Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/jWTwDJJlvAdZ6hbI0rm5YufQXBk.roa
File: jWTwDJJlvAdZ6hbI0rm5YufQXBk.roa (raw, json)
Hash identifier: Or+fLPpWSrAkIXbZ5PAWWo7dXbA58TKnj59h7YuohNs=
Subject key identifier: 8D:64:F0:0C:92:65:BC:07:59:EA:16:C8:D2:B9:B9:62:E7:D0:5C:19
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 018B9483EE45DF96B97F74BCD2C85BABCF56
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/jWTwDJJlvAdZ6hbI0rm5YufQXBk.roa
Signing time: Fri 03 Nov 2023 09:29:16 +0000
ROA not before: Fri 03 Nov 2023 09:29:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 146.255.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:83:ee:45:df:96:b9:7f:74:bc:d2:c8:5b:ab:cf:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Nov 3 09:29:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d64f00c9265bc0759ea16c8d2b9b962e7d05c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:50:35:49:08:6e:6b:3e:94:67:ae:2d:cd:
27:6e:e9:70:b2:d7:be:6e:1a:e3:b5:1b:9c:ed:ef:
bf:0a:c5:4b:96:72:38:fd:f9:85:3b:3d:72:e6:b8:
a9:79:1e:eb:01:97:0a:a5:a0:3e:46:d9:d6:3d:61:
d2:1a:f0:70:6f:7d:ae:21:ef:fa:04:d3:ba:9d:00:
93:35:d5:4f:0b:2f:b6:e1:7e:e8:5e:5d:80:6d:cc:
eb:1a:89:27:0a:d2:3e:61:17:ba:b6:3a:05:65:9e:
9f:a4:44:5e:5d:cd:f8:9e:4f:04:1e:e0:ca:33:e5:
0e:3e:2f:f2:eb:aa:7b:97:01:d3:04:84:6c:35:a9:
10:ac:e3:11:9a:35:1f:ac:be:4c:9f:cd:b1:50:0a:
eb:f2:1b:e6:21:f3:cc:1e:cd:cb:1a:21:a9:a0:e4:
fb:9e:72:0a:f4:66:a3:12:88:82:c5:dd:0d:41:8f:
8b:dc:1c:41:81:cb:54:87:55:d3:18:dd:88:e7:e4:
20:bf:5e:60:3e:77:57:f6:41:8e:d8:4d:31:5c:7c:
7d:d4:97:9b:6e:85:e5:a7:ec:fc:65:94:b4:d5:2c:
96:89:df:9e:8f:5a:46:28:c9:27:dc:65:0b:a4:fa:
7c:48:c0:f1:87:90:bb:37:e7:2e:90:3f:3d:60:84:
78:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:64:F0:0C:92:65:BC:07:59:EA:16:C8:D2:B9:B9:62:E7:D0:5C:19
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/jWTwDJJlvAdZ6hbI0rm5YufQXBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.189.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:9d:a0:ec:d3:4b:2f:2c:a0:f9:39:75:da:9d:18:0a:49:97:
1c:1b:c0:b9:74:7b:bc:7c:97:9f:42:bc:c3:32:48:e5:8a:b8:
94:d7:71:81:c4:cf:c6:62:0e:65:15:65:24:bf:c6:04:6c:13:
ec:ca:11:24:48:cf:06:c5:42:38:34:cd:f3:4b:75:a2:39:09:
b0:88:dd:52:87:24:ef:85:59:bd:4d:50:99:9c:1e:00:5b:cf:
46:67:1b:f7:32:35:8f:8b:65:1b:38:74:3a:f6:ef:59:5e:67:
8f:e5:bb:f2:a7:cb:ea:8a:07:7b:8e:54:5d:c6:0d:6b:01:df:
9b:94:6f:57:3e:2c:59:c9:d2:70:76:92:f8:07:99:b6:89:f6:
de:7a:51:51:b8:4c:2e:37:61:74:53:84:5d:bd:02:60:75:d0:
c5:45:4e:25:27:25:42:2c:44:91:a6:d5:2a:07:12:86:c4:a7:
20:ab:bb:a0:9b:48:38:ef:a9:7c:c1:3a:3c:cb:a1:91:eb:72:
59:54:0f:70:2e:8d:0f:ab:ca:25:24:1a:7e:9a:f1:bc:1e:c0:
19:a3:f7:01:73:f5:fd:2e:64:85:9f:ff:f7:ec:ec:b0:f9:e1:
00:d9:39:da:a9:03:3b:1a:09:8e:5b:7d:7c:f6:31:8e:ee:d7:
0f:16:81:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:04 2024 by rpki-client on console-ams.rpki-client.org