Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/JPe580_zPyAq-rcfefy5Gu9fg1I.roa
File: JPe580_zPyAq-rcfefy5Gu9fg1I.roa (raw, json)
Hash identifier: zoFO8zInq886w8c1VlzUFYS/Hq0iW+2cL4N5qFM+jBY=
Subject key identifier: 24:F7:B9:F3:4F:F3:3F:20:2A:FA:B7:1F:79:FC:B9:1A:EF:5F:83:52
Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial: 018AB263DB2C1B0795ADACDC02AA9C52BC47
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/JPe580_zPyAq-rcfefy5Gu9fg1I.roa
Signing time: Wed 20 Sep 2023 11:40:03 +0000
ROA not before: Wed 20 Sep 2023 11:40:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2200
IP address blocks: 134.59.0.0/16 maxlen: 16
157.169.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b2:63:db:2c:1b:07:95:ad:ac:dc:02:aa:9c:52:bc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Validity
Not Before: Sep 20 11:40:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24f7b9f34ff33f202afab71f79fcb91aef5f8352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a6:1b:69:f5:d1:d9:1c:38:32:bf:ef:4a:cc:
11:4e:6a:ad:8b:59:88:d1:cf:72:ea:82:5d:f0:b3:
31:59:04:0a:9f:4a:8b:cf:07:23:80:e6:cd:2b:d6:
fe:e0:b6:26:8a:f9:76:76:4c:7a:77:ee:3f:c4:ba:
4a:64:ef:2e:f0:6b:42:2d:14:60:d9:b4:b7:2c:67:
c7:32:d2:2e:82:88:fc:c7:77:0d:fc:52:93:42:6c:
c8:32:b2:70:eb:ba:f2:27:31:45:b7:6c:b8:ad:de:
9d:94:05:38:38:94:41:e3:7e:36:33:46:b6:69:cc:
7f:d3:fc:4b:be:14:8b:da:6e:b9:71:11:ff:b2:23:
5b:ef:68:3e:a6:3f:20:e9:9c:f5:ae:98:dc:d4:b7:
33:28:fa:04:78:c1:3e:d4:a2:96:e4:df:89:8b:60:
fc:3c:ba:49:1e:4e:87:5d:b1:29:e0:2e:3b:2a:bf:
60:3e:84:c3:c7:51:8a:a6:5e:b8:97:f2:6e:9c:ff:
b7:74:2a:3e:8b:48:aa:d7:54:7b:e9:db:36:14:ec:
76:e6:15:0c:09:8e:fc:bf:51:43:3f:ea:45:db:a7:
5d:dd:8c:09:df:4e:7e:52:c6:c3:82:fe:ed:d3:16:
ef:39:64:33:f8:f4:64:88:36:e8:2e:05:9d:fb:84:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F7:B9:F3:4F:F3:3F:20:2A:FA:B7:1F:79:FC:B9:1A:EF:5F:83:52
X509v3 Authority Key Identifier:
keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/JPe580_zPyAq-rcfefy5Gu9fg1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.59.0.0/16
157.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:b1:ad:36:78:f1:da:69:b2:a0:9c:95:59:66:b9:47:9e:10:
d5:0f:cf:bd:b7:1c:d5:66:11:af:04:3d:80:fe:b9:e2:69:9d:
36:6e:67:25:12:88:cb:4d:96:b6:57:50:e7:75:10:85:28:c5:
18:30:f0:33:f3:57:6d:8e:66:7f:01:cc:d7:15:a1:31:76:e3:
25:06:cd:00:aa:93:ca:31:1b:ba:8c:22:97:f7:c9:80:6c:69:
97:96:4c:8f:1a:8e:47:5c:e8:03:2b:ff:5a:08:60:7a:ab:7d:
28:13:76:57:d4:8b:0b:fb:82:30:6d:86:02:7b:64:86:1d:a5:
68:3f:24:b0:fb:68:37:fb:87:fd:f1:32:70:3a:a9:e0:d2:2a:
bd:51:ad:73:95:95:e9:cc:f9:2a:8a:57:24:99:b8:3b:4f:e8:
96:49:c6:36:a2:9d:8d:dd:ab:5e:0f:fa:9d:64:b0:c8:ac:05:
ae:c1:bf:67:76:e3:8b:6d:30:96:87:7a:0c:ae:06:b0:97:73:
dd:70:9d:46:a5:20:7f:57:ff:d1:ce:4c:a9:2a:fa:82:e1:00:
cc:70:f8:a4:82:b3:e5:e6:f5:a3:cc:ea:5d:03:3c:61:26:da:
22:b8:d8:5a:c2:99:91:23:6a:27:e3:a7:26:bf:66:fb:8f:d2:
b3:cd:3c:93
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAYqyY9ssGweVrazcAqqcUrxHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNTgxNDc5ZGVlM2I1OTk0ZjExYzlkOTU2NDYzMWJmNWE0
MDRjMDcwHhcNMjMwOTIwMTE0MDAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGY3YjlmMzRmZjMzZjIwMmFmYWI3MWY3OWZjYjkxYWVmNWY4MzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKYbafXR2Rw4Mr/vSswRTmqti1mI
0c9y6oJd8LMxWQQKn0qLzwcjgObNK9b+4LYmivl2dkx6d+4/xLpKZO8u8GtCLRRg
2bS3LGfHMtIugoj8x3cN/FKTQmzIMrJw67ryJzFFt2y4rd6dlAU4OJRB4342M0a2
acx/0/xLvhSL2m65cRH/siNb72g+pj8g6Zz1rpjc1LczKPoEeME+1KKW5N+Ji2D8
PLpJHk6HXbEp4C47Kr9gPoTDx1GKpl64l/JunP+3dCo+i0iq11R76ds2FOx25hUM
CY78v1FDP+pF26dd3YwJ305+UsbDgv7t0xbvOWQz+PRkiDboLgWd+4RRewIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFCT3ufNP8z8gKvq3H3n8uRrvX4NSMB8GA1UdIwQY
MBaAFNJYFHne47WZTxHJ2VZGMb9aQEwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zMzZkYjMtNzFhOC00M2VmLTliOWYt
NmE2YzZlMDk2MDcxLzEvSlBlNTgwX3pQeUFxLXJjZmVmeTVHdTlmZzFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zMzZkYjMtNzFhOC00M2VmLTliOWYtNmE2YzZlMDk2MDcx
LzEvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAhjsDAwCd
qTANBgkqhkiG9w0BAQsFAAOCAQEAbrGtNnjx2mmyoJyVWWa5R54Q1Q/Pvbcc1WYR
rwQ9gP654mmdNm5nJRKIy02WtldQ53UQhSjFGDDwM/NXbY5mfwHM1xWhMXbjJQbN
AKqTyjEbuowil/fJgGxpl5ZMjxqOR1zoAyv/Wghgeqt9KBN2V9SLC/uCMG2GAntk
hh2laD8ksPtoN/uH/fEycDqp4NIqvVGtc5WV6cz5KopXJJm4O0/olknGNqKdjd2r
Xg/6nWSwyKwFrsG/Z3bji20wlod6DK4GsJdz3XCdRqUgf1f/0c5MqSr6guEAzHD4
pIKz5eb1o8zqXQM8YSbaIrjYWsKZkSNqJ+OnJr9m+4/Ss808kw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:57 2024 by rpki-client on console-ams.rpki-client.org