Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/JKXTQcDBbELYyGgS04yxJ4TtmLw.roa
File: JKXTQcDBbELYyGgS04yxJ4TtmLw.roa (raw, json)
Hash identifier: csZEhsNIhjBQiz2rVmP+75l29BHJa9PSwNTbU20wahs=
Subject key identifier: 24:A5:D3:41:C0:C1:6C:42:D8:C8:68:12:D3:8C:B1:27:84:ED:98:BC
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 0185701EE59E19E5AD3261B6EAB487B616E8
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/JKXTQcDBbELYyGgS04yxJ4TtmLw.roa
Signing time: Mon 02 Jan 2023 01:35:51 +0000
ROA not before: Mon 02 Jan 2023 01:35:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1828
IP address blocks: 185.92.120.0/24 maxlen: 24
185.92.121.0/24 maxlen: 24
185.92.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Jan 2023 15:58:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:e5:9e:19:e5:ad:32:61:b6:ea:b4:87:b6:16:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Jan 2 01:35:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24a5d341c0c16c42d8c86812d38cb12784ed98bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:24:00:c6:7f:8d:5f:01:fc:9c:9d:44:7b:62:
13:a8:2d:7e:06:c5:51:6f:4e:a5:6b:fa:87:8f:eb:
0c:3a:10:a5:0b:e8:f2:bc:cd:04:24:39:29:60:e6:
ee:b0:1e:f1:a5:f1:29:05:f3:35:20:5a:4f:0d:30:
19:e7:e2:c6:f6:ae:57:df:2b:28:10:b9:f1:64:52:
47:46:21:a3:68:23:94:2b:d5:94:70:53:ee:51:c8:
e9:c3:5f:f3:80:f8:00:e7:04:40:9a:eb:ba:9b:a4:
05:4c:f4:64:34:b0:24:12:d0:97:b9:1a:7a:7d:3e:
52:9c:8f:d5:9b:b7:47:eb:8e:25:68:e7:46:c2:4b:
6b:44:30:13:a5:e5:88:81:13:55:7f:86:b3:4e:bd:
ce:30:39:41:d6:1c:ee:5e:8f:84:1d:89:a6:55:71:
fa:fe:55:60:d4:a2:3d:ec:4c:86:f5:fe:3e:90:71:
7d:46:8b:5b:50:98:da:e9:d1:9f:f8:f3:0c:35:4d:
16:10:25:e6:6a:6c:46:c9:75:f8:ca:0c:7b:be:85:
34:0d:43:97:7f:e5:d4:98:ff:92:be:61:5e:9f:fe:
00:36:0a:35:89:14:6c:e9:8c:b5:19:0e:1e:31:25:
63:2f:80:35:c7:12:86:78:0c:b1:1d:a7:29:c4:2d:
96:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A5:D3:41:C0:C1:6C:42:D8:C8:68:12:D3:8C:B1:27:84:ED:98:BC
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/JKXTQcDBbELYyGgS04yxJ4TtmLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.120.0-185.92.122.255
Signature Algorithm: sha256WithRSAEncryption
3d:31:ca:7a:fc:42:a1:55:d9:a3:ff:20:77:3b:c4:f7:ed:1e:
ea:88:e8:5c:fe:c1:e0:77:d8:9c:85:a7:08:75:58:3a:78:19:
08:73:c0:25:61:c6:31:ff:56:cb:73:6e:be:6c:71:76:31:24:
1c:dd:4e:e8:2f:60:94:15:3f:62:95:37:48:aa:8c:f2:fe:9f:
bd:90:d8:7f:65:5e:6d:c9:cc:47:87:88:14:11:04:4c:54:03:
17:0c:db:ed:da:e4:11:43:5b:2e:fd:8e:d0:7e:d0:85:6e:09:
2e:5a:25:b0:65:8e:1e:91:bc:22:33:5c:2d:71:50:25:9e:6b:
10:44:a5:2b:dc:79:58:ef:dd:5d:7e:c1:f1:65:45:8f:3f:0e:
15:20:23:53:01:c7:36:89:a8:c3:90:e9:8d:42:f7:f0:1e:a3:
e1:d0:c0:e0:ff:62:96:a0:d9:55:f0:cb:33:0a:66:3f:ae:45:
b4:db:e7:34:b0:62:83:53:a0:d7:e7:01:c0:c1:f6:1b:a8:38:
6f:db:27:e2:b8:ee:fb:ec:74:3c:dc:4d:61:11:ab:9f:47:39:
32:87:00:c6:f8:40:7d:00:0a:ba:a6:ed:8d:ce:45:86:01:15:
8e:c9:e5:6a:54:64:cd:70:84:ad:8b:c9:bc:51:c1:10:40:e2:
6f:5d:ce:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:58 2024 by rpki-client on console-fra.rpki-client.org