Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/JpJJkgOzd6p37aBth-nlVHXrZfg.roa
File: JpJJkgOzd6p37aBth-nlVHXrZfg.roa (raw, json)
Hash identifier: GYDkDgAqti2+OPsH+PkbazS4OEw6cLOmZVODJunDx2k=
Subject key identifier: 26:92:49:92:03:B3:77:AA:77:ED:A0:6D:87:E9:E5:54:75:EB:65:F8
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018571D7E0FACEE5DCD8703DCD95A6352EF3
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/JpJJkgOzd6p37aBth-nlVHXrZfg.roa
Signing time: Mon 02 Jan 2023 09:37:31 +0000
ROA not before: Mon 02 Jan 2023 09:37:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 188.255.215.0/24 maxlen: 24
188.255.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jan 2023 15:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:e0:fa:ce:e5:dc:d8:70:3d:cd:95:a6:35:2e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 09:37:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2692499203b377aa77eda06d87e9e55475eb65f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:68:0f:cf:d2:29:e6:b0:30:78:61:00:f0:
c3:a0:b8:8b:c6:e2:d8:4c:18:c5:29:e2:8c:ce:76:
52:23:ea:53:2a:f9:80:8e:29:e4:06:62:a2:b7:93:
78:06:ba:d8:3b:aa:dc:f6:66:76:28:44:05:25:9e:
9e:43:b5:c2:90:bf:56:ef:99:18:c9:9d:15:74:14:
39:61:33:37:2f:da:f6:77:c6:35:2a:3b:45:88:a0:
86:56:80:d2:8b:c0:d9:61:bb:8f:d0:7b:36:a6:2b:
ea:a1:d8:6f:d2:8e:d6:f7:35:fb:bc:1d:e9:76:76:
77:5b:a5:75:8e:4a:57:b7:4c:d1:e7:c9:ee:8e:98:
a3:5c:8b:29:1e:c4:ad:93:48:8d:e5:9c:de:a5:5f:
2a:dc:85:52:90:9f:57:39:8b:09:b5:b7:15:00:31:
03:7d:59:77:d0:e6:86:22:b6:b4:07:f6:d7:9c:86:
d9:11:b3:8f:70:8e:74:a8:97:27:75:5b:3b:ed:ac:
05:7e:11:e4:83:d8:d1:e1:d9:f3:5d:f7:df:98:d7:
29:02:3f:e4:6f:f3:54:cd:4d:a5:62:5e:6f:16:5d:
9d:80:51:2a:48:98:56:88:fe:5d:54:10:34:28:9f:
64:0c:51:56:6e:a8:b6:2a:03:3f:25:5a:f3:1a:4e:
d3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:92:49:92:03:B3:77:AA:77:ED:A0:6D:87:E9:E5:54:75:EB:65:F8
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/JpJJkgOzd6p37aBth-nlVHXrZfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.141.0/24
188.255.215.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:87:ef:ff:00:17:9b:06:8a:e3:1e:99:ba:89:46:d5:b2:17:
b1:d2:b4:be:2b:ae:65:69:d4:69:c7:a2:44:97:eb:8f:3b:58:
d7:d1:52:34:ac:5b:94:89:c0:51:20:26:85:ff:bd:d7:f3:83:
63:cf:80:53:0b:b7:49:99:9f:be:93:c3:24:6d:ba:be:91:c4:
37:3c:7f:4f:bd:96:72:20:70:4c:19:b4:3a:56:89:29:c0:89:
e2:55:c2:9e:66:0a:f2:90:45:ce:93:55:7b:0b:2a:72:65:42:
9b:c3:83:ca:d9:ab:58:ce:bd:f9:df:5b:74:2c:25:d4:d1:6c:
59:32:bb:59:0d:f9:3f:6e:f6:df:f8:6a:1e:b4:ee:6e:37:9e:
d3:c4:5d:6f:bc:cf:61:6f:4c:6f:89:9e:f7:4e:9c:b2:65:93:
0a:58:00:19:41:14:3a:09:bc:a9:73:f6:66:5a:53:1e:d1:bf:
fc:0d:28:c0:aa:42:4b:c3:09:fd:b7:4b:50:72:d3:2d:d2:bf:
27:1d:0d:cb:e2:90:73:e0:d2:dd:4a:fe:57:4c:42:e2:fe:32:
06:4e:1d:08:c0:32:e1:a9:fa:07:6d:d7:ef:56:f7:86:7f:e0:
e6:d5:ab:c0:79:25:8e:e7:65:72:02:a0:e8:19:7f:8b:6e:39:
91:2b:97:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org