Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/JFlbbPV-6JsjBGuHE1NcgMxbi1U.roa
File: JFlbbPV-6JsjBGuHE1NcgMxbi1U.roa (raw, json)
Hash identifier: BObm62EAAYn+uW7+XJa8+KMlaxYYk5bvesDb2K5tQTA=
Subject key identifier: 24:59:5B:6C:F5:7E:E8:9B:23:04:6B:87:13:53:5C:80:CC:5B:8B:55
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 018B50BA1C3B116A80D22AEE3A07753E21AC
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/JFlbbPV-6JsjBGuHE1NcgMxbi1U.roa
Signing time: Sat 21 Oct 2023 05:34:16 +0000
ROA not before: Sat 21 Oct 2023 05:34:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31122
IP address blocks: 45.88.184.0/23 maxlen: 24
45.153.200.0/22 maxlen: 24
45.93.150.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:50:ba:1c:3b:11:6a:80:d2:2a:ee:3a:07:75:3e:21:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Oct 21 05:34:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24595b6cf57ee89b23046b8713535c80cc5b8b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fb:b1:fc:7e:d1:19:2e:be:5c:72:2d:2c:8f:
ff:46:1c:cd:aa:e3:fc:60:ca:97:48:a9:8e:54:5f:
b6:a3:b7:c0:aa:78:2d:08:4c:e6:4a:08:1f:a4:80:
74:f3:47:a6:d0:e2:19:6e:b0:92:01:4e:4e:7e:bc:
c9:bf:eb:e2:46:08:0f:43:6d:b3:12:60:fa:a6:67:
a7:57:37:29:f3:5c:fa:5c:9f:64:8e:a1:08:95:1b:
0c:52:42:0f:54:ed:21:14:ca:da:80:ea:16:26:5e:
11:0a:30:ac:a6:f9:39:91:05:a6:8e:d6:14:ae:fb:
78:24:c5:c8:81:aa:9a:90:2a:bb:4d:05:e1:d1:85:
ea:a9:9a:0b:49:14:1b:17:a9:21:b1:ce:af:f7:4d:
88:d6:a2:11:70:32:c9:fc:7c:ee:6b:8a:1b:8b:3d:
81:66:ec:89:30:8e:d7:48:22:d5:8b:d9:26:bb:04:
be:c7:31:94:a7:34:8f:eb:40:7a:fc:91:a7:6b:13:
d7:7f:03:62:df:59:00:b8:34:74:a9:61:97:83:29:
5a:3d:ba:c4:41:b0:5b:37:74:7e:50:a4:39:2d:10:
db:66:5e:96:ac:51:fb:2e:8a:af:16:bb:03:de:ed:
4b:f3:f4:e9:7a:e8:f3:65:b3:66:35:44:14:79:76:
0e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:59:5B:6C:F5:7E:E8:9B:23:04:6B:87:13:53:5C:80:CC:5B:8B:55
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/JFlbbPV-6JsjBGuHE1NcgMxbi1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.184.0/23
45.93.150.0/23
45.153.200.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:c9:a3:6c:1c:95:bb:2e:1d:4f:be:c5:f9:6f:74:74:d2:90:
c3:a2:9d:66:e5:1e:74:c8:61:7a:77:1b:c7:c3:02:fc:fd:ff:
2c:d8:43:87:07:91:27:d8:2d:c6:f0:ca:71:e3:90:9e:d5:62:
4b:84:40:5b:2d:2c:fa:af:bd:22:c8:d0:b3:c0:e4:de:cf:b6:
34:0f:29:7e:3e:d4:d3:5c:07:c6:fd:63:8a:a9:1d:69:0b:47:
63:47:19:f1:d5:fc:81:5a:06:53:02:fc:42:d5:ce:27:38:bb:
2e:16:a3:7c:6f:94:d5:82:6e:74:39:a6:82:54:b5:96:28:06:
ab:fb:7f:6d:db:7f:c2:57:5c:70:ff:59:83:3a:70:72:b1:ea:
57:5f:c4:e1:36:bc:98:90:d9:00:68:2c:4b:7d:c4:0c:93:68:
e2:6c:29:e3:de:97:21:d1:0f:28:07:77:18:d7:90:0e:40:3c:
ea:5c:67:ce:2d:68:6c:93:ad:76:d0:0d:fb:46:23:86:a8:e6:
57:54:01:4b:d5:f9:6c:ee:0b:32:59:56:36:74:aa:86:97:92:
00:01:8d:9f:fa:12:31:92:3a:da:f8:4b:7f:10:1a:0b:97:4d:
fd:1a:98:03:49:09:56:1d:2c:1a:71:2b:a2:9a:ee:0d:eb:d9:
7a:bb:3c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:58 2024 by rpki-client on console-ams.rpki-client.org