Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/J0j37_JiLP4doXlgRX-h807768A.roa
File: J0j37_JiLP4doXlgRX-h807768A.roa (raw, json)
Hash identifier: eKJGtfNV5oGChDVoR6HIhef8nGggchi7ECWdVXwelHM=
Subject key identifier: 27:48:F7:EF:F2:62:2C:FE:1D:A1:79:60:45:7F:A1:F3:4E:FB:EB:C0
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAE262276A7049A92278C1320E33C9
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/J0j37_JiLP4doXlgRX-h807768A.roa
Signing time: Sun 01 Jan 2023 10:05:13 +0000
ROA not before: Sun 01 Jan 2023 10:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34950
IP address blocks: 192.165.101.0/24 maxlen: 24
194.68.50.0/24 maxlen: 24
192.176.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:e2:62:27:6a:70:49:a9:22:78:c1:32:0e:33:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2748f7eff2622cfe1da17960457fa1f34efbebc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:01:dc:7a:05:90:c2:87:26:d7:a9:ad:67:31:
4f:6b:6d:06:77:ee:2d:40:4e:a8:ae:94:f0:ed:67:
b4:3e:69:2d:f9:0d:aa:ce:f9:0e:3b:4b:04:18:87:
7c:f8:23:e6:82:aa:41:bb:b9:ae:13:7f:ec:70:ac:
52:bc:b6:af:57:04:b7:32:2c:4c:d0:f9:fd:af:9c:
57:57:44:d5:81:d2:84:77:f2:f0:67:bc:0d:e0:fb:
04:f4:29:99:39:d4:69:58:fb:33:80:51:6a:48:0a:
6e:f2:03:97:65:56:68:5f:7c:dc:65:0c:7d:a0:b1:
b8:b1:30:b5:3a:05:41:13:02:45:0d:ff:6d:27:06:
c2:1b:56:4e:73:58:c2:2e:13:a8:c6:dd:aa:8a:ac:
46:d7:e8:ab:0c:b0:65:d3:32:b0:3c:f0:f2:f4:19:
9a:29:f1:dd:81:23:d2:d8:37:77:b1:7d:4b:8f:9f:
69:01:00:e4:d3:d4:03:33:14:d4:c9:c4:77:9e:de:
89:ec:ec:54:9d:35:a0:75:f3:2e:95:00:fe:40:a4:
1d:db:dd:fe:88:42:ec:03:8d:4c:5a:42:44:7c:3e:
79:ab:b6:01:b2:4d:5a:96:37:51:3c:ce:6c:38:c3:
13:e5:07:3c:35:1b:27:ab:40:0c:5a:6a:16:dc:8d:
21:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:48:F7:EF:F2:62:2C:FE:1D:A1:79:60:45:7F:A1:F3:4E:FB:EB:C0
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/J0j37_JiLP4doXlgRX-h807768A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.101.0/24
192.176.2.0/24
194.68.50.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:83:c8:e7:d1:ab:12:36:8d:a5:86:f1:fc:68:78:85:a6:25:
1b:3b:1d:8c:70:47:23:8a:aa:84:ef:90:7a:0b:3d:99:2f:5f:
60:b7:ff:de:27:cb:e6:7f:98:2c:8d:aa:b3:e5:be:6c:b3:42:
9e:e5:c9:3e:88:c4:48:4f:e3:f3:b1:af:89:60:81:e5:9a:f2:
bd:51:43:cd:24:e1:0b:b4:79:31:a5:e4:1d:cc:8b:d7:d6:a3:
3c:ad:75:43:ff:e2:74:ac:3d:4b:24:a1:a1:f3:09:bf:81:5c:
c2:48:ae:78:4e:e7:de:c1:61:ee:98:b7:e7:4c:e1:9b:c7:90:
30:9a:09:cb:29:76:6d:1c:35:ab:72:3e:fb:3f:b7:ae:de:98:
37:75:19:b2:fd:9d:96:61:70:49:b5:de:49:44:19:bc:a8:b1:
cc:90:d7:94:42:2e:b4:05:ed:17:37:46:a9:2c:dc:34:2d:85:
08:98:d7:7f:33:45:6c:ed:b0:a0:5a:5c:f5:2e:78:3d:1f:71:
56:55:c8:26:96:b6:32:b9:95:f1:1e:07:25:ab:0c:61:28:2b:
44:4e:34:0e:fc:78:fc:2d:f7:25:84:e5:1e:0d:bb:56:95:ae:
30:b0:7b:b5:fc:b6:05:fb:15:19:3e:22:dd:f2:63:28:c4:a6:
f0:e3:69:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:53 2024 by rpki-client on console-fra.rpki-client.org