Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jmxHUZ45tfRMt59Doo8WRzlxMOk.roa
File: jmxHUZ45tfRMt59Doo8WRzlxMOk.roa (raw, json)
Hash identifier: DV4kQeS7/eaIE8bW99doiimQKNBczNbmPfHx6my6GkQ=
Subject key identifier: 8E:6C:47:51:9E:39:B5:F4:4C:B7:9F:43:A2:8F:16:47:39:71:30:E9
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018B8EA84B9CFA03D23FFCC4D3109D777A12
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jmxHUZ45tfRMt59Doo8WRzlxMOk.roa
Signing time: Thu 02 Nov 2023 06:11:15 +0000
ROA not before: Thu 02 Nov 2023 06:11:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216070
IP address blocks: 176.126.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8e:a8:4b:9c:fa:03:d2:3f:fc:c4:d3:10:9d:77:7a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 2 06:11:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e6c47519e39b5f44cb79f43a28f1647397130e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e9:2e:ba:46:78:8b:83:2b:6d:18:a3:6f:2c:
e7:97:e9:bb:a3:50:61:6d:d2:01:6b:b8:6c:3d:07:
03:de:79:9c:2b:36:2b:c4:ce:f7:ed:87:fe:e3:cb:
70:05:57:44:a9:cf:8f:2a:93:fd:e0:74:ef:ec:f2:
15:38:93:8f:c2:f5:04:d3:08:6b:b7:94:a3:84:99:
e7:91:d6:53:cf:6b:31:25:2d:72:ed:5c:36:b1:74:
51:52:9d:38:6b:40:a6:ca:ff:12:61:75:a8:25:94:
e9:88:24:7b:eb:07:e5:4b:df:3b:c0:f5:e0:46:77:
81:3e:a0:b5:49:90:47:d7:d4:31:9d:7c:e1:98:a7:
ad:a8:87:a4:a0:00:ea:f5:98:e8:e4:b5:c8:9b:3f:
c0:b3:75:31:fd:12:9f:01:ef:bb:fb:22:59:8a:1d:
66:f7:05:3d:c4:e8:9f:77:56:92:eb:d9:67:c3:16:
e0:b1:cf:05:7a:b1:25:b6:5a:77:7a:7c:b3:e5:2e:
9c:d3:60:08:e0:79:c6:3a:d3:43:41:55:31:78:77:
8d:38:1a:0b:e5:f8:75:c6:77:14:c1:03:98:42:00:
e8:e7:f1:ff:09:c7:e4:87:2f:3e:8c:b9:0d:ed:06:
86:d0:87:d7:99:03:7f:77:c4:c5:b4:ae:f2:18:47:
96:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6C:47:51:9E:39:B5:F4:4C:B7:9F:43:A2:8F:16:47:39:71:30:E9
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jmxHUZ45tfRMt59Doo8WRzlxMOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.174.0/24
Signature Algorithm: sha256WithRSAEncryption
62:eb:51:b2:d9:96:16:9e:eb:14:3e:69:7f:f7:f2:64:03:68:
62:e5:c1:a9:d3:80:da:10:de:76:d3:c6:6e:a2:f6:09:8e:8b:
a9:b0:07:3b:82:f5:bb:c1:6e:cc:84:0c:c0:47:8a:74:93:38:
c1:b7:43:19:eb:6b:3e:a5:8f:d2:62:92:70:51:20:09:2e:19:
4a:04:53:92:5a:0d:3d:85:ff:82:a9:b9:ee:32:5e:33:2c:af:
7c:e5:2a:a9:5b:66:b4:fe:45:0b:5d:bc:ad:ab:76:bc:01:d4:
6f:68:84:b9:0b:72:34:aa:a7:e9:bf:7b:c6:10:1c:58:dd:1f:
df:ec:a7:03:0e:62:9c:49:3d:3e:3d:c6:b2:fc:83:86:4a:d4:
64:ea:98:20:9e:53:55:10:61:02:00:77:2e:28:a8:bf:73:9e:
c3:67:23:09:b7:c1:d6:dd:88:fe:fd:e8:c4:72:b9:64:fe:d4:
f3:a6:2e:40:a1:e7:8f:bd:c9:92:e0:2b:64:6a:74:0e:53:d9:
cc:87:02:85:11:23:90:c2:55:f5:8c:ab:38:f0:94:3b:3e:01:
72:35:db:cf:76:fe:2e:9e:4a:bd:fb:e7:64:e5:2a:cc:ae:6b:
de:1c:7e:9c:31:25:d2:d9:1d:37:3f:fa:0b:a8:b2:bf:57:c2:
60:66:51:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org