Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/x010KAYuAyn3-crkSJb0_JJMoss.roa
File: x010KAYuAyn3-crkSJb0_JJMoss.roa (raw, json)
Hash identifier: r0qH480ICPKQEmHkKkM1sK3kn35WeqoQlW1M20dQoHc=
Subject key identifier: C7:4D:74:28:06:2E:03:29:F7:F9:CA:E4:48:96:F4:FC:92:4C:A2:CB
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A2A0795A89E959FB2F034DC9BF4A8
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/x010KAYuAyn3-crkSJb0_JJMoss.roa
Signing time: Sun 01 Jan 2023 03:05:00 +0000
ROA not before: Sun 01 Jan 2023 03:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50673
IP address blocks: 128.0.68.0/23 maxlen: 23
188.72.68.0/23 maxlen: 23
46.243.188.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:2a:07:95:a8:9e:95:9f:b2:f0:34:dc:9b:f4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c74d7428062e0329f7f9cae44896f4fc924ca2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:69:99:47:f7:5d:1d:b5:12:cc:dc:55:80:
52:f3:0f:de:c1:2a:17:69:c2:20:6f:ba:8a:da:85:
8c:65:5b:37:24:c5:c2:31:a6:6a:9a:48:ee:f4:b5:
ec:f2:f1:79:d8:e5:06:8f:83:46:e9:d1:07:cc:3a:
49:a6:61:6b:7d:ad:bd:e1:cc:51:79:07:a5:bb:da:
82:8c:7d:43:ca:44:29:57:52:25:e3:a2:d4:98:a6:
53:a6:01:29:70:29:13:b6:3b:00:66:98:b3:f8:a1:
b8:99:d2:3c:41:13:89:50:2f:a0:92:46:1b:46:25:
5e:e3:b9:a1:ec:3c:42:c5:3f:d9:9d:9f:39:79:9c:
0d:38:ad:27:b6:29:5b:99:bc:bd:08:56:e0:89:74:
e9:c9:52:3d:fa:51:32:8d:be:c1:5f:88:04:b5:0e:
8c:59:45:b1:a4:af:2d:83:6a:30:b0:0a:b0:25:c4:
ed:84:40:56:54:94:c0:98:4d:91:60:c6:98:3e:5c:
16:d6:9f:ee:13:0c:18:fd:9c:5c:a1:50:38:b6:40:
76:b6:d6:a6:3f:4b:1f:46:fd:9f:f5:4c:83:d2:e6:
8a:d8:00:0d:04:19:ef:bd:ab:7d:88:58:92:d6:70:
3e:a8:17:ee:2c:f0:9a:35:7b:ae:12:df:08:34:14:
d0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4D:74:28:06:2E:03:29:F7:F9:CA:E4:48:96:F4:FC:92:4C:A2:CB
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/x010KAYuAyn3-crkSJb0_JJMoss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.188.0/22
128.0.68.0/23
188.72.68.0/23
Signature Algorithm: sha256WithRSAEncryption
88:64:0a:6a:a3:5e:a8:50:0d:22:7d:5a:17:a1:9d:ab:4f:24:
64:22:43:cd:8f:5f:b5:d8:69:8b:97:98:b7:39:95:33:0b:15:
e3:6b:d9:b3:b1:2d:4b:59:18:23:63:2c:1e:83:49:d2:4d:ef:
26:1d:4d:0e:1c:fa:8f:4c:6f:d2:23:e2:85:ae:8b:2e:e4:f7:
a2:67:04:e8:50:56:56:c9:ed:9d:ae:45:92:da:68:a4:5c:3e:
32:ff:4b:9c:b2:b5:fe:3d:73:32:66:ac:3c:c9:b8:35:e5:1a:
49:d8:9b:c2:69:39:5e:7f:26:7a:48:88:9f:e4:27:f7:ba:d6:
de:63:31:6d:c0:c4:85:60:44:65:a2:ac:69:2f:1a:09:c4:f5:
57:75:67:6e:98:6d:f4:60:b6:90:0b:7c:4d:5f:6d:80:ea:6c:
2a:07:49:0d:de:2e:e4:4b:97:d5:d2:92:7b:30:ed:11:38:ec:
33:21:23:c7:8f:1b:6a:cc:8b:a5:10:c5:fb:e1:81:2c:a9:ce:
6b:09:ce:57:bd:b2:6e:35:e2:f9:9e:43:4f:69:07:7f:fc:bc:
91:f3:1b:f7:05:b9:7c:0a:81:42:66:34:0f:54:00:d8:f1:9e:
5b:98:c3:41:15:26:ef:14:16:23:de:62:83:9b:61:27:33:f7:
59:5a:25:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org