Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/jupJRtsaoa612vdM7aJaWVZOABc.roa
File: jupJRtsaoa612vdM7aJaWVZOABc.roa (raw, json)
Hash identifier: BH6Tojjz0I+hCIbjMNqLq0gFDdXPeVMWjOk06Zh2+tM=
Subject key identifier: 8E:EA:49:46:DB:1A:A1:AE:B5:DA:F7:4C:ED:A2:5A:59:56:4E:00:17
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018C672A2C63C255920D70425ED3AFE87CB3
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/jupJRtsaoa612vdM7aJaWVZOABc.roa
Signing time: Thu 14 Dec 2023 07:11:06 +0000
ROA not before: Thu 14 Dec 2023 07:11:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64458
IP address blocks: 212.80.8.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:2a:2c:63:c2:55:92:0d:70:42:5e:d3:af:e8:7c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Dec 14 07:11:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8eea4946db1aa1aeb5daf74ceda25a59564e0017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:03:cd:e3:c7:ff:7f:d7:2f:4f:a0:08:58:42:
3b:51:7c:70:e9:87:10:ac:4d:8d:53:f9:11:47:9e:
42:46:41:b0:b5:b4:be:30:7d:cc:94:0d:38:b3:1c:
1d:52:fd:7d:e0:d1:fb:ea:69:02:72:9b:d5:1c:38:
c7:0f:dc:ca:b4:6c:d7:5e:b2:30:b4:df:bf:7d:be:
19:76:99:e7:d5:93:b2:e3:54:59:8c:09:7f:1f:56:
91:6a:27:a0:1d:56:64:5e:7e:c5:5c:0b:73:65:77:
aa:c9:f3:1c:67:dc:28:1e:16:cd:f5:5d:c1:26:d3:
f5:10:05:fd:39:2a:c3:89:33:ea:02:40:8c:79:78:
71:70:af:39:49:51:08:28:eb:aa:a5:f7:65:27:b5:
90:be:20:42:21:44:25:f4:86:26:e5:52:a3:a3:ee:
85:26:71:c5:3c:20:ce:72:fe:85:9f:ea:41:99:ce:
be:70:a7:18:a2:a2:bc:fd:87:9b:a5:4b:e3:f0:42:
5e:80:08:6f:42:35:d8:cc:21:7c:94:e8:d5:ae:48:
35:9a:bb:06:ff:a7:08:f3:e7:08:15:0a:d1:a8:08:
61:c4:ed:8a:7f:e6:17:74:83:8b:8d:f8:5c:04:53:
e3:29:30:25:a4:b4:92:2e:49:82:08:b9:c5:f1:f0:
a5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EA:49:46:DB:1A:A1:AE:B5:DA:F7:4C:ED:A2:5A:59:56:4E:00:17
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/jupJRtsaoa612vdM7aJaWVZOABc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.8.0/22
Signature Algorithm: sha256WithRSAEncryption
34:33:e7:64:8e:69:52:fb:b2:8c:7a:0e:e8:0b:16:9e:05:c1:
de:5a:6e:89:df:f4:a4:c8:70:34:45:2b:96:5b:05:fd:02:69:
d6:b0:03:98:df:d9:16:4f:bd:16:39:ce:e7:45:44:90:d6:7d:
a2:76:32:88:ab:43:1d:bf:92:bf:6d:09:7b:b1:7c:52:62:2d:
62:66:28:89:e1:e8:83:54:96:fb:18:e1:8c:39:92:15:3f:90:
81:6e:64:52:92:cf:6d:3f:3b:f0:62:2e:fb:51:03:c7:e0:13:
30:a4:56:15:1a:7c:55:e0:f7:b9:e5:d8:15:6b:4f:6e:79:98:
41:f9:2f:e9:f7:54:ae:5a:7b:b2:cd:71:3d:df:7f:dc:f8:2e:
d7:29:9b:3f:77:6f:2f:99:80:13:bd:fd:83:4d:68:d1:a7:ad:
75:b8:45:52:fb:3b:86:2e:24:40:2b:9b:ad:e8:69:02:ec:86:
f3:d8:1e:3f:50:93:26:57:dc:12:ba:81:8d:77:12:82:e8:61:
2e:23:90:4f:e2:cd:d8:b6:6a:0d:30:dd:88:0b:4b:83:62:a0:
0d:31:8f:38:4d:c0:97:b9:3e:26:bd:42:ab:a7:d8:af:94:b5:
eb:f5:07:ec:a2:8b:b7:14:8e:23:c5:b8:c2:af:bd:16:b2:94:
86:b7:6a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:58 2024 by rpki-client on console-fra.rpki-client.org