Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/JC8uJNyEUatxDheZ_sIkAolazSo.roa
File: JC8uJNyEUatxDheZ_sIkAolazSo.roa (raw, json)
Hash identifier: dlOtgvhU1Hd63RnUPOtv0PyShIax68NiRWA2gf2y2U0=
Subject key identifier: 24:2F:2E:24:DC:84:51:AB:71:0E:17:99:FE:C2:24:02:89:5A:CD:2A
Certificate issuer: /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial: 018B94DAE73D16A40B596240FA0618B166E4
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/JC8uJNyEUatxDheZ_sIkAolazSo.roa
Signing time: Fri 03 Nov 2023 11:04:15 +0000
ROA not before: Fri 03 Nov 2023 11:04:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57399
IP address blocks: 193.201.149.128/26 maxlen: 26
2001:7f8:52::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:da:e7:3d:16:a4:0b:59:62:40:fa:06:18:b1:66:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
Validity
Not Before: Nov 3 11:04:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=242f2e24dc8451ab710e1799fec22402895acd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6d:c0:c7:f1:02:32:14:20:42:69:e4:9d:b7:
9c:6c:b0:13:dc:8f:42:b7:22:de:e6:fd:60:f9:b1:
c2:42:ee:3b:ad:f6:db:6f:d9:79:5d:82:b4:75:e7:
42:43:dc:52:0b:38:08:29:26:ee:8e:f3:28:7c:16:
28:04:c5:31:ac:29:29:51:de:a1:f4:a0:89:bb:40:
15:5c:50:ac:9a:d5:30:78:40:26:7e:52:8d:be:61:
46:98:72:5e:9a:d0:53:1c:5c:6c:dc:92:86:84:57:
19:77:a4:9e:2a:27:28:d6:ba:6e:e8:49:7b:6e:09:
96:c9:4e:4b:8a:25:c0:30:a3:e4:ec:68:cb:67:c7:
c9:bc:66:d1:d5:39:31:49:bb:c7:d8:e3:2a:57:e2:
17:f9:7e:52:a0:4d:4d:2c:1b:ee:9a:72:46:88:54:
ac:1f:1c:76:22:26:bc:77:4c:cd:a8:ae:75:3a:ed:
38:b9:d1:5b:4f:54:0f:1a:1c:30:64:36:78:80:9f:
fc:48:a0:05:e2:fb:6d:54:02:ec:94:10:6e:9f:5b:
85:b9:9f:e3:f1:91:df:e2:f5:2f:42:e0:ea:08:05:
2f:5b:e9:12:a3:5d:46:f4:b0:8f:7c:e3:9c:13:a9:
0b:42:df:0f:79:35:3e:9d:8f:9f:d4:91:64:f3:d0:
9f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2F:2E:24:DC:84:51:AB:71:0E:17:99:FE:C2:24:02:89:5A:CD:2A
X509v3 Authority Key Identifier:
keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/JC8uJNyEUatxDheZ_sIkAolazSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.149.128/26
IPv6:
2001:7f8:52::/48
Signature Algorithm: sha256WithRSAEncryption
46:16:15:81:98:90:de:80:eb:14:8b:72:21:c3:fc:58:48:b2:
22:22:1d:a8:c7:fb:1a:ab:7f:18:7f:be:13:d2:bb:21:14:ab:
31:73:73:3b:ec:b1:72:56:ba:4b:df:33:74:2d:e6:34:be:52:
d4:d7:d9:41:54:c6:b4:06:71:b8:e2:77:6a:c5:6c:4d:6a:c5:
de:72:33:2f:a8:08:06:b0:03:bd:18:99:82:44:14:7d:f3:23:
59:b5:ba:4a:93:43:21:41:62:dc:d1:b7:c4:54:24:2f:8b:1a:
f5:b5:34:ac:eb:e3:0b:28:3e:b1:80:3c:a6:11:a1:2f:67:91:
69:3e:4b:85:52:5c:68:31:10:da:46:8c:8a:85:40:0d:3a:59:
dc:70:ac:1f:ed:08:89:2b:30:64:b9:01:05:9d:74:a1:52:c1:
d7:9a:df:53:19:eb:41:07:5c:5b:bb:77:f5:c1:53:c0:14:59:
95:e8:99:39:2d:fc:94:69:51:32:5d:8f:ff:50:b8:77:ce:70:
b0:8a:00:81:90:7c:cf:1d:75:20:1b:5a:b5:3a:23:f9:76:14:
e7:dc:85:21:49:9e:2b:99:ae:4c:4c:94:c9:9e:1c:65:96:c3:
96:06:3d:7b:61:58:9a:d7:93:06:88:0e:b4:6f:b4:4c:cb:01:
9a:3e:cc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:52 2024 by rpki-client on console-ams.rpki-client.org