Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/jQimg4Pie1U6_LNBDmJNv9KzR9s.roa
File: jQimg4Pie1U6_LNBDmJNv9KzR9s.roa (raw, json)
Hash identifier: FjTwNCJu6Y2+LXieFX2FOy2SFB4OOMAJIREWNmaKEHg=
Subject key identifier: 8D:08:A6:83:83:E2:7B:55:3A:FC:B3:41:0E:62:4D:BF:D2:B3:47:DB
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A2B8AC781CAE51689016CBE6453E3
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/jQimg4Pie1U6_LNBDmJNv9KzR9s.roa
Signing time: Sun 01 Jan 2023 03:05:00 +0000
ROA not before: Sun 01 Jan 2023 03:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52006
IP address blocks: 141.101.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:2b:8a:c7:81:ca:e5:16:89:01:6c:be:64:53:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d08a68383e27b553afcb3410e624dbfd2b347db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9e:23:76:4a:db:ad:f2:db:5a:be:4b:17:39:
0b:16:06:a3:bd:d5:75:4f:2b:da:dc:cf:ab:b9:a2:
ce:38:05:1d:eb:df:d6:02:e9:40:d1:6c:af:79:20:
41:fd:01:20:e7:cb:f3:04:e9:75:19:c8:d6:f8:8e:
11:01:29:f2:0d:55:d8:48:a6:f7:84:df:00:4a:65:
02:10:ad:dd:c4:2b:f4:3e:58:50:f4:d2:92:73:a0:
56:92:43:64:73:d2:8c:a4:e7:6c:b5:35:98:28:61:
7a:74:aa:2d:0d:9e:de:9b:f9:f0:e2:0a:3a:9f:89:
a1:d3:7f:21:ca:d4:dc:b6:6b:f7:d3:bb:0f:ef:52:
0c:a1:76:3d:2d:a1:77:5c:99:c7:97:3b:04:c4:ab:
a9:b5:56:09:f9:12:99:af:86:16:3f:35:fc:c4:e5:
10:f5:78:66:0d:99:18:32:0c:b5:95:9e:5f:88:0a:
64:81:66:eb:42:1f:b1:c6:fe:61:48:45:25:6b:10:
e5:85:34:55:0a:96:1b:6b:87:50:82:45:c7:32:64:
00:0f:24:3b:37:ed:c5:81:f7:95:a4:05:3f:26:ca:
61:47:94:54:2e:dd:9c:f3:56:98:93:08:fd:90:6f:
44:18:d9:b8:42:1f:99:13:c7:6e:39:80:ad:70:54:
3c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:08:A6:83:83:E2:7B:55:3A:FC:B3:41:0E:62:4D:BF:D2:B3:47:DB
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/jQimg4Pie1U6_LNBDmJNv9KzR9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.192.0/24
Signature Algorithm: sha256WithRSAEncryption
56:64:e6:2c:e2:c2:22:a3:97:41:2a:15:ed:10:04:6b:03:35:
c1:b7:a8:82:2d:f5:10:a0:ce:cd:81:61:f9:fc:fe:4d:3f:f6:
bb:89:db:7b:3b:14:c8:4b:cd:ec:41:38:5c:75:86:08:cb:e5:
e1:7a:4f:6e:2e:f7:c8:30:af:0f:6b:8e:d9:b6:0c:c9:a4:2e:
e6:56:2e:5f:4e:c2:8e:49:3b:b0:9d:c3:72:c4:a4:25:88:26:
66:78:95:37:60:36:ea:86:68:f3:70:ff:dc:21:fa:02:a5:8b:
87:7c:36:7b:3d:af:33:cc:a1:fd:be:fa:e5:a3:bd:f9:a7:63:
ce:44:d0:f5:1a:83:a8:05:40:24:8c:53:48:b4:53:1e:01:f5:
3c:d9:f5:b9:da:48:24:53:08:d4:2e:91:6d:94:45:58:f4:18:
c4:17:da:c5:3c:27:dd:5e:e0:3c:be:2a:34:4e:92:cf:de:c7:
e2:f8:9f:ff:b5:b5:60:03:84:2a:f0:12:bf:d4:a4:ed:ce:53:
70:ac:2d:ba:6d:78:72:91:0a:de:70:a4:81:28:2f:bd:c9:ab:
9b:85:a2:ce:99:68:bd:b7:44:f8:82:8b:25:2c:40:ea:84:f6:
d8:45:b9:1a:4a:d0:03:81:59:ed:27:b0:1d:2f:51:e7:9c:b8:
b5:0e:2a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org