Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/jIHvl6moo0l-TP4hwGj7kkjc1kk.roa
File: jIHvl6moo0l-TP4hwGj7kkjc1kk.roa (raw, json)
Hash identifier: lKIGON1v/dfV/TceFjgdwcMmfl34AX8BBHv0NlpIMpM=
Subject key identifier: 8C:81:EF:97:A9:A8:A3:49:7E:4C:FE:21:C0:68:FB:92:48:DC:D6:49
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018571955A8F7A1E877DCB57D3E94A7C719A
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/jIHvl6moo0l-TP4hwGj7kkjc1kk.roa
Signing time: Mon 02 Jan 2023 08:24:51 +0000
ROA not before: Mon 02 Jan 2023 08:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38337
IP address blocks: 149.126.192.0/24 maxlen: 24
149.126.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:5a:8f:7a:1e:87:7d:cb:57:d3:e9:4a:7c:71:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c81ef97a9a8a3497e4cfe21c068fb9248dcd649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d0:ff:1f:a7:28:18:51:b9:e8:38:1f:aa:d8:
26:8e:64:40:71:a6:1e:3f:d3:2e:c7:32:83:5e:e5:
2e:88:3a:b5:68:a8:d7:1e:7e:ad:d5:ee:1a:48:b3:
32:4b:8b:4c:e0:06:1f:d8:e7:a5:83:b2:b2:6f:0b:
7b:c1:6c:42:3b:a4:73:cb:2c:b8:ab:e0:2a:d7:cf:
a8:9b:33:79:19:4c:9e:09:70:ce:47:c8:2e:f3:06:
52:ee:6e:17:1a:2c:c9:5f:4f:21:b6:a7:e0:ad:65:
e2:d1:9d:af:9a:f3:88:60:d7:ec:f6:80:8a:68:87:
b4:db:6d:94:b5:89:58:cd:09:88:f3:f9:8c:1c:88:
a1:b1:e6:95:52:7a:e8:41:77:0a:b2:6e:0e:56:2b:
96:79:c4:1d:85:62:ca:fa:56:92:3c:40:3b:30:9c:
2c:36:44:95:eb:f3:b3:77:72:e7:1f:62:4e:4b:db:
c2:6f:90:b6:e1:2a:9e:51:32:6f:0d:40:bf:65:3a:
d1:c1:30:9b:b5:da:51:db:32:c7:41:2d:39:04:e3:
5d:44:99:b1:68:f4:fb:bb:25:6e:6e:b6:75:ee:b6:
ca:97:9f:20:c5:4c:14:6e:9f:d6:83:94:cc:3d:c9:
42:13:ae:2a:5b:c8:5f:66:c7:80:9f:d4:62:42:01:
31:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:81:EF:97:A9:A8:A3:49:7E:4C:FE:21:C0:68:FB:92:48:DC:D6:49
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/jIHvl6moo0l-TP4hwGj7kkjc1kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.192.0/24
149.126.207.0/24
Signature Algorithm: sha256WithRSAEncryption
78:5a:be:c2:4e:ea:6f:b9:28:f6:eb:63:c9:3b:40:43:f8:dc:
97:30:9c:3a:76:f1:96:95:39:0a:8e:4d:22:e1:48:16:df:b8:
e9:85:d0:56:d6:44:04:2f:1e:d8:94:bd:65:92:62:ed:c2:51:
77:cb:65:52:77:2e:01:aa:19:1f:6f:0a:c7:07:57:8f:3c:ae:
1e:d2:56:b6:be:8f:44:e0:4e:7e:ff:b8:6f:7d:11:97:a5:1a:
22:cb:6a:84:66:73:c7:3a:a1:ee:9f:06:9f:23:17:60:47:e3:
9c:eb:57:8d:ea:d5:ab:3f:16:b7:b3:e8:80:27:02:a6:bb:de:
be:66:50:a4:70:27:b9:66:27:4c:b4:93:6b:19:25:10:59:07:
56:b7:be:2e:4a:e5:ac:fd:ef:ae:e8:6f:9d:60:36:2b:b6:6f:
90:3b:6c:e9:9d:0b:97:5b:d7:09:ea:7f:28:7a:b8:9b:90:fe:
e5:40:c2:03:1d:a9:d5:b6:48:fe:65:c1:b8:98:09:18:07:5f:
c6:38:40:be:27:01:07:f2:af:af:37:8b:e9:1d:fc:b3:c5:4a:
36:50:dd:80:b0:e8:36:a6:f5:c1:b0:8c:77:ac:0d:29:1e:d6:
0c:a9:22:34:1c:76:0d:91:5e:0c:9b:4b:59:51:e1:65:a0:73:
89:97:08:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org