Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/JbyU1N-CAmX2wgKnF_H7Fg3x3qo.roa
File: JbyU1N-CAmX2wgKnF_H7Fg3x3qo.roa (raw, json)
Hash identifier: IBc6zbW8J4b/MRrNI0X7ZmkwOmlNH25C4QmZUFzQy9s=
Subject key identifier: 25:BC:94:D4:DF:82:02:65:F6:C2:02:A7:17:F1:FB:16:0D:F1:DE:AA
Certificate issuer: /CN=bc464ba9d26385f54df6254ac248926d370445b0
Certificate serial: 018571F9FAC1694E71B4EE32B6DA388990BF
Authority key identifier: BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/JbyU1N-CAmX2wgKnF_H7Fg3x3qo.roa
Signing time: Mon 02 Jan 2023 10:14:46 +0000
ROA not before: Mon 02 Jan 2023 10:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47132
IP address blocks: 185.236.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Dec 2023 16:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f9:fa:c1:69:4e:71:b4:ee:32:b6:da:38:89:90:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc464ba9d26385f54df6254ac248926d370445b0
Validity
Not Before: Jan 2 10:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25bc94d4df820265f6c202a717f1fb160df1deaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:65:65:86:06:07:00:15:8f:c8:9a:53:3a:61:
87:24:cf:5e:6a:ef:1c:e9:1c:0c:da:78:2c:7e:f1:
72:f1:19:09:94:61:93:09:6a:e9:2e:f2:15:e6:00:
56:ed:7f:32:9c:e7:6e:40:f5:a4:06:ca:1c:c3:8e:
c3:5d:50:3b:71:38:33:1a:7d:33:81:2f:6d:39:29:
a1:36:34:f4:96:9b:51:9d:4c:41:3e:4f:de:13:0c:
60:6c:8e:1f:45:6a:5f:61:8d:13:7a:aa:5a:61:9f:
fa:07:d2:b5:4e:4a:4e:e2:40:d9:2d:42:72:f6:3d:
50:08:c4:58:fc:14:f5:20:d4:24:07:f5:46:0a:05:
fe:74:ad:ab:d2:2d:7b:d1:a2:4f:36:2f:7d:3d:16:
91:31:cd:ec:6c:5d:df:d7:5f:55:54:25:d1:7d:18:
81:1e:a1:54:0e:55:1b:4f:88:c2:5d:b8:a8:03:7c:
47:99:cd:70:3e:f2:c1:a2:18:08:32:09:81:7d:80:
ad:de:72:0b:4c:90:1e:ff:63:7c:fb:ac:1e:72:8c:
85:76:b7:5e:ef:b9:c3:31:48:4f:3f:e5:87:c0:4d:
dc:7b:54:83:a7:a9:d7:ad:3c:bf:92:22:a5:9b:49:
8b:ad:85:43:da:7d:38:66:ca:16:bc:83:30:3a:de:
76:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BC:94:D4:DF:82:02:65:F6:C2:02:A7:17:F1:FB:16:0D:F1:DE:AA
X509v3 Authority Key Identifier:
keyid:BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/JbyU1N-CAmX2wgKnF_H7Fg3x3qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.167.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ea:52:e9:0b:d6:02:c8:4c:32:11:d5:b7:bc:17:9a:90:ce:
ba:10:79:7b:0f:31:6d:e0:95:24:4b:fa:05:e0:f1:f1:af:b3:
6b:7e:49:4b:20:3f:5c:02:56:fc:3c:34:fe:60:1d:51:52:8d:
55:80:c0:81:60:c3:9b:9d:fe:cf:a3:10:ec:33:9c:f6:4c:48:
28:ef:c8:be:ad:23:c4:fc:03:de:cd:b6:31:97:39:8d:aa:60:
0d:45:e1:0b:ae:9f:99:89:27:56:28:b1:98:1c:0c:12:62:10:
a6:3f:4d:3e:1f:24:2b:29:99:56:d5:1d:c3:47:ed:33:e0:1e:
e6:cf:db:cb:f4:74:b0:2e:e2:e6:65:d1:af:48:6e:61:49:0d:
c0:7a:bb:d3:43:13:dd:dc:49:d9:ce:3b:79:ee:12:29:1b:89:
19:1e:75:db:05:c8:21:ba:27:b6:b0:6d:12:41:73:eb:bf:d2:
e1:5d:3a:a5:31:77:d1:51:1f:74:2e:8a:5b:0b:14:06:09:ff:
2c:9f:a7:05:17:25:fb:17:0e:97:56:cd:c9:51:78:1d:42:7d:
76:02:2f:71:9f:df:62:ad:e3:a5:e9:27:1c:22:12:95:fe:a4:
29:d9:23:19:74:da:a0:b5:e8:c2:83:76:b1:16:93:ac:a9:a3:
89:a2:db:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:16 2024 by rpki-client on console-ams.rpki-client.org