Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/Jij3cRAWgGR77HUq38VnFH8JRNk.roa
File: Jij3cRAWgGR77HUq38VnFH8JRNk.roa (raw, json)
Hash identifier: XLrs62cSeovZlVKr1zvrryL0hSwc31IIROTJ9ywKAZ4=
Subject key identifier: 26:28:F7:71:10:16:80:64:7B:EC:75:2A:DF:C5:67:14:7F:09:44:D9
Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial: 01857182FC7CED662D2AE99F9BAA8BFC0132
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/Jij3cRAWgGR77HUq38VnFH8JRNk.roa
Signing time: Mon 02 Jan 2023 08:04:47 +0000
ROA not before: Mon 02 Jan 2023 08:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62421
IP address blocks: 193.33.4.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:82:fc:7c:ed:66:2d:2a:e9:9f:9b:aa:8b:fc:01:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Validity
Not Before: Jan 2 08:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2628f771101680647bec752adfc567147f0944d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2b:ab:0a:22:67:b5:18:95:56:0f:3e:92:a8:
cc:31:99:46:43:71:73:44:79:a3:0b:c8:11:aa:cc:
ec:28:5d:03:e3:53:1d:39:1e:2c:fa:5d:e1:11:00:
fb:bd:76:1c:64:5c:72:e8:ba:fd:1a:7c:4c:05:39:
74:fa:89:96:da:8c:79:e0:de:2f:ee:9d:a1:d6:9f:
36:51:db:c5:a2:d8:2e:cb:79:cb:1d:fa:12:85:2e:
3e:74:e5:e7:d6:3b:66:be:9b:2a:a1:ae:d6:f7:90:
25:ab:5d:fe:ce:d9:f4:37:5c:5c:a4:3a:5e:bd:2b:
c4:b7:e2:1c:5b:78:f3:bb:f0:d5:a6:27:c2:34:a8:
80:e5:c0:0e:6d:e1:b6:9a:e8:47:0c:e2:36:73:92:
9d:c7:e3:71:f5:95:89:f1:5c:b0:a7:8c:55:bc:67:
b9:07:88:38:4f:4e:de:a5:c8:18:cb:8f:83:98:f0:
f8:33:eb:0d:a1:85:00:48:17:9d:fb:a4:22:b8:4d:
b0:08:26:a6:86:2c:74:ba:2e:a0:26:86:a2:a5:27:
53:2a:08:bb:ee:dd:af:dc:0b:65:70:71:46:5c:88:
75:d1:14:14:1b:d1:a0:66:47:8a:66:c0:46:ca:31:
f8:df:48:b3:24:75:a1:bb:96:f1:84:32:ea:7d:6a:
e9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:28:F7:71:10:16:80:64:7B:EC:75:2A:DF:C5:67:14:7F:09:44:D9
X509v3 Authority Key Identifier:
keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/Jij3cRAWgGR77HUq38VnFH8JRNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.4.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:a2:6e:41:9e:0f:69:05:e8:39:a3:f8:d6:00:57:0c:f9:13:
31:b7:c0:fc:06:5f:22:19:fb:29:e7:d7:d1:29:ce:98:96:be:
c2:ca:9a:f7:f9:fd:9a:d2:67:3d:75:89:de:3e:06:9d:3b:da:
a3:f1:fd:62:20:7b:4f:ca:a5:11:c2:86:2e:d0:a2:85:7c:37:
29:65:09:a0:fe:7e:e5:86:50:73:9b:29:2b:fc:6e:b2:52:1d:
a8:a8:d5:1d:c0:63:8d:4b:01:57:92:df:3e:62:b5:14:ff:cb:
09:a7:b8:d3:d8:fb:45:36:b3:dc:be:83:d1:d5:57:98:3f:b2:
9e:53:ed:d0:00:fa:26:79:db:0f:c3:63:62:58:aa:96:69:5c:
a9:a0:8d:ee:e4:04:4c:27:76:57:f6:7f:fd:d9:fc:9d:70:93:
75:dd:06:bc:40:e2:69:0b:b9:cd:22:26:6c:62:29:9f:8b:8e:
81:0d:d2:12:ee:80:07:6d:69:62:69:93:ee:29:05:28:f5:a2:
98:ae:bc:fd:50:31:95:a7:78:3b:da:21:f2:64:13:a5:a8:66:
16:38:ce:31:08:8e:eb:83:d0:10:83:25:0d:af:cf:82:70:5e:
fd:3d:07:06:be:e3:c9:c7:60:c1:6b:08:25:53:67:b4:1d:4c:
3f:34:d9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:19 2024 by rpki-client on console-ams.rpki-client.org