Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/8jmkp_LvCJ-rvos3jyBkCAFRkQs.roa
File: 8jmkp_LvCJ-rvos3jyBkCAFRkQs.roa (raw, json)
Hash identifier: 0uV50vPXasMzEWeX1nzgr77ulidUNNIgVXkJlHt/tsU=
Subject key identifier: F2:39:A4:A7:F2:EF:08:9F:AB:BE:8B:37:8F:20:64:08:01:51:91:0B
Certificate issuer: /CN=bbd351b274fc23a42728303638a0d62b606401b4
Certificate serial: 01856DC1C942564613F5B7F126D7D70ED24A
Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/8jmkp_LvCJ-rvos3jyBkCAFRkQs.roa
Signing time: Sun 01 Jan 2023 14:34:54 +0000
ROA not before: Sun 01 Jan 2023 14:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12817
IP address blocks: 2001:1578:200::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:c9:42:56:46:13:f5:b7:f1:26:d7:d7:0e:d2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4
Validity
Not Before: Jan 1 14:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f239a4a7f2ef089fabbe8b378f2064080151910b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f3:e2:ee:ff:18:72:76:e2:8f:34:3c:6f:f7:
f7:82:98:7c:45:9a:3a:43:6e:59:c4:fb:0b:ed:82:
02:a8:e8:92:44:0c:43:ad:e7:25:83:71:08:58:ed:
78:3e:76:d0:54:aa:24:97:b5:42:55:6b:28:77:ab:
9b:b3:86:56:bc:11:64:e2:ea:39:a6:b4:3a:91:f8:
68:47:7b:6b:e6:51:ad:00:b1:7d:de:c9:9c:28:8d:
43:02:31:93:fe:64:89:1d:4d:bd:e1:65:6c:75:ec:
89:0d:a5:e6:41:e4:04:fb:00:5a:c4:fe:c8:ee:12:
b6:b7:85:01:34:8d:5f:66:ba:2a:f8:3c:c1:85:bb:
41:0d:a5:fa:67:1f:5b:bc:c0:e7:23:1b:c2:18:22:
e4:55:70:a5:29:02:84:2f:65:94:11:ae:7d:c1:cf:
2a:e9:5e:e3:59:c4:61:e9:34:00:7c:79:1c:35:f0:
cb:1b:33:a2:bb:9b:9c:5f:d2:42:d7:ad:df:bf:d8:
85:4f:49:8b:0b:c7:46:89:c5:86:c5:87:8f:e0:3f:
df:57:16:8c:70:be:c3:41:ea:3c:47:8a:14:78:95:
c4:af:53:43:15:35:26:c9:56:40:c6:7d:56:33:3f:
18:a6:34:9a:6d:6e:a3:26:5c:d8:fb:0a:75:e7:7c:
20:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:39:A4:A7:F2:EF:08:9F:AB:BE:8B:37:8F:20:64:08:01:51:91:0B
X509v3 Authority Key Identifier:
keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/8jmkp_LvCJ-rvos3jyBkCAFRkQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1578:200::/40
Signature Algorithm: sha256WithRSAEncryption
0b:50:bf:ec:76:a2:22:89:b0:f5:17:eb:91:d4:aa:40:0f:c2:
06:a4:f2:b3:34:f2:1d:65:f9:63:5f:30:ec:b7:f7:31:ee:60:
ac:bd:5e:6e:e8:43:bb:3f:85:2d:fc:53:08:d3:72:70:ed:07:
49:b3:88:a6:c4:66:ff:fc:6c:17:2e:3d:d3:07:9a:a2:b9:b3:
98:50:0a:40:54:72:bc:9e:ba:30:2f:fc:67:ec:fc:45:73:7d:
86:9b:55:f3:5a:20:92:98:fa:92:c8:3a:e9:15:c9:41:41:fc:
c6:11:4e:de:13:aa:d4:99:d3:ee:1b:5f:83:20:90:d3:4c:e2:
7f:a2:f5:ba:d9:c1:c3:74:10:50:46:34:a7:47:b9:5a:f7:20:
cf:64:4a:8c:df:da:ff:07:6e:64:d0:08:9d:39:0a:59:0c:b5:
66:10:12:a3:33:e9:75:0f:11:8d:94:b4:d0:d3:cb:a4:0f:05:
4d:d6:a0:7b:25:08:01:6d:8e:c3:1f:9a:f9:26:c5:6b:9c:aa:
c8:90:a4:d6:f9:d8:0a:f1:8d:cf:4a:e7:86:a0:97:13:16:35:
f5:03:7e:ba:a3:3f:d7:b4:e7:8a:8c:4d:1a:36:ce:2a:c3:96:
a3:39:cd:f8:11:72:fd:bd:5d:d9:9e:c7:33:69:45:71:bf:b8:
df:51:90:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:21 2024 by rpki-client on console-ams.rpki-client.org