Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/JyJV4HWt5vu1y1IZ4Tjs4AB4clc.roa
File: JyJV4HWt5vu1y1IZ4Tjs4AB4clc.roa (raw, json)
Hash identifier: 9zMRoPgSkKT71d0uJJIjh1O4CJ0Q9uylkcXD3PbyeU0=
Subject key identifier: 27:22:55:E0:75:AD:E6:FB:B5:CB:52:19:E1:38:EC:E0:00:78:72:57
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 0189DEB78CF2D10544B0FE418888E787A080
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/JyJV4HWt5vu1y1IZ4Tjs4AB4clc.roa
Signing time: Thu 10 Aug 2023 09:11:58 +0000
ROA not before: Thu 10 Aug 2023 09:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208864
IP address blocks: 188.72.68.0/23 maxlen: 23
128.0.68.0/23 maxlen: 23
46.243.188.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:b7:8c:f2:d1:05:44:b0:fe:41:88:88:e7:87:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Aug 10 09:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=272255e075ade6fbb5cb5219e138ece000787257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:19:9b:80:8c:b1:59:a8:94:d9:9d:52:f7:e5:
d8:e9:27:d2:7f:3f:9d:67:f1:1e:06:f5:9e:f1:bb:
df:d8:ec:22:f0:4e:a8:30:91:e6:00:9e:2a:46:8e:
ec:75:af:b9:3b:df:5b:d2:89:48:44:99:7c:8c:9e:
08:2e:cc:41:80:a6:11:32:95:15:ae:e0:b4:36:f8:
c8:20:f4:af:e9:e8:b8:9d:8e:ec:f0:50:8f:10:fe:
1e:42:f7:6c:ca:85:04:a6:35:b2:3e:bd:26:c2:2e:
78:91:a3:12:df:9d:f3:c4:21:de:dd:d1:e6:43:15:
a4:5d:72:36:d9:be:d9:0c:da:ba:7c:a1:31:50:64:
3b:d8:d4:c6:ae:ef:71:09:f6:20:56:23:8e:d7:42:
e4:7a:90:63:ca:8e:8b:20:cd:4e:ca:b5:1e:0e:70:
71:b7:d3:21:c8:6b:17:ed:3a:f6:49:5f:d0:88:52:
9c:8e:2d:c9:c6:a1:ad:9d:ae:88:ff:a2:70:ac:af:
4e:bc:32:b4:dd:a5:19:1d:83:0d:c8:9f:c6:f8:09:
82:88:e0:cb:84:0d:e0:fc:63:06:54:51:4a:a2:89:
83:68:69:91:d8:5b:15:54:55:58:7d:a0:31:f5:0c:
a2:a3:7e:64:b5:3c:eb:3c:a9:cd:8c:ed:93:a3:cd:
8c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:22:55:E0:75:AD:E6:FB:B5:CB:52:19:E1:38:EC:E0:00:78:72:57
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/JyJV4HWt5vu1y1IZ4Tjs4AB4clc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.188.0/22
128.0.68.0/23
188.72.68.0/23
Signature Algorithm: sha256WithRSAEncryption
43:64:65:36:8c:58:70:1c:0e:94:41:c2:d6:fa:9b:97:c2:6e:
44:f7:03:a3:86:f3:2e:cf:d2:a1:65:da:3d:58:2b:51:7d:56:
4b:7b:65:eb:9b:e2:47:44:9f:8a:c5:e8:8a:fc:1d:59:85:f9:
37:ca:3c:4e:6f:fa:10:b9:20:58:34:83:30:16:1a:1d:eb:9d:
d1:2d:86:00:4d:fb:d4:99:c3:13:a3:3b:54:59:56:66:cf:e1:
e0:bc:aa:eb:7f:25:70:cc:d3:d5:10:9b:af:61:63:35:a0:ad:
cc:10:67:c4:19:3c:fd:b4:13:b3:c2:5c:b0:bf:2c:ba:60:c5:
d6:2f:ea:6d:bf:db:2a:bb:ee:c9:3d:6b:0e:6d:9a:bd:34:1f:
dd:f6:96:6f:1a:34:86:93:0b:ea:fa:38:a5:4c:da:a6:7e:b1:
a6:0b:a3:30:74:8b:3a:26:15:41:07:8d:a9:cf:28:9b:15:7e:
2d:6a:08:cd:29:cd:ba:42:16:d9:8e:9e:d7:33:84:e3:55:c4:
66:a3:f6:1a:99:63:db:7f:5f:eb:8c:e4:20:ba:ac:1b:b1:2b:
d1:d7:89:9b:16:7f:0c:eb:18:2b:c8:d4:75:b4:dc:33:5d:78:
09:72:ff:09:01:25:c5:a6:96:9b:ff:5a:86:c1:86:08:5f:31:
df:bf:14:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:29 2024 by rpki-client on console-ams.rpki-client.org