Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/JabscXKF42h0VoMCsdiLtQPKA4E.roa
File: JabscXKF42h0VoMCsdiLtQPKA4E.roa (raw, json)
Hash identifier: xwoBNMQKc6uQgi0YXh6PSZ7Np63xw5tmIZAl9mNe2jw=
Subject key identifier: 25:A6:EC:71:72:85:E3:68:74:56:83:02:B1:D8:8B:B5:03:CA:03:81
Certificate issuer: /CN=e5164534979e60a564701232b2e5200889542606
Certificate serial: 018B6B38562A122EC305B5369E31EBCC4836
Authority key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/JabscXKF42h0VoMCsdiLtQPKA4E.roa
Signing time: Thu 26 Oct 2023 09:02:16 +0000
ROA not before: Thu 26 Oct 2023 09:02:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31416
IP address blocks: 2a00:18f8::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:38:56:2a:12:2e:c3:05:b5:36:9e:31:eb:cc:48:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5164534979e60a564701232b2e5200889542606
Validity
Not Before: Oct 26 09:02:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25a6ec717285e36874568302b1d88bb503ca0381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:93:c9:bf:22:6d:7a:ef:e5:59:5b:98:79:75:
d8:d3:16:c0:dd:f8:22:4c:a1:0f:d7:d9:c0:dd:f6:
28:75:3b:75:15:2d:66:53:a3:58:04:4e:ff:6e:cb:
a8:0f:d0:b5:09:5a:6c:79:4e:9e:0a:8a:c6:38:6c:
3c:e5:9e:22:e7:db:fc:8a:26:30:07:0b:58:52:b7:
ea:4a:5d:33:f6:de:a1:14:2b:6a:00:96:a1:31:10:
bb:ac:83:f2:c6:e3:90:f8:dc:4c:16:eb:39:e0:5b:
09:7b:4a:b5:2c:7f:75:e8:56:7b:a2:8f:0e:f7:10:
e9:b1:bf:81:f3:6e:9e:d3:7c:c5:65:45:8c:11:22:
bc:ea:00:e2:06:60:d1:ce:26:b3:35:b0:f7:84:86:
fe:25:3a:98:64:5b:8b:08:6b:75:6b:b6:5b:cb:c4:
c6:ef:02:89:17:b4:8d:63:11:8b:69:b5:dc:c9:6a:
a3:5c:bf:88:4a:1d:cf:e4:a2:7e:6b:e1:11:4e:8d:
b5:3c:db:fa:29:e0:10:d1:27:e2:a1:32:2d:bc:7d:
ca:38:72:3d:8c:94:d4:99:21:ef:01:49:57:f3:74:
73:f6:b1:ab:95:42:af:e3:ec:1b:5f:ed:ca:1d:d4:
f1:cd:96:e3:01:bf:9b:e9:55:e2:2b:22:ad:f1:b1:
da:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A6:EC:71:72:85:E3:68:74:56:83:02:B1:D8:8B:B5:03:CA:03:81
X509v3 Authority Key Identifier:
keyid:E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/JabscXKF42h0VoMCsdiLtQPKA4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:18f8::/32
Signature Algorithm: sha256WithRSAEncryption
90:67:ee:3f:60:d4:15:91:03:3c:cb:61:ad:5b:aa:2b:bc:93:
09:22:63:4a:a6:61:fe:88:36:92:15:10:66:e0:1b:fb:cb:44:
29:32:cc:85:6b:78:27:1b:a7:15:a4:c9:5a:b1:37:77:ad:1d:
8a:ac:c0:0a:35:77:a8:d0:82:b2:94:6d:73:51:00:2f:f5:50:
22:bd:a7:56:06:af:07:e0:9e:3c:1f:de:29:55:d5:1f:e7:45:
ee:42:86:ae:4f:f1:c1:d2:98:ac:70:0b:5d:08:18:6b:ff:bc:
a1:4b:54:ec:e6:be:6d:57:f6:e0:6c:49:88:67:dd:4d:93:b3:
1f:5c:96:c0:e7:36:9b:f5:3d:e2:ac:50:0f:a5:7f:41:d2:07:
7e:e1:cd:39:80:a2:52:b1:49:2b:2c:67:8d:eb:69:01:6d:21:
a6:38:31:c2:13:26:d0:5b:1e:d6:ed:fd:66:0b:17:5d:54:46:
e9:7e:42:b0:e1:1b:98:81:4a:29:1a:38:53:d2:3f:4e:3d:13:
ec:70:10:21:89:0e:a3:00:15:ae:10:2a:0b:32:7a:ab:ca:bb:
1c:bf:03:a9:fe:54:dd:a6:45:f5:42:46:44:86:1b:9b:da:b8:
fe:3f:94:ba:28:b4:38:0e:d9:ed:43:26:c9:ee:04:03:cf:6d:
7d:bc:05:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:54 2024 by rpki-client on console-ams.rpki-client.org