Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/JpQtR6Glt7R4WmnXTZJPPxG2FZs.roa
File: JpQtR6Glt7R4WmnXTZJPPxG2FZs.roa (raw, json)
Hash identifier: v2eCpHG68l/QIYVJHNYnCyqDBkE319LzvYpOkJD/pyk=
Subject key identifier: 26:94:2D:47:A1:A5:B7:B4:78:5A:69:D7:4D:92:4F:3F:11:B6:15:9B
Certificate issuer: /CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
Certificate serial: 018571FA14E2997637B69934B6B1E0DC2834
Authority key identifier: 4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/JpQtR6Glt7R4WmnXTZJPPxG2FZs.roa
Signing time: Mon 02 Jan 2023 10:14:52 +0000
ROA not before: Mon 02 Jan 2023 10:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208432
IP address blocks: 62.122.72.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:14:e2:99:76:37:b6:99:34:b6:b1:e0:dc:28:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
Validity
Not Before: Jan 2 10:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26942d47a1a5b7b4785a69d74d924f3f11b6159b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:77:f3:c1:a2:40:1c:6c:5d:d3:0a:c2:c1:
50:23:55:2c:55:4c:81:2a:e3:1d:2d:96:92:37:ff:
f6:c9:7c:35:ef:1e:ed:5a:2e:2e:17:3f:1b:18:97:
fd:60:6b:a8:4c:31:1d:15:7c:eb:2a:63:4c:b3:13:
82:62:d7:76:25:17:46:5b:00:70:e6:62:2a:c2:ed:
11:23:5b:1b:dc:d8:dd:e4:dc:2a:17:31:e5:4f:0d:
73:9b:a0:3c:39:10:31:25:c8:d6:74:70:8e:88:dd:
18:55:d2:2d:74:39:3b:e6:e8:c7:c4:d7:59:7c:97:
4e:3d:3a:a0:56:b7:24:60:89:cf:4c:e3:e0:86:b4:
97:36:94:fb:17:ed:55:aa:2c:74:46:b9:67:3a:b2:
91:b0:10:31:44:d7:7c:c4:6e:ab:cf:f1:93:dd:b5:
29:97:a6:12:5f:f5:c2:cc:e4:52:73:cc:4a:a4:47:
a2:36:ae:43:cc:64:91:8d:f5:8a:27:6e:e4:a7:20:
e2:fe:a2:66:1e:e9:0f:fd:f3:2b:9e:41:5d:7d:ff:
e3:8f:5c:06:12:6a:6d:a7:3c:b4:4c:ca:be:09:d2:
51:e8:62:0d:ce:76:17:26:3a:70:26:f5:52:99:fb:
e1:f8:9a:fd:0f:e6:e8:16:1a:93:b5:d2:1d:a0:dc:
e7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:94:2D:47:A1:A5:B7:B4:78:5A:69:D7:4D:92:4F:3F:11:B6:15:9B
X509v3 Authority Key Identifier:
keyid:4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/JpQtR6Glt7R4WmnXTZJPPxG2FZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.72.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:9f:d8:f5:1d:c7:81:b2:e0:e4:f5:1e:b1:76:67:a6:41:c3:
8d:aa:69:cb:c3:23:23:6c:f1:22:f9:2c:06:62:a2:57:6d:2e:
9e:1e:ae:08:25:b5:9c:f1:14:7b:e1:ef:a8:9b:63:0c:d5:98:
6a:33:13:87:6f:a2:78:09:5d:72:70:b6:93:6a:1c:a7:44:50:
bf:f1:96:dd:4e:ad:89:46:c9:8b:25:ea:9b:f1:44:da:a3:fa:
ba:e3:99:69:f1:4d:af:a5:50:c4:8b:db:11:cb:f2:6e:78:b9:
96:bc:a5:eb:b5:7b:6c:de:c2:11:38:13:98:7d:2c:0a:dd:57:
72:91:6f:54:61:d9:dd:ab:66:72:1a:40:1c:7f:b0:51:1c:36:
1b:48:b1:4e:06:57:df:95:41:6b:9f:1d:f8:99:7c:ff:a3:f3:
c3:a4:50:74:97:6a:63:8d:5b:13:55:fd:49:91:44:9c:f4:dd:
8e:f8:70:bc:5f:8e:5d:42:42:88:39:e4:36:01:30:2d:f0:ef:
13:ba:c8:b7:35:46:4d:a0:1b:be:62:ec:4a:53:9a:f1:87:58:
8f:3c:6f:85:8e:63:6a:01:54:df:03:dd:12:a7:b8:c6:fc:92:
4a:41:cb:f8:d1:5d:9d:46:e6:41:b5:0f:43:84:87:8d:de:e3:
e6:9d:2b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:30 2024 by rpki-client on console-ams.rpki-client.org