Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/JntcFxOfrhFov2t6bzDPXDc2mPs.roa
File: JntcFxOfrhFov2t6bzDPXDc2mPs.roa (raw, json)
Hash identifier: eK3J6voDl+VMULkBKaW6yY2ajynwYq6d0k5h29BJbio=
Subject key identifier: 26:7B:5C:17:13:9F:AE:11:68:BF:6B:7A:6F:30:CF:5C:37:36:98:FB
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01856F14EB687ABB581480B3BD3E8E5E7B47
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/JntcFxOfrhFov2t6bzDPXDc2mPs.roa
Signing time: Sun 01 Jan 2023 20:45:19 +0000
ROA not before: Sun 01 Jan 2023 20:45:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61256
IP address blocks: 82.160.29.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:eb:68:7a:bb:58:14:80:b3:bd:3e:8e:5e:7b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 20:45:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=267b5c17139fae1168bf6b7a6f30cf5c373698fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:1c:fa:2a:9b:6b:e9:37:bf:07:ab:a3:75:
9d:a7:31:2a:8b:7f:49:e0:82:55:4f:fa:35:e1:a9:
7a:70:f7:f6:fe:62:fc:28:77:9e:fe:53:5e:e2:2f:
35:cf:47:15:2a:20:b3:40:ad:3d:a3:70:b6:ce:12:
1e:df:18:d0:e5:a7:cc:c4:c9:07:4c:9a:ef:8d:37:
29:b4:b6:23:f3:4c:97:62:42:85:13:cc:48:ab:13:
c8:d0:02:0d:58:bf:d4:f2:09:5d:54:ca:f5:c0:21:
78:63:6b:53:05:5b:27:ee:25:04:cc:39:95:d5:cf:
ec:1d:76:94:0d:e9:d4:c8:2d:ae:82:9b:6d:17:2d:
65:91:c5:96:b6:fb:7e:67:41:a4:11:6b:15:18:ef:
07:df:28:28:98:1d:b7:4c:df:56:b9:e3:44:e1:61:
fe:15:e4:95:66:77:7f:e4:d5:3c:75:91:4d:76:ad:
06:75:ba:c4:aa:5c:40:ac:bf:4e:e0:dd:74:ab:c9:
2f:aa:30:f5:71:b3:a2:56:02:a3:2f:aa:df:67:7b:
c7:9b:ae:18:e3:44:1b:b7:d3:c3:ba:e3:6f:77:37:
d8:44:59:eb:8c:81:4b:0a:37:1a:b3:50:87:5b:b3:
05:59:30:5b:13:39:d2:0a:81:ea:8a:23:fb:e1:47:
b0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7B:5C:17:13:9F:AE:11:68:BF:6B:7A:6F:30:CF:5C:37:36:98:FB
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/JntcFxOfrhFov2t6bzDPXDc2mPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.160.29.0/24
Signature Algorithm: sha256WithRSAEncryption
67:fc:1f:79:80:59:f5:61:bf:89:f3:f4:8b:04:7f:4c:23:7a:
88:d1:73:34:72:83:d4:f2:d0:6b:9b:cf:3d:62:e2:24:89:1f:
d3:ec:a9:05:63:d1:fa:0d:2e:e4:a5:dc:80:93:12:cf:ab:95:
4f:cc:50:ec:68:db:d6:e8:22:09:36:d1:ff:f3:03:70:86:f2:
7e:0e:a8:11:6d:74:14:ba:b9:5f:70:08:02:58:cd:b3:93:7f:
ba:97:c3:9e:c9:e8:ab:21:82:82:93:ab:39:f4:31:92:d9:3c:
3b:dd:58:64:62:f6:ba:d5:e2:c7:c8:cd:a2:1a:3b:de:21:64:
b4:8b:0f:4c:ed:82:c4:8a:b2:86:30:f8:e0:ff:cc:f5:3e:a0:
96:27:1a:df:2e:fc:b9:a6:42:6e:af:27:50:b7:95:f4:be:c0:
e8:e8:ea:df:a4:8e:8c:d6:87:f2:00:36:35:47:94:30:fd:ec:
1f:db:4c:24:bf:a2:44:22:d8:ee:76:a5:40:a3:3e:c1:e1:6d:
f6:62:71:0f:58:f0:ed:3b:fa:77:a9:77:0f:76:45:f2:b9:2a:
be:1b:7f:e1:82:e4:05:f3:ce:d6:c0:1e:c9:af:34:fc:0e:77:
0f:54:c9:75:fc:37:d0:8d:11:23:48:d8:66:cb:07:0d:c6:32:
ef:db:3a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:58 2024 by rpki-client on console-ams.rpki-client.org