Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/JkwaDcPX5A96usAOBjlSWSWXELc.roa
File: JkwaDcPX5A96usAOBjlSWSWXELc.roa (raw, json)
Hash identifier: Xrj276pGmYSlzNJnrZuI558ZUp0FAVzl01PQy5FLM94=
Subject key identifier: 26:4C:1A:0D:C3:D7:E4:0F:7A:BA:C0:0E:06:39:52:59:25:97:10:B7
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 018AFE320E3ABF44EABCA5CFBF69810C5A03
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/JkwaDcPX5A96usAOBjlSWSWXELc.roa
Signing time: Thu 05 Oct 2023 04:56:47 +0000
ROA not before: Thu 05 Oct 2023 04:56:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 188.191.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Oct 2023 07:56:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:32:0e:3a:bf:44:ea:bc:a5:cf:bf:69:81:0c:5a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Oct 5 04:56:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=264c1a0dc3d7e40f7abac00e06395259259710b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:be:ef:51:30:ee:ee:05:cd:8e:15:86:16:8d:
45:29:57:85:58:a7:1c:37:bf:7f:42:35:2b:88:30:
d8:b6:29:b1:3a:9d:0b:c5:b8:37:20:4d:99:4d:80:
5d:74:48:9c:34:ed:b6:b8:9d:63:53:ad:16:46:64:
f9:f4:b3:fc:58:1d:91:53:0a:cc:27:22:9b:aa:0c:
a4:b2:7b:a9:0b:92:f1:b7:16:09:2b:47:84:18:04:
71:f4:4e:8b:e7:5b:5f:5d:4b:7e:25:3c:d1:ca:c6:
cd:13:94:96:a2:4b:01:71:34:63:33:25:62:7a:74:
88:da:e5:a0:40:5f:40:1a:b0:4b:04:86:2d:1c:8d:
b3:38:49:e6:a9:bf:d9:fc:95:5f:a7:c4:f1:68:99:
58:bb:49:29:da:c2:65:22:ad:ed:86:b2:03:91:bb:
08:2e:f7:48:a3:a1:68:63:e1:0b:f2:78:33:04:98:
51:cf:8d:b5:09:2b:ba:2a:83:b0:13:92:24:7c:06:
70:db:f9:4d:fb:33:58:11:d1:45:f8:01:a3:67:a0:
6f:02:54:a8:13:cf:c3:c4:27:34:e0:0b:45:20:bd:
9e:c9:e5:cf:99:ce:53:17:e0:14:1d:c7:ad:02:78:
fb:39:cd:2c:f3:2e:e0:3f:0c:59:c3:87:18:3e:42:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4C:1A:0D:C3:D7:E4:0F:7A:BA:C0:0E:06:39:52:59:25:97:10:B7
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/JkwaDcPX5A96usAOBjlSWSWXELc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.97.0/24
Signature Algorithm: sha256WithRSAEncryption
47:cd:2d:e9:8f:5c:0f:2e:82:ae:c5:73:e4:81:18:c3:3b:72:
53:78:cc:a9:71:47:9b:e9:a6:07:a0:1c:ee:81:ea:89:44:63:
f1:7e:39:e0:b9:8d:29:69:7e:1a:15:0b:bf:b6:31:b7:87:2b:
12:a2:8c:3c:48:90:50:ca:a8:60:59:3f:ab:ad:a3:77:94:f9:
75:9b:03:77:e9:12:aa:8d:e7:78:38:05:26:c1:65:f6:a1:28:
1c:8b:5c:5f:66:61:12:ba:63:a7:05:30:9c:f7:88:9f:f1:4a:
a1:92:c6:0b:70:91:b5:fc:45:d9:51:12:dc:7c:62:2c:3b:6a:
d9:b3:0c:ca:8d:76:0b:ce:f9:84:c9:28:17:10:88:db:a1:fc:
49:92:6c:dd:1f:db:a3:ae:e9:a4:48:f6:d2:f1:e5:7a:6b:00:
4b:af:cc:e6:33:30:7b:b2:9d:7e:1d:16:17:4d:7d:02:00:b5:
a6:0d:0b:d0:cc:ed:97:78:3b:98:15:50:a1:a2:ad:ff:83:b7:
d8:41:43:d6:ca:53:8a:eb:cb:de:a4:fd:cf:a8:5f:0a:36:30:
3f:7e:5f:f1:e9:0e:67:84:5b:ce:73:36:d2:e6:c0:9d:35:d8:
04:82:46:be:3f:9b:ba:71:fc:65:e5:86:f0:4e:81:6c:41:26:
ed:34:33:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:06 2024 by rpki-client on console-fra.rpki-client.org