Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/JRFO-M-mpFK5t8xX0Vyq2a0tw9Y.roa
File: JRFO-M-mpFK5t8xX0Vyq2a0tw9Y.roa (raw, json)
Hash identifier: Pkt/ugsZfnDeGb2CDhuN9xmhxBfZfllmuNRAEZsW8jc=
Subject key identifier: 25:11:4E:F8:CF:A6:A4:52:B9:B7:CC:57:D1:5C:AA:D9:AD:2D:C3:D6
Certificate issuer: /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial: 0187AB6B7EEEAF071001D42168709A4F02BD
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/JRFO-M-mpFK5t8xX0Vyq2a0tw9Y.roa
Signing time: Sun 23 Apr 2023 00:02:41 +0000
ROA not before: Sun 23 Apr 2023 00:02:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.76.42.0/24 maxlen: 24
185.76.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ab:6b:7e:ee:af:07:10:01:d4:21:68:70:9a:4f:02:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Validity
Not Before: Apr 23 00:02:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25114ef8cfa6a452b9b7cc57d15caad9ad2dc3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:77:b6:16:20:3a:f4:94:b7:07:67:b2:24:80:
5a:0f:5f:2a:75:d7:83:f4:15:43:f0:a1:e5:96:36:
4d:f6:0a:20:82:0c:89:e1:ce:01:f3:8f:eb:5c:1a:
db:7e:ed:29:dd:12:62:80:a1:80:c6:35:f7:8a:07:
c3:5c:fa:12:7d:b1:0d:9a:58:68:31:70:9c:d2:1f:
dd:29:c2:c6:cb:b2:8c:84:89:00:60:ae:fb:97:4f:
ac:3a:ad:fa:cf:c8:3e:24:af:c8:2e:cb:c1:ff:9d:
0d:b4:90:f1:ec:66:8d:1d:a3:71:3c:f4:3b:92:a8:
34:e4:8a:ac:e9:d7:61:6a:23:4e:73:f0:0d:1a:b3:
87:75:05:7b:54:cc:d0:db:a5:6b:86:c9:be:55:9f:
07:54:25:3e:ac:fe:93:61:0c:b9:b4:d6:22:1e:b8:
7d:66:f8:88:12:7c:2e:2a:de:a1:1a:4a:d3:d8:6b:
d2:57:f5:cb:d8:36:09:44:ea:bb:6e:80:43:61:54:
ed:b8:d7:b2:23:6d:ac:8c:c6:62:be:6d:15:e4:4b:
26:2a:09:b0:70:b1:96:87:a5:b2:ab:97:6b:d7:b4:
0b:6f:15:93:cf:1b:1c:0a:42:44:16:9c:8b:8b:d2:
0a:81:a2:9c:c9:b4:fc:91:ec:4d:34:1a:fa:c3:63:
60:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:11:4E:F8:CF:A6:A4:52:B9:B7:CC:57:D1:5C:AA:D9:AD:2D:C3:D6
X509v3 Authority Key Identifier:
keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/JRFO-M-mpFK5t8xX0Vyq2a0tw9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.42.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:f8:92:15:ac:67:4e:94:1e:fe:23:30:25:84:c9:30:fb:a2:
ce:0f:2f:46:c1:0a:e5:a9:08:e2:76:ed:88:91:f5:b1:60:3a:
a4:ef:5d:34:2c:e4:4c:97:b0:a1:36:4e:a8:13:a2:8a:51:8e:
c1:79:5a:e9:b6:68:b2:b3:3c:9f:dc:0d:f1:3b:7b:ce:81:a9:
19:ae:a7:95:f6:d3:59:b6:73:05:46:00:a2:07:93:91:27:39:
6d:94:b0:25:3a:49:69:27:ab:e0:0d:16:3b:47:6b:03:d2:0c:
62:4c:f5:1d:7d:46:d0:de:8d:09:c4:69:a9:2a:54:1a:4b:ba:
12:d2:a8:45:d6:9d:7d:35:76:52:c8:a2:35:13:5b:83:a7:b0:
49:a2:39:93:14:7b:da:57:c1:e6:e9:f8:b8:3f:e6:c0:fa:f6:
9a:72:47:cf:bd:f6:67:24:ef:f7:86:fb:74:19:b1:f0:39:d4:
a5:38:10:57:7d:07:11:2d:74:a9:14:61:57:8f:76:a9:e0:d2:
75:d0:7a:fb:86:20:6f:96:ec:e7:90:b8:b9:4f:1a:5d:74:32:
2a:43:91:35:7c:86:c5:88:c2:ac:7f:a5:11:14:b0:1b:f6:5f:
8f:e2:7c:d0:97:67:38:8a:85:ec:07:9b:3b:dd:da:35:3b:9e:
61:2d:68:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:25 2023 by rpki-client on console-ams.rpki-client.org