Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/JJbdUwMjC_divfP-VO9xGbEVYxs.roa
File: JJbdUwMjC_divfP-VO9xGbEVYxs.roa (raw, json)
Hash identifier: Dmkw/HCOky3z6DKi1BSv0SNGZV+vjmXZdhxs1ryu5/k=
Subject key identifier: 24:96:DD:53:03:23:0B:F7:62:BD:F3:FE:54:EF:71:19:B1:15:63:1B
Certificate issuer: /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial: 018CC349535DD64C4271BE09822B8C9A62EA
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/JJbdUwMjC_divfP-VO9xGbEVYxs.roa
Signing time: Mon 01 Jan 2024 04:30:11 +0000
ROA not before: Mon 01 Jan 2024 04:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207199
IP address blocks: 193.8.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:53:5d:d6:4c:42:71:be:09:82:2b:8c:9a:62:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Validity
Not Before: Jan 1 04:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2496dd5303230bf762bdf3fe54ef7119b115631b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:db:3b:bc:ab:0c:5e:4b:e3:33:7f:3d:6e:d9:
3d:ae:27:44:68:f1:ef:4a:24:40:07:1b:3e:50:5f:
1b:55:41:7f:fc:e5:5c:11:ac:29:3f:0c:a2:78:8f:
e8:ee:69:56:4b:87:20:4d:fe:8f:b1:21:05:24:02:
d7:7f:7a:b4:3d:70:60:aa:3d:a2:55:f8:74:7e:76:
a0:73:97:42:e2:62:fa:17:44:f7:4b:de:f6:8f:94:
d1:d3:17:a2:fd:b1:e8:98:5d:bb:da:b7:f4:28:72:
74:1c:88:86:b3:c0:3a:4d:68:b2:10:1b:38:f6:cf:
c0:f9:a2:4f:61:2d:22:28:dd:b8:52:28:e2:51:39:
33:25:24:cd:5a:03:94:e1:27:7f:10:43:9a:96:e4:
a5:d7:6d:60:ae:8c:d0:c2:1e:89:46:3e:ac:63:77:
fe:f8:42:f9:32:ed:3d:40:45:02:02:77:61:d9:4d:
82:1f:57:e3:61:c8:2c:73:0c:5e:f7:bd:52:fb:79:
bf:3e:97:bf:f8:11:df:62:5a:29:2b:a2:c6:4f:3c:
e8:49:76:2f:e9:c0:8a:83:e6:22:b6:22:36:16:fe:
be:a8:51:4b:35:e3:f5:0e:55:06:25:9a:ed:f3:0b:
47:c2:82:c4:be:9b:8d:18:8c:9e:aa:a4:bb:15:ca:
1d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:96:DD:53:03:23:0B:F7:62:BD:F3:FE:54:EF:71:19:B1:15:63:1B
X509v3 Authority Key Identifier:
keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/JJbdUwMjC_divfP-VO9xGbEVYxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.38.0/24
Signature Algorithm: sha256WithRSAEncryption
87:3c:4d:50:77:7f:63:d5:71:15:1e:4f:88:f9:a3:4c:b3:36:
4f:7d:94:8d:a8:9b:bf:fe:65:2d:cb:88:f4:a5:e6:67:00:03:
c9:3b:e4:6c:bf:23:53:45:2a:19:79:d3:d0:df:73:6c:d6:12:
6e:52:29:ee:d3:f4:a0:ae:ec:c0:e8:83:a9:d2:8b:1c:48:21:
88:d5:e4:9a:bb:be:68:ef:90:4b:15:9b:f7:22:dd:bb:68:3a:
90:3a:55:92:dd:cc:a7:75:d2:6d:91:e9:15:e0:00:19:62:b8:
c6:3a:47:e7:34:8e:01:0f:fe:44:4a:f6:01:e9:fa:1a:a2:99:
18:bf:68:86:a6:fa:52:20:f1:21:27:ad:95:a1:79:f0:41:20:
cc:03:2a:88:cf:35:07:6c:31:8d:61:fb:c4:e0:15:8b:83:ad:
38:b8:6c:a5:58:8f:50:5f:a5:38:78:1c:f5:c9:72:05:6b:13:
1d:85:66:17:fc:25:26:1d:08:88:5f:2a:50:e6:5e:d2:f4:8e:
24:67:6e:31:2a:78:3e:0f:88:34:c7:33:ad:11:d7:c0:45:9c:
27:e4:21:4b:8d:05:0c:ef:9e:c6:c1:9a:11:b7:dd:88:77:c2:
1b:64:b6:93:6d:89:ac:ae:08:07:e1:e6:94:d9:df:00:d2:ef:
04:6d:95:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:11 2025 by rpki-client