Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/jGuzMBXZVKoFjqfkHJUm7nOaS7o.roa
File: jGuzMBXZVKoFjqfkHJUm7nOaS7o.roa (raw, json)
Hash identifier: rjhDCaxhD4gLr0iX4SQ1V5oXRx2zSQKupg3F7Zrknnw=
Subject key identifier: 8C:6B:B3:30:15:D9:54:AA:05:8E:A7:E4:1C:95:26:EE:73:9A:4B:BA
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 0186CCC16A57DBF1AE64867C6BE3160021DB
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/jGuzMBXZVKoFjqfkHJUm7nOaS7o.roa
Signing time: Fri 10 Mar 2023 18:21:13 +0000
ROA not before: Fri 10 Mar 2023 18:21:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212097
IP address blocks: 5.59.234.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cc:c1:6a:57:db:f1:ae:64:86:7c:6b:e3:16:00:21:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Mar 10 18:21:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c6bb33015d954aa058ea7e41c9526ee739a4bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4a:7d:62:7f:41:c9:10:e9:45:d7:38:61:94:
d2:cc:53:9e:a8:f6:22:48:c0:90:f4:d6:e0:65:82:
4e:26:b6:10:eb:0f:c4:6c:78:ce:e4:26:af:98:c0:
66:64:30:ad:88:3d:74:15:ea:82:95:26:50:ca:5d:
61:5c:a7:78:45:f9:76:55:e7:84:b6:d9:f2:00:9e:
c6:5c:b0:1a:48:a5:0c:97:8a:0f:3b:e1:9d:f7:ad:
df:b1:60:4e:21:56:46:af:f2:c1:7e:f8:2c:29:97:
a4:29:7f:c0:21:8d:7a:6d:eb:f5:51:d8:f5:ff:6c:
12:9f:5f:66:85:8d:76:d2:75:81:fa:5a:95:c9:d6:
59:4a:ac:05:e2:1a:3a:99:4c:d5:be:f8:26:1b:4b:
e5:9b:1c:ca:30:05:ce:05:f9:2c:6f:98:bb:1f:54:
a7:b9:01:a4:95:3b:2e:7a:69:b6:0c:1a:cd:36:72:
ca:9e:06:af:c8:61:c5:34:b4:0c:7a:4b:7d:c3:83:
5f:5f:89:ea:45:54:a2:a9:b5:3f:11:3b:f5:d1:5c:
43:91:ea:5a:aa:6d:d8:35:8b:34:85:d9:fc:44:bf:
52:4c:16:78:5e:8a:2d:79:85:4a:2b:ec:8f:38:99:
8d:86:a0:76:84:db:7d:a0:31:a1:a0:f7:ae:20:49:
3f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6B:B3:30:15:D9:54:AA:05:8E:A7:E4:1C:95:26:EE:73:9A:4B:BA
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/jGuzMBXZVKoFjqfkHJUm7nOaS7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.234.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:85:c5:bd:86:35:08:f4:de:2b:ed:d3:6d:de:bb:ee:cf:26:
88:75:aa:fc:af:ac:5f:a4:6d:d3:91:3b:d7:72:13:a4:85:e3:
10:49:2e:0d:15:94:09:60:e0:97:19:de:2a:44:a2:99:8f:1b:
50:81:ff:e5:d4:e7:d9:ec:35:13:d8:e0:bc:56:02:46:62:bb:
5f:97:8f:b0:b6:bf:3c:76:e5:56:9a:e3:65:aa:03:ae:ca:0c:
13:0a:77:16:ff:49:0c:6f:9d:21:8c:88:b7:1b:87:85:e6:e8:
9d:c7:a5:e5:8f:0e:27:6a:56:33:99:ca:4d:d7:19:60:7f:98:
ed:b2:44:4e:89:c8:f9:54:78:a6:b6:af:31:e9:94:06:51:f2:
98:fc:8f:21:2f:78:ce:1e:fb:22:cd:a5:4f:7a:5c:3c:19:b9:
5b:01:3c:ff:6f:5c:14:d7:ca:d7:16:58:3a:fd:86:5b:85:48:
31:24:f9:ef:cf:3d:20:f9:40:19:aa:0e:f3:a2:26:81:67:97:
6e:b2:9d:6f:81:84:7c:d6:68:97:ab:3a:41:34:a1:71:a7:ce:
92:78:99:34:8f:d8:6a:16:d0:94:8c:19:6b:1b:4e:5d:37:c9:
14:6d:6c:c8:54:d7:0e:6f:89:7b:a3:da:50:73:51:3d:4a:33:
31:b0:60:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:52 2024 by rpki-client on console-ams.rpki-client.org