Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/JNqn_K0cq-gGPWXLA1KrDsJs_5A.roa
File: JNqn_K0cq-gGPWXLA1KrDsJs_5A.roa (raw, json)
Hash identifier: f7S5Xv4ekxeEHUUnEl8KJrID/hR2/5CTrLj/yvr7U7Y=
Subject key identifier: 24:DA:A7:FC:AD:1C:AB:E8:06:3D:65:CB:03:52:AB:0E:C2:6C:FF:90
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 01856CF87C763FCA7C9013C91677CC000051
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/JNqn_K0cq-gGPWXLA1KrDsJs_5A.roa
Signing time: Sun 01 Jan 2023 10:55:02 +0000
ROA not before: Sun 01 Jan 2023 10:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208454
IP address blocks: 2a07:22c1:ffec::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:7c:76:3f:ca:7c:90:13:c9:16:77:cc:00:00:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Jan 1 10:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24daa7fcad1cabe8063d65cb0352ab0ec26cff90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5d:0c:4c:6b:14:7a:02:5d:bc:e0:cd:88:59:
f8:8e:28:16:f9:f6:ed:24:c9:01:26:42:d4:59:50:
c5:cf:d4:25:c3:93:90:6b:8d:88:6a:8b:15:3e:e9:
7b:6e:56:da:c2:b7:c0:75:b0:4a:c9:6e:fa:74:7a:
a2:51:75:00:ef:39:d3:bc:e6:36:18:e8:65:84:c2:
df:bb:d4:1b:ad:ae:9c:b1:b0:69:bc:91:c6:b9:11:
cb:c4:e5:55:ff:70:5c:d3:77:09:5b:89:c1:9e:c2:
54:0e:9f:0f:25:00:26:4f:ce:2b:ac:17:02:3a:88:
83:eb:93:cd:8a:56:89:cf:20:7d:b7:62:4b:a6:c7:
44:4d:c6:5b:f1:8e:68:69:94:03:91:07:b4:77:ea:
5d:01:ac:f0:8e:b6:5d:2f:ed:15:1b:4c:05:39:66:
35:6e:ec:41:0e:fc:0d:f2:3d:e8:68:d6:7c:1d:ea:
59:f7:d2:d3:b0:42:ef:e8:53:34:82:bf:d1:28:b7:
b3:b8:b2:a7:d8:24:64:88:de:38:68:89:a6:93:e3:
e7:25:d9:26:a3:aa:46:5c:e7:b2:c0:92:c9:c8:36:
cb:eb:a8:28:bc:c3:f3:25:1b:00:0d:78:dd:bb:f0:
12:9b:a7:7e:3b:6d:ac:fa:bd:08:05:dc:1d:75:94:
77:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DA:A7:FC:AD:1C:AB:E8:06:3D:65:CB:03:52:AB:0E:C2:6C:FF:90
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/JNqn_K0cq-gGPWXLA1KrDsJs_5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:22c1:ffec::/48
Signature Algorithm: sha256WithRSAEncryption
01:fb:fc:a0:33:37:87:db:d8:c9:5b:99:df:3f:9e:d2:4d:c6:
f8:5e:09:22:f4:e6:24:e9:de:b2:db:a5:3f:67:e5:58:b5:32:
b7:ac:ef:84:e7:ed:6e:6a:65:83:00:14:c7:d8:3a:12:26:4d:
94:fa:25:77:17:cb:17:da:04:0e:57:bf:b6:3e:54:73:76:93:
88:cc:80:ca:9b:c7:86:b6:e7:e5:63:67:6a:36:27:f0:4b:b8:
d3:11:20:46:49:dd:b4:2c:c8:ad:75:f0:c7:a3:75:23:db:6e:
71:e7:5a:8c:ef:db:6c:b4:d3:1b:88:e1:e9:65:f7:3e:c7:36:
c9:25:18:ce:79:5c:18:26:e3:d6:0d:81:7b:ea:ac:44:42:37:
50:23:55:dd:a0:ab:58:12:6b:34:1e:b6:7e:b9:4d:2b:66:24:
e5:4f:2a:5d:9c:17:50:8f:1d:54:a2:ee:30:43:15:cc:43:00:
d7:94:d0:fb:ed:dd:30:9a:a1:0c:31:c0:06:9a:d8:a4:6a:cf:
25:64:27:7f:37:29:23:b7:f9:4a:c6:af:af:48:c0:2f:22:f9:
41:b7:3a:48:42:a0:34:e4:d6:90:2f:b6:28:5f:15:b6:2c:3b:
42:51:1f:63:55:38:7f:b1:b6:40:59:d0:c1:96:d4:18:c1:7f:
16:25:74:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:48 2024 by rpki-client on console-fra.rpki-client.org