Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/JExWvTbvJhMbCnDPimwa126Yq2Q.roa
File: JExWvTbvJhMbCnDPimwa126Yq2Q.roa (raw, json)
Hash identifier: k++xDIk0vClE+8vv0xtnITmVXgFcFBdwaq3RXJLg1C0=
Subject key identifier: 24:4C:56:BD:36:EF:26:13:1B:0A:70:CF:8A:6C:1A:D7:6E:98:AB:64
Certificate issuer: /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Certificate serial: 019092D1635C656328C7AFB156BD6BFB074B
Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/JExWvTbvJhMbCnDPimwa126Yq2Q.roa
Signing time: Mon 08 Jul 2024 14:48:34 +0000
ROA not before: Mon 08 Jul 2024 14:48:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215687
IP address blocks: 193.56.200.0/23 maxlen: 24
193.56.226.0/23 maxlen: 24
2a13:4300::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 18 Jul 2024 16:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:92:d1:63:5c:65:63:28:c7:af:b1:56:bd:6b:fb:07:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Validity
Not Before: Jul 8 14:48:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=244c56bd36ef26131b0a70cf8a6c1ad76e98ab64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e4:45:ff:21:08:82:24:1b:99:e6:46:3f:76:
b6:63:bc:08:75:ae:3b:18:d1:1a:c7:f6:61:f6:d6:
78:4c:c7:f2:c6:92:3b:fe:c1:07:68:05:30:8f:9f:
dc:b6:b3:b1:01:67:b6:f5:90:36:b2:08:df:45:3a:
97:72:54:be:26:65:09:35:9a:aa:dd:15:3e:0e:06:
67:63:c7:5d:de:fd:45:b3:ad:d2:36:0c:34:05:ad:
32:32:c9:90:90:bd:ca:bb:89:8d:9f:9e:d8:df:f7:
e4:de:7e:11:ee:0d:07:62:62:e9:82:86:f0:13:6f:
3f:4b:17:e9:91:3d:9d:bb:d2:98:a0:11:61:05:b0:
ab:30:e3:45:d1:aa:c6:9a:11:72:54:02:c7:b5:bc:
9e:3c:2f:c2:08:f1:e7:4c:c2:4b:e4:4b:7b:99:4f:
0e:02:0b:68:51:75:32:51:9d:11:8a:9a:13:3c:be:
10:25:b0:9f:56:74:5f:57:d6:e9:27:04:82:6b:da:
18:c8:1d:d4:b3:06:7f:85:78:36:b7:62:8c:26:07:
17:07:8a:db:c2:b6:22:4f:03:b3:23:30:a5:02:c0:
d6:56:67:21:90:63:5c:55:ee:e9:03:fd:b1:30:0c:
a9:c6:19:50:96:c6:e2:0d:f9:77:23:87:19:63:a5:
26:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4C:56:BD:36:EF:26:13:1B:0A:70:CF:8A:6C:1A:D7:6E:98:AB:64
X509v3 Authority Key Identifier:
keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/JExWvTbvJhMbCnDPimwa126Yq2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.200.0/23
193.56.226.0/23
IPv6:
2a13:4300::/29
Signature Algorithm: sha256WithRSAEncryption
6b:9c:fc:ca:b8:17:3b:1d:19:f7:19:a3:c6:e7:d5:f1:43:a8:
f0:a7:0f:d1:b6:f1:a6:fe:2e:02:89:d9:76:7d:2d:5a:65:05:
44:14:0a:c4:36:bf:8e:27:dc:48:e3:3b:a7:af:b1:bf:a8:fa:
d9:ee:ea:f7:36:3c:ec:11:a9:b3:2a:81:82:77:6c:09:16:7d:
e0:4a:2c:fa:29:15:03:a1:44:f4:41:c7:e9:d8:81:85:e9:59:
a9:b1:bd:a0:00:20:79:64:52:51:be:89:f5:62:5b:5f:e8:db:
ab:1c:73:3a:bf:b5:14:16:00:92:0a:69:c7:37:5b:dc:01:04:
90:cc:65:b5:69:5c:26:05:a6:6c:6c:8d:ac:fe:ea:a2:b1:74:
98:2b:d6:b6:7d:37:89:a8:15:3c:b2:ee:aa:be:21:d1:ee:b7:
3e:03:67:e4:68:7e:1e:35:d6:a4:0d:87:15:8d:f5:db:fd:0a:
ba:e7:02:78:50:8e:4e:03:87:f8:12:7c:e4:5f:94:48:71:2b:
3b:bf:dd:35:92:18:1d:56:37:e3:7e:b3:6b:34:9e:00:2f:c7:
8f:1e:b1:25:5e:13:49:4e:e6:3d:0f:05:6b:6e:bb:ea:82:e0:
92:f5:d4:2e:3d:fa:83:ed:dc:1a:6a:d5:ef:50:15:f3:4a:26:
a2:81:3b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 19:05:00 2024 by rpki-client on console-ams.rpki-client.org