Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/Jjw8QPZfgKRC7UlKYe_8gpQ1mCw.roa
File: Jjw8QPZfgKRC7UlKYe_8gpQ1mCw.roa (raw, json)
Hash identifier: 1EKG+R/5oCZwzCTboJxFeJHrPo9TMX91Pti/hY025v4=
Subject key identifier: 26:3C:3C:40:F6:5F:80:A4:42:ED:49:4A:61:EF:FC:82:94:35:98:2C
Certificate issuer: /CN=c0659e1dd14079b521d92b1f52cbc4fd323e18d3
Certificate serial: 019261AA13161BBE1DE0985914A8654A6A11
Authority key identifier: C0:65:9E:1D:D1:40:79:B5:21:D9:2B:1F:52:CB:C4:FD:32:3E:18:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/Jjw8QPZfgKRC7UlKYe_8gpQ1mCw.roa
Signing time: Sun 06 Oct 2024 11:49:48 +0000
ROA not before: Sun 06 Oct 2024 11:49:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47283
IP address blocks: 194.12.64.0/19 maxlen: 19
194.12.64.0/20 maxlen: 20
Validation: Failed, certificate revoked on Sun 06 Oct 2024 13:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:61:aa:13:16:1b:be:1d:e0:98:59:14:a8:65:4a:6a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0659e1dd14079b521d92b1f52cbc4fd323e18d3
Validity
Not Before: Oct 6 11:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=263c3c40f65f80a442ed494a61effc829435982c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f3:eb:1d:41:7e:0b:73:43:1b:b7:de:11:89:
b7:62:ee:0b:89:8d:42:65:e5:ce:68:9a:80:be:b8:
95:18:10:a9:59:ce:04:bc:31:52:4f:45:db:b6:48:
fc:21:92:0f:37:45:aa:d5:a2:f1:25:ca:28:38:e5:
5c:56:3b:92:c7:f9:71:b4:eb:b6:42:02:6e:00:9b:
30:a2:c7:2c:b0:c2:4e:16:2d:55:ea:b8:a3:6a:98:
9a:10:ef:e6:a7:c5:ce:13:92:ff:e7:f8:71:87:61:
dd:76:87:21:7b:6f:5b:b2:36:65:f1:dc:0d:10:ed:
fd:89:15:14:a2:da:77:ed:25:22:f1:28:d6:78:bf:
32:37:ae:9a:5b:8b:96:15:6d:db:a4:f2:a3:7a:7f:
e2:2e:84:16:1b:3c:a6:7a:08:1f:88:45:07:2e:a7:
cc:9b:86:d4:4d:f5:08:d2:7f:3b:fd:46:c7:02:d5:
7f:a7:8f:23:50:9f:e1:12:fa:dc:d1:bb:8e:b1:56:
b4:51:5e:40:98:e1:b7:44:be:15:8e:b3:68:09:f1:
a2:e1:78:49:5e:99:97:26:ea:cd:2d:ae:af:f0:f3:
ad:d0:50:75:4a:55:67:32:7f:de:04:fd:33:87:5a:
e8:f1:88:ee:60:0b:9a:f8:a1:6a:51:50:c7:1e:73:
66:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3C:3C:40:F6:5F:80:A4:42:ED:49:4A:61:EF:FC:82:94:35:98:2C
X509v3 Authority Key Identifier:
keyid:C0:65:9E:1D:D1:40:79:B5:21:D9:2B:1F:52:CB:C4:FD:32:3E:18:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/Jjw8QPZfgKRC7UlKYe_8gpQ1mCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.12.64.0/19
Signature Algorithm: sha256WithRSAEncryption
8e:e4:00:13:5e:3a:b9:24:0b:3e:79:7a:c4:70:14:ba:e2:bf:
39:a5:dc:b1:ea:23:e1:92:0a:39:72:31:39:df:a7:0b:39:e1:
f8:19:3f:dc:ee:f0:f4:2b:8a:46:3f:41:86:bc:72:03:13:0a:
bd:55:0b:e5:d9:8a:12:17:cb:6d:47:fb:d3:7f:43:d8:7c:7a:
96:07:de:e1:39:99:29:58:25:37:3b:45:50:b8:7c:b2:c9:5b:
f8:a0:7e:03:a0:80:c3:4e:fe:4d:55:87:c5:98:79:0e:a2:e1:
35:36:fd:7b:9c:4b:64:33:47:15:73:32:92:fb:a9:93:ca:f0:
bd:34:60:37:b0:2a:6a:f2:8c:8b:77:c9:c2:da:ca:02:e2:1d:
50:a6:77:a3:cb:f8:1b:bc:32:b6:5b:0e:0c:ad:50:3b:96:75:
a5:04:cf:f2:25:74:1b:3b:95:b1:95:17:a3:3c:a4:9f:f3:82:
6b:ed:8a:e9:d1:2e:20:7a:a4:5e:85:7b:64:57:db:63:93:dd:
d9:03:d3:34:62:1f:2e:3b:2a:bb:66:db:e6:fc:3e:b8:1d:b9:
ea:83:31:2a:e8:f8:58:b4:a5:ff:d5:1d:50:f6:2b:b6:64:c8:
84:f9:52:6a:c6:07:59:46:9f:f4:8e:cd:37:d9:ee:25:f8:6f:
60:32:89:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:50 2025 by rpki-client