Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Jabt8ECxmvGH2SzGA8gAws6gkxk.roa
File: Jabt8ECxmvGH2SzGA8gAws6gkxk.roa (raw, json)
Hash identifier: ZagHswb04S2eSkCYKRrQw5mV/TBADR+ktIMboummvjM=
Subject key identifier: 25:A6:ED:F0:40:B1:9A:F1:87:D9:2C:C6:03:C8:00:C2:CE:A0:93:19
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4E187AA478F8A031AFAECB59D69BA
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Jabt8ECxmvGH2SzGA8gAws6gkxk.roa
Signing time: Sun 01 Jan 2023 19:35:23 +0000
ROA not before: Sun 01 Jan 2023 19:35:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 271968
IP address blocks: 181.41.148.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:e1:87:aa:47:8f:8a:03:1a:fa:ec:b5:9d:69:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25a6edf040b19af187d92cc603c800c2cea09319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:3b:3a:c7:91:8e:e1:95:de:00:81:08:a4:
77:f6:17:69:87:8a:47:b2:04:6b:6e:15:a2:2a:b4:
29:44:4c:28:d0:2d:f7:fc:24:42:01:89:06:aa:d8:
03:ab:c0:f9:80:91:66:2f:8b:3a:cb:1a:0c:bf:0d:
1a:a9:78:d1:7f:64:01:c5:9f:a4:97:04:02:79:cb:
1d:05:fb:57:df:91:ea:eb:3a:38:5f:72:ef:9c:95:
a4:ed:d7:03:94:df:a8:ce:8b:20:80:36:9d:22:4a:
46:f2:51:40:64:2c:a4:13:2b:3e:ec:c9:b8:a0:4e:
d0:d5:4d:17:f1:e5:ac:ab:e9:18:f9:13:3b:6a:02:
e7:a2:33:b7:e9:59:20:62:11:36:aa:3c:24:e2:38:
36:07:e9:69:90:ea:be:2f:f7:15:1b:4e:66:2f:af:
8d:a6:8d:99:0b:15:9d:3f:e9:8d:b2:36:43:e6:63:
4f:71:50:ef:7b:49:04:02:22:93:0c:a7:01:74:1a:
05:37:72:79:f3:be:30:1a:20:57:92:8a:ad:3c:5d:
91:4b:2d:a3:9e:05:32:cd:97:af:7f:43:a1:90:be:
85:17:60:8b:5b:17:8b:2d:93:46:eb:25:c4:e9:8a:
7e:6e:03:72:e6:f3:68:6a:15:8d:12:67:1f:6e:87:
c7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A6:ED:F0:40:B1:9A:F1:87:D9:2C:C6:03:C8:00:C2:CE:A0:93:19
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Jabt8ECxmvGH2SzGA8gAws6gkxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.148.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:ba:6a:a9:ef:15:db:cb:ed:eb:bd:da:69:2c:86:8f:19:6e:
40:00:ef:c2:ba:79:c3:7f:b0:3c:da:d4:94:75:4a:7f:e6:b2:
fe:fb:ae:ef:10:aa:27:83:1c:96:cb:fb:9d:fa:13:7e:7b:ec:
e2:3e:07:f8:cf:42:e9:7b:09:b7:53:c1:f1:5f:9f:fd:63:f5:
0c:ed:c5:4b:d4:9d:8b:d0:40:8f:92:a1:09:bf:11:36:7e:82:
7b:54:cb:af:78:22:1f:6e:14:d9:f8:15:a0:89:44:3d:0e:43:
c9:7c:2d:a9:be:db:cf:31:ce:2c:97:46:c1:f8:62:fc:50:91:
fc:1c:65:f3:da:b3:c6:fc:b3:10:02:f5:88:37:3d:1e:2d:39:
b6:1a:57:7d:c3:fa:d2:81:6a:2f:3a:5a:2f:dd:67:75:74:d2:
ab:ee:fa:d0:3e:bd:ad:00:a5:67:25:69:88:f8:68:01:9d:5b:
23:81:23:4d:0f:57:70:86:e4:df:4b:d9:a5:6a:a0:04:51:98:
59:7c:69:7f:4e:30:12:be:6e:c7:d0:3f:28:2f:a5:ed:50:a4:
8d:d5:8e:43:9a:39:0b:3e:5d:43:24:37:72:45:c1:e2:e2:41:
4c:4c:b2:de:c7:10:da:81:b2:6f:2c:eb:60:40:5b:be:a4:8f:
9c:5b:bb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 24 19:46:32 2023 by rpki-client on console-fra.rpki-client.org