Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/SJGTWXKHY_QYbvRmRbAGnecG59c.roa
File: SJGTWXKHY_QYbvRmRbAGnecG59c.roa (raw, json)
Hash identifier: 8j79Pp/HxmWn12c4ijxVevfEP+vDIZsBKUSasgTLTbo=
Subject key identifier: 48:91:93:59:72:87:63:F4:18:6E:F4:66:45:B0:06:9D:E7:06:E7:D7
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018603661967CA3F2D95276075816A488342
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/SJGTWXKHY_QYbvRmRbAGnecG59c.roa
Signing time: Mon 30 Jan 2023 15:57:48 +0000
ROA not before: Mon 30 Jan 2023 15:57:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 164.215.103.0/24 maxlen: 24
5.10.240.0/22 maxlen: 22
5.10.252.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:03:66:19:67:ca:3f:2d:95:27:60:75:81:6a:48:83:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 30 15:57:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48919359728763f4186ef46645b0069de706e7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:3b:69:99:47:ec:ce:31:ad:fb:f1:e6:5a:
8f:3d:65:79:0d:04:42:d6:10:b1:4e:09:ef:80:75:
31:86:ef:7d:87:f2:c7:ae:e1:d0:dd:65:74:c9:47:
32:62:bf:bf:00:50:6a:95:b5:78:e1:19:73:78:06:
57:50:57:e4:36:38:17:3c:d7:c0:eb:eb:cf:e1:d0:
85:f3:ae:76:b8:85:78:b9:10:48:f3:f5:9c:93:1b:
49:bb:ee:bd:12:a5:fb:49:43:a4:01:65:08:8e:71:
49:a6:57:42:90:c6:20:f0:7a:1e:2a:dc:d3:60:39:
39:55:66:6c:83:fd:d3:15:fe:39:fb:e8:5e:5b:f1:
64:c9:a3:45:d6:45:c2:99:fa:a9:0d:7a:16:f5:9a:
4a:7e:83:fd:bf:64:44:42:40:4c:31:6e:11:80:90:
c0:d4:1e:c9:55:9b:f0:22:f2:17:54:cc:9e:dc:8e:
d8:86:08:75:52:bc:75:75:1a:3e:dc:96:67:96:31:
3f:15:31:ba:03:5f:81:03:a2:8b:60:ab:c3:48:a9:
67:34:b8:16:6a:8e:59:79:dc:ae:2f:82:27:83:20:
8d:ec:21:71:95:12:77:cc:78:23:73:5f:fe:9a:92:
f9:7c:04:70:f3:a5:a0:20:a4:77:7a:96:a6:37:16:
b9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:91:93:59:72:87:63:F4:18:6E:F4:66:45:B0:06:9D:E7:06:E7:D7
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/SJGTWXKHY_QYbvRmRbAGnecG59c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.240.0/22
5.10.252.0/22
164.215.103.0/24
Signature Algorithm: sha256WithRSAEncryption
28:3c:79:c5:c2:b5:2d:af:58:0d:ad:e1:6a:60:00:38:37:2b:
44:02:3c:fe:55:a5:2b:3a:77:37:6d:38:be:b2:a5:10:c1:71:
6c:16:af:f8:16:4d:c0:ff:ad:61:94:18:58:35:08:2e:02:de:
b5:de:c2:bb:b3:cd:27:c2:61:8d:64:f2:6a:4f:c1:62:67:61:
e0:98:55:ff:65:c7:93:1e:ab:ef:74:b7:3a:91:47:db:03:3f:
ec:85:0c:b1:5f:72:a8:e2:b7:bc:8a:4d:f2:cb:ef:13:22:b1:
70:2c:9b:cb:a6:ab:d6:33:5f:3c:04:88:61:78:e9:19:5e:9c:
8e:5a:f8:82:7c:26:0a:12:a7:20:d9:ba:49:45:3f:ee:56:16:
2b:13:c8:e3:30:c2:48:b1:26:9f:ff:88:cd:25:eb:b3:c8:f1:
81:fc:5f:7d:58:b5:f5:18:f8:6a:30:f9:49:b9:95:bc:00:cc:
3a:9f:78:18:48:e0:77:a4:c6:d4:79:f1:48:80:ed:79:bb:30:
59:e7:16:02:8c:2a:b6:ff:c0:9b:49:16:39:1b:26:1f:00:56:
61:ce:fb:ef:82:dd:08:1e:dd:ea:26:ed:9d:78:10:54:14:df:
aa:e9:63:49:5f:5b:45:d6:7f:a6:b9:55:ee:04:5a:59:04:af:
8f:61:af:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:00 2023 by rpki-client on console-fra.rpki-client.org