Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/JMFSolsTf4oZul3kKOA6-jJiLSA.roa
File: JMFSolsTf4oZul3kKOA6-jJiLSA.roa (raw, json)
Hash identifier: sk4XAyJyebgZrSFs6R4DtAzMXie+s6lNvU7AwHiYItU=
Subject key identifier: 24:C1:52:A2:5B:13:7F:8A:19:BA:5D:E4:28:E0:3A:FA:32:62:2D:20
Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial: 01857246FA34DC73033034BBAE3354720402
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/JMFSolsTf4oZul3kKOA6-jJiLSA.roa
Signing time: Mon 02 Jan 2023 11:38:52 +0000
ROA not before: Mon 02 Jan 2023 11:38:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60731
IP address blocks: 193.32.202.0/24 maxlen: 24
5.149.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:fa:34:dc:73:03:30:34:bb:ae:33:54:72:04:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Validity
Not Before: Jan 2 11:38:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24c152a25b137f8a19ba5de428e03afa32622d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ec:bb:c5:f6:a2:c5:c9:89:9a:85:23:32:4b:
10:c3:f9:bd:71:29:09:29:fe:87:38:3d:bd:7a:f3:
c2:ab:13:09:68:3d:ef:87:80:75:e8:1c:a5:63:5f:
56:75:b6:6a:79:30:29:b0:92:26:56:b6:4c:67:99:
07:d8:8f:f0:ea:54:14:3d:2e:33:9c:92:70:1f:e1:
3e:f5:0c:24:ed:55:67:d2:41:9e:df:c2:03:e7:0c:
02:5e:34:f7:4d:75:2f:99:af:10:c2:2a:5a:95:c4:
fd:db:0e:f0:87:53:e9:1c:31:9c:29:47:80:38:78:
7c:4b:b0:1e:f3:09:13:a5:1e:5e:d6:23:29:56:de:
73:e4:f8:6f:91:34:35:e9:0c:13:0e:6d:13:a4:6f:
b0:d6:ef:a8:50:16:e0:aa:89:6a:3f:12:15:f4:c4:
b1:a3:c9:9e:cf:2e:84:70:43:ce:bf:a5:45:26:69:
f5:31:91:6a:bc:38:c6:71:3a:03:af:e7:0e:9f:26:
ea:83:bc:75:87:9e:d6:6c:d3:d3:73:fc:f1:26:25:
6c:15:0b:0b:ec:d4:2b:4a:2d:66:9d:79:8a:d4:d4:
bd:6a:05:94:f1:26:f0:8e:c1:7c:36:19:a7:5b:8f:
d3:13:ee:15:1b:6f:12:b2:e0:56:ed:4b:62:c9:87:
37:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C1:52:A2:5B:13:7F:8A:19:BA:5D:E4:28:E0:3A:FA:32:62:2D:20
X509v3 Authority Key Identifier:
keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/JMFSolsTf4oZul3kKOA6-jJiLSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.158.0/24
193.32.202.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:d6:97:f2:b6:e4:ee:ef:53:c3:02:35:60:be:1a:ab:be:50:
83:64:1e:21:3f:80:54:f5:eb:f6:5d:03:c3:49:53:be:04:91:
1a:23:71:34:77:ff:53:b9:0f:2e:b5:7d:23:59:ca:21:f0:10:
8c:fd:2e:c0:87:f0:1f:e2:9a:88:63:6e:f6:3e:c2:80:6b:b8:
6c:31:13:22:b1:5a:b0:75:ea:93:55:b7:4f:2e:ce:6d:ba:95:
5f:e4:0d:2d:86:ad:af:ab:8e:5b:56:7f:26:2a:94:8b:4e:65:
ba:41:28:92:c0:2a:bf:e3:ef:61:3b:d2:cc:e0:c2:b8:f4:18:
30:34:de:b9:30:58:cc:23:f4:be:07:8a:3d:c4:e5:3d:37:c4:
1e:b3:c6:39:7a:cb:9f:68:5f:97:7e:c9:00:d3:17:e6:81:5a:
29:2c:c0:3c:02:4d:d9:ac:de:e5:54:f1:88:d3:44:9d:33:a3:
3b:bf:ea:69:cf:58:4f:d9:af:b9:30:d6:80:b3:f5:cd:aa:0e:
1e:59:18:05:f9:db:04:49:8b:5b:6f:68:a0:b0:99:5d:48:9c:
b5:ed:03:d1:b7:ef:cd:4d:b8:48:5f:80:14:76:dc:44:a0:16:
a9:6b:1f:41:3c:bc:0b:18:a4:71:b4:8a:69:5e:3b:fb:73:a4:
bd:94:85:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:14 2024 by rpki-client on console-fra.rpki-client.org