Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f568cf-d3ac-4e99-aeac-010c781ecd77/1/jglbZA8H8nE1nOijFXnMiStXgnM.roa
File: jglbZA8H8nE1nOijFXnMiStXgnM.roa (raw, json)
Hash identifier: BBs95X3g70TBvAeXaHySJMDKY+36qQISTMUozDT7Vbw=
Subject key identifier: 8E:09:5B:64:0F:07:F2:71:35:9C:E8:A3:15:79:CC:89:2B:57:82:73
Certificate issuer: /CN=39ed4b063e3773b822de16e9b7323eb195cd7062
Certificate serial: 01867EA74668B66B54BBC3824A27B9C47664
Authority key identifier: 39:ED:4B:06:3E:37:73:B8:22:DE:16:E9:B7:32:3E:B1:95:CD:70:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe1LBj43c7gi3hbptzI-sZXNcGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f568cf-d3ac-4e99-aeac-010c781ecd77/1/jglbZA8H8nE1nOijFXnMiStXgnM.roa
Signing time: Thu 23 Feb 2023 14:22:17 +0000
ROA not before: Thu 23 Feb 2023 14:22:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61977
IP address blocks: 185.228.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 May 2023 23:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7e:a7:46:68:b6:6b:54:bb:c3:82:4a:27:b9:c4:76:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ed4b063e3773b822de16e9b7323eb195cd7062
Validity
Not Before: Feb 23 14:22:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e095b640f07f271359ce8a31579cc892b578273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1e:74:7f:28:12:4b:e3:0d:b5:cc:34:99:54:
91:d4:87:06:ad:fd:a0:e9:da:3f:06:be:04:8a:08:
8e:f2:d3:bd:87:e2:be:37:84:b5:aa:4a:7a:7a:94:
ce:ab:e2:d4:58:8a:97:03:03:16:2e:46:8c:25:11:
c3:63:b2:06:18:23:79:32:84:f5:7b:2c:bb:ca:b4:
e5:40:1a:14:48:c6:ee:f1:04:52:59:56:60:69:49:
b6:5f:1f:1f:9b:c3:c5:36:f2:39:78:08:97:36:d6:
53:be:23:9b:fc:9f:06:06:5e:8d:17:bf:d4:df:73:
af:05:37:64:f5:f4:81:cc:3e:cc:83:cf:1c:c2:04:
9b:8f:ad:4d:76:a1:cd:e2:d0:e8:c9:2b:49:77:2d:
0c:49:5a:bb:60:73:2b:82:cf:ce:aa:ff:1a:b1:b4:
f3:bb:80:6a:b1:02:2f:c5:af:b4:6c:b6:78:57:a9:
82:7d:cf:88:6b:f1:31:c6:02:5a:7c:a9:a8:b8:41:
2f:9b:5a:ad:c0:51:35:23:a3:f4:84:4a:19:7d:2e:
c3:da:ae:33:21:f9:e7:c3:4f:34:07:d9:30:66:fa:
7f:24:6c:b3:5f:fa:b5:c4:89:c4:54:c2:21:c3:4f:
b0:8e:ed:9a:56:88:ba:e1:03:87:9e:79:86:d7:50:
93:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:09:5B:64:0F:07:F2:71:35:9C:E8:A3:15:79:CC:89:2B:57:82:73
X509v3 Authority Key Identifier:
keyid:39:ED:4B:06:3E:37:73:B8:22:DE:16:E9:B7:32:3E:B1:95:CD:70:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe1LBj43c7gi3hbptzI-sZXNcGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f568cf-d3ac-4e99-aeac-010c781ecd77/1/jglbZA8H8nE1nOijFXnMiStXgnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f568cf-d3ac-4e99-aeac-010c781ecd77/1/Oe1LBj43c7gi3hbptzI-sZXNcGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.59.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:dd:2d:77:6b:d8:2f:54:68:d5:45:3c:6f:be:c8:0f:7d:ba:
b2:a6:b8:1f:70:77:b2:c7:26:7e:0b:4f:d4:dd:87:dc:b1:21:
6c:89:a9:ab:98:30:72:3f:78:ba:c9:18:73:35:76:76:24:1c:
d6:d3:4e:5f:cf:e2:61:0e:2c:05:9e:8c:07:81:38:6f:a0:1d:
70:68:80:e5:7b:17:64:53:10:fc:9d:5b:65:07:e8:6c:e9:db:
84:3e:1e:0a:7a:a4:ed:68:7f:71:0d:9a:bb:43:09:6c:34:15:
37:cd:f9:fe:6a:66:ff:f3:43:d0:dd:af:92:60:b2:7b:cf:de:
fc:c4:50:43:a2:dd:00:73:d4:5c:e6:15:be:f3:96:2b:51:df:
e2:33:a6:a6:39:09:21:cf:d2:a1:5f:4f:bd:3c:d7:92:1f:98:
2b:0b:25:83:47:f4:74:70:07:06:31:b9:96:e3:83:01:5f:ee:
d9:28:13:b6:c8:3e:a7:b9:f8:e8:9f:be:49:59:65:36:20:36:
07:b7:f2:12:64:9d:66:e6:dc:27:ca:8e:6d:24:1d:d5:1a:27:
64:60:2b:34:23:2a:01:5f:51:65:40:88:da:58:4b:90:f4:c3:
3e:ec:f8:24:86:af:5d:fa:99:92:eb:12:87:00:ec:30:be:82:
58:6a:af:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:40 2024 by rpki-client on console-ams.rpki-client.org