject key identifier: 25:9B:7D:26:A3:AE:84:6C:7C:12:29:80:B2:CA:7C:CB:52:9F:87:3E
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018572BA8C81D1AF4005D975AA0283695367
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/JZt9JqOuhGx8EimAssp8y1Kfhz4.roa
Signing time: Mon 02 Jan 2023 13:45:06 +0000
ROA not before: Mon 02 Jan 2023 13:45:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205308
IP address blocks: 77.79.201.0/24 maxlen: 24
206.252.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:8c:81:d1:af:40:05:d9:75:aa:02:83:69:53:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 13:45:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=259b7d26a3ae846c7c122980b2ca7ccb529f873e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:c5:0d:87:a4:7a:af:01:c1:38:c0:15:8d:
da:e8:e5:61:7d:6e:2f:16:30:cf:81:bc:f3:2a:8e:
f1:4d:b3:e8:15:dc:20:ec:1d:ec:ab:ff:4a:55:13:
2f:38:f7:21:51:a3:68:c7:ae:cb:84:9f:3c:b0:8b:
07:a7:66:cd:01:27:6b:c8:0d:a1:c5:5e:a2:7b:4f:
99:84:91:2b:bc:dc:43:17:a5:30:8a:34:59:25:46:
1e:f3:08:e7:fa:b7:a4:ea:b9:50:0d:b2:c4:e5:ec:
d8:3b:ab:b8:e4:6c:45:f7:60:56:24:b1:c6:44:6f:
ff:f9:e8:ea:9c:c6:03:4d:f4:53:dd:34:5f:c1:1d:
b4:45:87:00:02:fa:7b:43:79:74:e6:a8:16:33:0f:
d7:d1:a7:ff:78:0a:cc:b7:73:1b:ee:74:50:85:b0:
fc:14:90:bc:a6:e3:17:82:37:61:2a:c5:8d:f7:fd:
af:ed:19:6a:ef:6f:d9:05:6a:33:69:4e:73:02:ce:
a1:c7:bb:f8:a1:6f:15:67:1a:25:b5:6a:5c:60:5f:
e0:57:9a:aa:84:c1:e0:fc:be:cd:3d:07:6e:b5:72:
0e:21:5f:08:cf:ce:5a:5b:f1:79:55:21:c3:bc:58:
23:14:e8:fe:50:2b:ba:53:43:bb:46:d8:82:e9:5d:
83:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9B:7D:26:A3:AE:84:6C:7C:12:29:80:B2:CA:7C:CB:52:9F:87:3E
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/JZt9JqOuhGx8EimAssp8y1Kfhz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.79.201.0/24
206.252.224.0/24
Signature Algorithm: sha256WithRSAEncryption
28:c0:d5:ce:87:83:0d:3c:fb:f6:af:9f:26:f0:71:a3:87:36:
47:00:4d:3c:c4:97:2b:fd:c2:f9:b4:84:56:1f:ba:27:ff:c4:
58:55:fd:25:f4:53:3f:be:e5:38:11:22:51:90:75:e3:ca:6d:
61:ae:fd:aa:47:d6:82:71:6d:08:8e:f5:60:84:7a:12:87:e6:
c2:1c:7a:fa:22:83:48:55:f2:78:d1:29:f7:79:f9:a7:b9:92:
b7:75:9d:04:fe:15:1d:75:07:7f:0d:06:47:84:fd:7f:2f:50:
01:4f:0c:83:f6:b9:f9:ab:9f:e5:e9:b9:ca:68:97:c7:2e:e5:
90:36:07:96:a2:02:78:22:a1:13:a3:8b:cf:b6:53:90:4c:65:
fa:72:85:84:8b:73:83:24:c8:98:6b:72:b8:36:7e:8f:d0:28:
2c:15:19:5d:91:68:0a:5b:4e:af:61:16:2b:87:2b:ee:c5:07:
de:4c:bf:04:1c:16:1e:09:0e:13:b9:06:b3:b0:44:4d:39:57:
0d:76:39:55:a6:da:76:dc:b9:37:6a:8c:c8:c1:91:4f:bd:ea:
db:29:ac:b8:93:77:88:d0:a1:87:1e:1e:66:1a:59:2d:55:60:
6e:21:b8:6d:75:91:38:54:37:be:71:5f:cd:a2:35:03:fe:f9:
c3:11:85:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:48 2024 by rpki-client on console-ams.rpki-client.org