Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/JuPWKfLTKRWJzm3By4VlksOnBQ4.roa
File: JuPWKfLTKRWJzm3By4VlksOnBQ4.roa (raw, json)
Hash identifier: A0aBacDDg+q/9tfehznLYasNXNMaufDmGkes/dUx34A=
Subject key identifier: 26:E3:D6:29:F2:D3:29:15:89:CE:6D:C1:CB:85:65:92:C3:A7:05:0E
Certificate issuer: /CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Certificate serial: 01856F42E148D28CC96F5F1748105623B712
Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/JuPWKfLTKRWJzm3By4VlksOnBQ4.roa
Signing time: Sun 01 Jan 2023 21:35:32 +0000
ROA not before: Sun 01 Jan 2023 21:35:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2200
IP address blocks: 156.28.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:e1:48:d2:8c:c9:6f:5f:17:48:10:56:23:b7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Validity
Not Before: Jan 1 21:35:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26e3d629f2d3291589ce6dc1cb856592c3a7050e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:4d:93:10:28:2a:66:ba:7e:a7:d9:6a:25:
4f:42:0f:bb:66:15:5f:8e:34:32:8f:b0:39:b9:c3:
5e:fe:50:78:08:77:52:85:ff:94:37:d1:9e:89:2e:
12:eb:e9:a7:f9:84:df:54:30:e3:26:41:16:32:dc:
38:50:7f:0b:56:c7:7e:af:92:36:1d:e9:b7:2f:a9:
d1:5f:88:67:f2:b2:cb:cb:30:6f:72:11:55:ad:55:
bb:64:09:72:0d:df:72:c0:1f:e2:9f:f0:63:d8:3a:
2f:06:bc:67:8d:6b:0d:9a:f8:bd:18:fc:df:e4:7d:
0a:d1:48:2f:db:7d:7e:54:24:ee:ac:2d:e9:4a:8f:
ed:af:b6:d5:23:11:46:92:19:5a:1d:12:32:96:11:
14:99:ba:d5:f3:f9:fd:77:21:e7:3a:c1:9d:44:18:
83:3b:a3:c0:04:f1:41:c9:c1:89:7b:2f:66:cb:8b:
c6:27:2d:44:90:a5:8c:78:f3:cb:d3:95:a9:52:95:
1e:97:3b:34:db:03:c2:82:87:f0:1b:84:f8:c2:4e:
98:68:54:67:57:e1:5d:95:a9:11:a6:3c:79:97:d7:
fa:b5:7f:bb:a4:a4:c6:08:3e:58:dd:0a:be:a7:b7:
b3:10:e2:5e:f7:ef:b7:0e:c2:42:3b:2c:d6:98:10:
d0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E3:D6:29:F2:D3:29:15:89:CE:6D:C1:CB:85:65:92:C3:A7:05:0E
X509v3 Authority Key Identifier:
keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/JuPWKfLTKRWJzm3By4VlksOnBQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.28.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:b2:31:fd:38:0a:ef:03:08:e2:e4:fc:a9:7d:82:54:45:dd:
47:f4:8d:0b:05:14:72:5d:94:b4:6c:40:ec:4c:2a:6e:57:ec:
80:3d:55:52:5a:8e:c8:d1:cc:89:30:1c:cc:22:c2:1e:7d:4b:
89:f7:92:89:5a:e0:9d:1c:2b:c8:69:d0:bb:f5:1f:87:cf:c9:
33:e6:7d:71:61:4a:0f:7a:15:6e:fd:de:ce:cd:66:5c:1b:09:
1b:cf:a8:99:83:5c:11:d4:aa:52:ca:08:75:70:dd:ba:11:d9:
b0:40:32:be:ed:17:d2:f9:b3:a8:7e:9e:57:6d:0d:69:13:b7:
d7:d1:3f:d3:2a:d3:0f:4e:40:44:5c:98:34:58:48:3b:13:03:
76:b2:92:7d:26:59:86:0a:f4:2e:f9:df:4c:fd:55:3e:a7:43:
e6:a2:de:da:e3:4b:76:a8:e8:5c:5d:52:db:13:24:d7:9f:68:
a9:ea:90:3e:95:a9:e5:9d:35:71:69:58:3d:cf:a6:0b:e8:4c:
77:88:44:f3:a6:91:33:85:7b:2e:c4:46:79:8a:f1:75:ae:a0:
bf:49:b0:7f:5f:2a:87:82:d5:bc:07:1d:2e:07:a3:a9:25:a1:
a7:5c:56:4b:ef:38:87:69:22:ee:d5:ff:95:48:53:bc:ee:c6:
ea:d7:61:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:34 2024 by rpki-client on console-ams.rpki-client.org