Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Jc2Lh70dGoR-ja0WhIeiJ-L0JN8.roa
File: Jc2Lh70dGoR-ja0WhIeiJ-L0JN8.roa (raw, json)
Hash identifier: l+08gNJ3NCItzIusboPItwQSo9H6eKCZAzkGayNlEQU=
Subject key identifier: 25:CD:8B:87:BD:1D:1A:84:7E:8D:AD:16:84:87:A2:27:E2:F4:24:DF
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01856E8B4DACA87ACF995B3222ED20D8E53B
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Jc2Lh70dGoR-ja0WhIeiJ-L0JN8.roa
Signing time: Sun 01 Jan 2023 18:15:01 +0000
ROA not before: Sun 01 Jan 2023 18:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203470
IP address blocks: 45.8.201.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:4d:ac:a8:7a:cf:99:5b:32:22:ed:20:d8:e5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 18:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25cd8b87bd1d1a847e8dad168487a227e2f424df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:80:aa:af:3f:0d:a2:e5:c5:a8:d0:d5:05:31:
37:f8:5f:e3:e3:d0:af:18:e1:7e:87:d4:a0:ef:30:
c6:81:61:45:40:04:6b:ed:95:e0:de:eb:91:7f:b2:
aa:1b:44:92:c2:e6:ad:d4:c4:da:d5:8a:62:e7:42:
ec:c8:56:8a:00:7b:ed:16:48:8a:32:b1:23:09:13:
48:e7:0c:60:f4:92:fe:56:d4:2e:7a:f9:8b:1d:bb:
b4:f3:ae:47:ab:d1:d0:80:64:9f:fe:87:c4:6c:db:
c7:ef:e1:df:1a:4f:bc:c1:9d:ac:91:06:47:65:99:
10:16:d6:03:0b:e2:29:0c:ab:ba:81:19:9a:68:3e:
c2:f9:e1:5e:ae:c2:f4:0f:d6:2b:fc:a1:a1:8b:c9:
c8:46:07:1c:e2:b7:ec:b0:d5:c3:69:25:61:ce:c3:
ce:34:ea:ce:de:97:9a:98:2e:f3:d7:28:c9:0b:94:
36:1f:b7:11:37:ee:63:c6:55:b3:8a:98:2f:73:42:
3d:59:c4:12:a4:9b:b9:a4:b5:9d:51:b2:76:bc:49:
c2:cb:79:f3:73:23:f7:0a:19:be:5b:a1:e6:69:ee:
32:7c:be:6e:d7:89:a9:f8:d5:a4:4b:11:00:3b:46:
ee:bd:e1:a5:52:96:0e:40:c9:20:ab:3c:98:2a:25:
81:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CD:8B:87:BD:1D:1A:84:7E:8D:AD:16:84:87:A2:27:E2:F4:24:DF
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Jc2Lh70dGoR-ja0WhIeiJ-L0JN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.201.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:b1:e0:e5:1c:d6:17:0c:30:8b:74:3c:96:2b:fa:95:62:93:
c3:0c:8e:54:5e:5e:ba:bb:88:c1:0d:55:d3:1a:f2:d9:69:9b:
f8:dd:35:6b:1f:37:2c:f9:7b:34:82:de:e6:63:b7:21:30:eb:
fa:d1:ab:a8:9e:f6:61:06:80:ac:a5:85:ac:6d:a2:8c:d0:d1:
ec:fe:a3:ce:07:41:74:c4:8d:2c:24:08:84:74:87:00:f2:56:
41:71:6d:4e:7f:ad:01:05:de:01:8f:e5:e4:6b:4d:44:d3:62:
a9:2c:0d:3c:c0:b2:25:10:39:4c:4b:94:91:74:d6:0e:e1:d5:
4d:d4:48:26:f2:e5:18:05:c4:08:f2:50:b4:96:d9:e2:e2:d9:
8c:79:06:03:7b:86:b8:ed:9d:7d:4d:d6:05:f5:e5:07:2f:9c:
d9:8a:cc:c9:d4:f1:74:ea:06:cb:8c:aa:de:65:95:a1:22:8f:
31:64:4e:65:22:7f:35:9d:31:f6:b0:d9:95:26:07:9c:f1:92:
5f:88:42:32:b6:2e:f3:fc:12:6b:26:24:e0:a3:8d:43:b8:85:
89:61:ed:a7:7e:d5:d2:03:cc:4f:af:0b:a6:dc:84:4f:93:37:
57:17:f3:ec:2c:ed:d0:7f:d9:16:a5:05:9b:0d:8d:b9:41:c4:
62:c7:eb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:17 2024 by rpki-client on console-fra.rpki-client.org