Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/jpxpepm66kH8hXPvYf9-1TY9BtY.roa
File: jpxpepm66kH8hXPvYf9-1TY9BtY.roa (raw, json)
Hash identifier: uXayGddzE5uSkuUl1ajVKcInIGxjXdB3VnOmWzToUhE=
Subject key identifier: 8E:9C:69:7A:99:BA:EA:41:FC:85:73:EF:61:FF:7E:D5:36:3D:06:D6
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01891A6D4DF15E7E16777D6D04BF30DA08FB
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/jpxpepm66kH8hXPvYf9-1TY9BtY.roa
Signing time: Mon 03 Jul 2023 06:25:18 +0000
ROA not before: Mon 03 Jul 2023 06:25:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209813
IP address blocks: 5.8.66.0/24 maxlen: 24
5.8.67.0/24 maxlen: 24
5.188.50.0/24 maxlen: 24
5.188.194.0/24 maxlen: 24
5.188.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1a:6d:4d:f1:5e:7e:16:77:7d:6d:04:bf:30:da:08:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jul 3 06:25:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e9c697a99baea41fc8573ef61ff7ed5363d06d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:9b:d6:de:71:03:3a:97:7a:2a:6e:2a:9e:
12:a6:3d:97:96:b1:65:95:a7:d6:7b:fa:d8:f7:b3:
78:0e:9b:27:e0:d8:97:e2:e6:40:53:07:80:6a:7b:
06:4d:aa:15:3b:ec:7c:84:61:85:f9:2a:d3:16:74:
6c:91:5e:b1:d3:1d:d4:22:23:2b:25:d3:83:8c:1b:
6a:94:be:54:14:43:5c:5a:71:d4:c6:00:06:52:cd:
2e:8a:0c:0c:76:9a:ca:6e:73:d0:95:18:1c:71:6e:
7e:06:9b:7d:be:1b:ff:6f:9f:b1:52:ba:f8:8a:72:
0e:72:ab:43:57:aa:a5:ce:87:1b:1f:6d:8f:20:ca:
f7:a5:a5:fd:6a:b2:3f:fc:87:e8:e0:40:05:f0:69:
8f:94:06:ab:4a:88:0f:1b:1b:63:c1:1f:e9:e3:59:
c3:bc:e0:26:96:c8:f9:d6:59:15:ef:eb:ec:aa:fa:
07:e2:0f:d9:7b:74:c4:cf:02:a1:97:17:71:73:58:
5a:16:d1:61:14:b7:d8:d0:11:4e:f4:e3:9b:9f:01:
b9:03:fc:4c:e4:bd:27:40:21:a7:5c:ad:0b:bf:bf:
db:a6:d8:80:a7:8d:2e:0c:f9:f3:9e:65:7a:b8:d9:
6f:23:6e:d3:cf:ad:fc:91:a1:0e:32:74:be:6f:ea:
3e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9C:69:7A:99:BA:EA:41:FC:85:73:EF:61:FF:7E:D5:36:3D:06:D6
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/jpxpepm66kH8hXPvYf9-1TY9BtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.66.0/23
5.188.50.0/24
5.188.194.0/23
Signature Algorithm: sha256WithRSAEncryption
01:43:d7:94:7e:ad:b6:5f:a5:98:4e:1d:68:c1:7c:e7:5d:5e:
b6:6a:3e:56:0f:26:e2:5c:1e:01:4a:bb:02:34:39:38:ae:5d:
65:ba:20:51:54:16:c8:9e:ba:18:57:74:cc:40:99:c2:ad:54:
44:c4:97:38:4e:45:b3:d2:20:71:08:98:e2:b1:4f:f8:f2:b3:
ed:63:06:4a:42:93:1e:33:2f:e9:da:90:24:59:ab:cf:96:ec:
e5:a8:c6:f9:33:ee:61:64:ec:98:aa:6f:49:e3:00:1e:11:30:
14:5d:06:fb:e4:8d:f9:04:d7:bb:30:d3:d1:20:ad:87:ea:36:
4b:a6:df:d2:c5:3d:48:9e:94:cc:80:8f:1e:13:c8:18:10:5a:
f8:5c:13:32:70:4b:b9:bb:a5:85:99:36:4d:54:22:e7:a2:0b:
a5:00:e7:3a:47:51:33:d6:4d:1a:4a:f5:7a:b0:7b:d1:f7:69:
70:bc:fa:37:2f:0f:f1:a7:32:e6:83:35:83:7b:e5:1c:b8:f1:
93:08:b9:eb:62:05:99:ac:c5:cc:b6:7e:b9:27:a5:5d:d9:2b:
1d:b5:e8:17:b8:8a:d5:2f:eb:c9:3c:5a:ba:fd:7e:1e:02:46:
66:9b:82:13:7f:a6:e3:d7:0f:d8:3d:40:b3:8e:e2:3a:36:3a:
b3:c1:5f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 07:53:13 2023 by rpki-client on console-ams.rpki-client.org