Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/jb-ctPT500JMIxqOQxkmxOeC1NE.roa
File: jb-ctPT500JMIxqOQxkmxOeC1NE.roa (raw, json)
Hash identifier: 63qMDpvzs6HzMEguH/rME11VJRhtCQNznmc/ugyhAOc=
Subject key identifier: 8D:BF:9C:B4:F4:F9:D3:42:4C:23:1A:8E:43:19:26:C4:E7:82:D4:D1
Certificate issuer: /CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Certificate serial: 01906CE157965E1A0F60F38823AE0E15349F
Authority key identifier: BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/jb-ctPT500JMIxqOQxkmxOeC1NE.roa
Signing time: Mon 01 Jul 2024 06:00:25 +0000
ROA not before: Mon 01 Jul 2024 06:00:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10753
IP address blocks: 2.58.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Dec 2024 12:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6c:e1:57:96:5e:1a:0f:60:f3:88:23:ae:0e:15:34:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Validity
Not Before: Jul 1 06:00:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8dbf9cb4f4f9d3424c231a8e431926c4e782d4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:7e:ba:e6:2b:39:c9:11:66:3a:3b:15:97:
25:19:7c:5b:ad:48:d6:9c:68:78:8f:fd:06:41:6e:
fe:b7:a5:15:b0:75:26:ac:a6:d0:72:f2:76:db:73:
2b:11:f1:76:bf:ab:d6:d3:3f:b8:cd:21:fc:6f:ca:
95:39:12:51:7e:de:46:63:c3:25:96:50:b0:00:68:
8f:c6:89:af:9b:40:bb:09:0d:4a:6f:de:12:2d:7b:
e8:2d:d0:22:15:64:84:bc:31:ac:06:88:71:45:c7:
1f:91:d6:8d:5d:1e:ab:bd:ac:be:f6:dd:77:2d:af:
ae:9f:5f:1a:92:2b:75:42:cd:c3:37:25:b2:87:d4:
67:2b:23:c6:82:1f:10:85:89:54:92:b5:2f:72:8e:
ac:48:ab:14:fc:4f:8c:1b:da:f9:36:ce:03:66:8d:
c5:94:0c:70:29:1d:c9:e7:8d:68:e2:6e:5e:4d:7f:
53:e6:1c:45:d6:ad:e8:c1:da:d8:71:5b:19:72:7e:
49:14:8c:c8:8c:dc:02:66:37:ca:76:c9:89:25:f7:
13:ed:36:77:40:f9:4f:c1:47:cc:ce:6a:3a:22:ac:
a5:5a:18:8c:e0:0d:1c:f2:51:e3:c1:71:ae:e8:df:
80:fb:e9:05:6c:9a:6f:63:ec:a6:b4:74:af:a6:c6:
ec:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BF:9C:B4:F4:F9:D3:42:4C:23:1A:8E:43:19:26:C4:E7:82:D4:D1
X509v3 Authority Key Identifier:
keyid:BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/jb-ctPT500JMIxqOQxkmxOeC1NE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.115.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:f0:e0:67:dc:b4:b8:9b:e9:ce:07:1b:eb:f6:8b:ea:63:cb:
b1:e9:71:96:2f:40:a9:a3:de:e7:a8:74:ad:70:21:f5:d4:fc:
98:0b:42:34:82:7f:80:6a:88:75:bc:8f:84:55:07:8d:67:65:
2b:02:b8:05:ac:64:40:02:65:6a:9b:35:e6:ba:03:7b:c8:1e:
75:d9:f8:10:e9:44:d5:5d:17:0c:2a:3c:b2:13:7f:ec:d3:68:
36:3f:95:50:61:11:ad:ed:bc:42:46:4d:e5:57:41:24:57:0b:
87:f5:1c:bc:d7:21:ed:d3:7a:53:0f:ed:0f:2d:10:0d:53:de:
52:6f:f7:10:96:1d:9c:9b:ef:6d:59:89:55:c5:bc:f0:a3:ff:
51:32:52:3d:82:65:b8:be:98:d6:29:2d:ad:89:03:cd:90:37:
6c:2b:9d:fd:5d:a1:91:ac:c8:ed:9d:6b:fc:cf:ea:d1:6c:96:
14:68:3d:59:fa:05:bc:f4:27:45:54:a9:5f:64:64:8e:56:db:
db:32:3a:a5:83:9c:f3:88:66:ca:bf:29:00:4e:1d:62:ac:7b:
c0:1f:e2:43:99:19:16:d0:2c:14:b5:1a:be:c2:5a:c2:76:1d:
21:cb:b9:37:d6:c3:de:00:9f:8b:02:59:99:df:f1:86:e4:25:
f1:5e:19:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:58 2025 by rpki-client