Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/jgx169pruHt3nbaKuzb71obwGqs.roa
File: jgx169pruHt3nbaKuzb71obwGqs.roa (raw, json)
Hash identifier: 1oao/uUbAx51oCUJY7x3y0W2Md4zLpQPsomPqVjYWR8=
Subject key identifier: 8E:0C:75:EB:DA:6B:B8:7B:77:9D:B6:8A:BB:36:FB:D6:86:F0:1A:AB
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0185724711625587F3C9AE40908513C09251
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/jgx169pruHt3nbaKuzb71obwGqs.roa
Signing time: Mon 02 Jan 2023 11:38:58 +0000
ROA not before: Mon 02 Jan 2023 11:38:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199790
IP address blocks: 37.139.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:11:62:55:87:f3:c9:ae:40:90:85:13:c0:92:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:38:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e0c75ebda6bb87b779db68abb36fbd686f01aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:24:7a:bb:67:db:98:2d:19:1b:c9:54:07:00:
37:50:fb:37:02:08:bc:68:52:03:f8:1f:fd:70:c0:
a4:5a:91:4c:4c:33:13:5a:00:28:bf:b0:8c:b0:06:
5e:67:19:3e:ad:6f:40:6f:ee:51:d4:7d:15:40:b9:
e6:2a:21:2d:7d:3a:82:b4:a7:b3:3b:3f:03:ff:ce:
cb:c7:02:ce:9c:29:32:4a:46:f3:fc:7d:37:b7:5d:
20:b2:73:d6:27:a2:b1:ea:4c:9b:96:d5:55:ab:b8:
41:7f:ba:cd:93:b2:31:e0:ef:84:37:9b:3e:56:2b:
f5:22:5e:32:90:88:96:93:ad:a4:77:9a:36:6a:3d:
af:f8:14:0c:d6:7d:da:f6:64:59:4d:1e:c4:b1:4e:
11:62:01:dc:f5:fb:ae:64:89:fb:fa:63:b0:14:ce:
ef:69:bb:25:0a:df:3a:75:63:0d:77:91:ae:73:c2:
51:ec:72:60:e4:4a:f6:7d:db:32:84:2a:0d:f4:ce:
9f:c8:8c:02:b9:a3:00:57:61:80:f1:50:04:d0:dc:
26:e5:6b:c9:be:87:f1:cd:15:c3:a5:aa:9e:af:c9:
13:14:dc:51:78:06:78:ad:93:eb:95:e6:e1:bd:fc:
e2:a5:e9:b1:84:c7:74:0a:57:d6:fb:12:8e:e8:64:
f0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0C:75:EB:DA:6B:B8:7B:77:9D:B6:8A:BB:36:FB:D6:86:F0:1A:AB
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/jgx169pruHt3nbaKuzb71obwGqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.38.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:bc:f5:dd:61:3d:2b:b1:25:d9:10:44:5d:62:29:95:b6:5a:
95:d6:f2:f9:fb:68:01:f9:4c:3a:92:5a:d5:58:c0:3b:70:e4:
0e:b5:4d:59:f9:07:c1:7c:77:da:66:ac:43:32:47:89:34:7f:
ff:2a:48:70:7b:99:5b:83:db:64:ae:5e:3d:69:e0:19:4d:da:
62:ab:88:a3:2a:7c:87:64:9d:88:6e:b6:90:3e:b0:5a:be:08:
5e:47:b5:12:20:ab:99:1a:17:b9:6d:d3:ba:fb:c0:4d:6e:11:
2c:64:ee:92:25:0b:4c:36:32:7b:36:0f:5d:39:8b:92:c7:1f:
a5:02:6e:a4:6b:e0:fe:4d:43:a5:34:92:e3:5e:b4:0a:7a:bf:
18:0a:7c:89:d9:38:87:32:50:62:05:e0:53:77:cd:50:70:1f:
7c:d6:85:3f:9a:5d:f1:ce:4b:fb:a5:eb:74:eb:b3:05:98:e0:
02:4d:1b:f7:d0:1c:1e:9e:d1:53:bf:46:24:1e:f1:72:85:9a:
05:92:0a:3f:97:48:69:38:45:14:c5:6f:48:54:53:77:66:11:
21:72:61:03:bc:74:cc:29:77:ff:13:73:41:3a:4e:9c:15:f1:
b7:d6:3f:40:75:64:d3:34:5d:82:ec:f0:26:11:76:54:dc:6f:
ff:8f:96:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:47 2024 by rpki-client on console-ams.rpki-client.org