Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/Jbql8idJfP0Jz4QEEaOYSyF7uPY.roa
File: Jbql8idJfP0Jz4QEEaOYSyF7uPY.roa (raw, json)
Hash identifier: 1tepAdVCM23IOSLZVT7PeVg038eMoeAxsVfYPpscyMA=
Subject key identifier: 25:BA:A5:F2:27:49:7C:FD:09:CF:84:04:11:A3:98:4B:21:7B:B8:F6
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018572BA8CCC7BFD0C0AC41FE48EEFE993C0
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/Jbql8idJfP0Jz4QEEaOYSyF7uPY.roa
Signing time: Mon 02 Jan 2023 13:45:06 +0000
ROA not before: Mon 02 Jan 2023 13:45:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205419
IP address blocks: 195.167.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jan 2023 11:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:8c:cc:7b:fd:0c:0a:c4:1f:e4:8e:ef:e9:93:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 13:45:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25baa5f227497cfd09cf840411a3984b217bb8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:53:bb:0a:ce:48:9e:59:0d:5b:22:66:6f:21:
21:72:59:9e:27:1c:4e:ab:3f:2d:50:e5:73:8e:41:
18:d0:43:6f:73:c1:18:26:ec:7e:4a:a8:f5:8b:a1:
05:ab:81:60:0e:b6:d2:19:f2:fb:60:86:c7:ff:46:
10:35:25:09:f6:ee:53:c0:df:d8:04:f4:f5:e7:eb:
2d:a9:2a:90:73:c7:3f:37:fd:d4:1b:38:1c:2e:f9:
88:95:17:47:2b:88:87:89:af:06:6a:93:dc:32:16:
0c:19:a6:4a:79:27:47:2d:24:4d:d6:89:1a:e4:ca:
c5:66:bf:71:3c:81:3d:fb:29:a2:46:87:94:a0:e6:
06:dc:28:3b:36:fe:a9:38:53:3d:9c:cc:5b:a3:3c:
22:74:47:9b:9c:8b:a4:a8:29:e6:4a:df:ff:cf:8c:
67:47:de:2d:5d:7d:cb:07:e6:10:bd:05:e2:63:73:
23:3e:bc:0f:d0:16:83:f3:60:6a:93:2f:db:9f:63:
09:44:1e:bb:8d:d9:d1:2d:67:80:c2:34:ba:fc:8d:
93:5a:49:26:7b:ca:3a:26:8f:8d:b3:68:34:77:04:
ce:52:b2:bb:65:a8:dc:62:e4:b5:c2:08:d7:01:47:
1f:5a:a0:94:8e:25:b3:1e:d4:a6:9c:2e:35:12:38:
b6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BA:A5:F2:27:49:7C:FD:09:CF:84:04:11:A3:98:4B:21:7B:B8:F6
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/Jbql8idJfP0Jz4QEEaOYSyF7uPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.167.153.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:3b:3d:ca:6c:13:ac:8e:e5:79:ce:4b:c7:42:5e:f4:3a:bc:
9f:d6:e5:9e:a4:da:23:18:d0:1d:5f:cd:aa:49:3b:87:bc:b7:
43:8f:c6:fc:a8:b2:32:1d:78:3c:6e:47:c1:7a:f1:95:c5:26:
9c:80:2b:26:eb:9c:37:64:fa:55:08:46:b1:18:53:82:d5:38:
6c:ac:95:9c:7e:62:bc:a3:17:2f:e5:87:56:d5:0b:97:f9:ce:
1c:7a:ea:c3:2d:04:46:4d:e0:23:36:fb:93:d3:62:e8:2a:60:
a7:e0:8f:2c:f7:cd:85:a8:57:47:f8:ee:ed:cf:08:6f:e2:9a:
b0:e8:2d:c8:97:2e:9c:9f:0b:b2:82:5a:82:4b:08:dc:f5:44:
76:cb:d9:e1:94:2e:4b:09:3d:9f:88:34:74:9b:12:d7:27:a6:
c2:6c:7d:1f:ed:2b:19:4e:43:5e:da:62:07:b0:1b:c5:38:50:
24:ae:ba:b7:d6:89:9f:20:df:eb:21:03:9e:69:3c:1a:fe:2e:
49:b6:71:78:17:14:47:8f:0b:1d:df:48:73:a4:57:54:75:9c:
4b:6f:c2:68:4b:02:7a:73:dd:ea:c1:98:7e:34:3e:04:5f:02:
48:80:06:47:c5:1e:33:68:f8:83:30:c9:c8:6a:f8:11:00:f1:
9d:de:e6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:52 2024 by rpki-client on console-ams.rpki-client.org