Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/JpPYeo-PprYG-KZklwLGBRQb0rA.roa
File: JpPYeo-PprYG-KZklwLGBRQb0rA.roa (raw, json)
Hash identifier: uhU9PBbPm6QY/LOh4ljA6YmC2/hYzxO0uG6numXTHcs=
Subject key identifier: 26:93:D8:7A:8F:8F:A6:B6:06:F8:A6:64:97:02:C6:05:14:1B:D2:B0
Certificate issuer: /CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Certificate serial: 018708F15654B23A27F16C7FD9EF5A46303C
Authority key identifier: DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/JpPYeo-PprYG-KZklwLGBRQb0rA.roa
Signing time: Wed 22 Mar 2023 10:50:46 +0000
ROA not before: Wed 22 Mar 2023 10:50:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 138.124.180.0/24 maxlen: 32
138.124.184.0/24 maxlen: 32
138.124.183.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:08:f1:56:54:b2:3a:27:f1:6c:7f:d9:ef:5a:46:30:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Validity
Not Before: Mar 22 10:50:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2693d87a8f8fa6b606f8a6649702c605141bd2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bc:ca:4e:40:fe:b7:4d:8d:9d:71:be:1d:37:
92:07:e1:d0:58:04:66:da:85:1d:6c:d0:1f:a9:76:
19:15:1f:f3:12:0f:b2:ec:8c:df:63:db:2d:54:f2:
6b:77:5f:8c:e3:c4:71:2c:de:d8:58:9b:42:48:00:
05:52:18:eb:9f:c5:59:a9:8f:5e:42:45:c3:b5:46:
3d:c6:95:ae:78:30:3d:25:68:93:2c:f5:35:c1:ba:
91:8e:cb:c0:35:cc:bb:29:4a:b9:3a:31:b1:46:df:
3b:16:7b:cf:0e:9a:9a:5c:7e:8b:2f:c0:75:6e:36:
20:df:c8:3f:17:bc:cd:7c:d5:30:93:ec:34:d4:49:
2a:bf:0d:4c:8c:e0:3d:b9:c1:5f:c5:26:ab:a7:7a:
7d:3a:2f:7e:7d:85:ba:91:cd:2f:92:5f:e9:23:d9:
14:f8:d3:8f:fd:3b:d6:75:a1:0f:6a:ae:95:f9:2f:
c0:5c:38:fe:0c:28:a6:57:dc:19:f1:1f:49:8a:40:
fc:33:9f:26:07:ac:d5:44:5a:0b:21:c5:23:06:76:
f0:52:bb:e3:72:88:89:94:cc:3d:ed:89:82:bf:f2:
71:16:56:77:11:64:cc:bb:9b:d0:56:78:3c:a1:a9:
b1:d1:c7:de:98:53:cf:69:75:9e:36:b1:5f:6d:bc:
30:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:93:D8:7A:8F:8F:A6:B6:06:F8:A6:64:97:02:C6:05:14:1B:D2:B0
X509v3 Authority Key Identifier:
keyid:DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/JpPYeo-PprYG-KZklwLGBRQb0rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.180.0/24
138.124.183.0-138.124.184.255
Signature Algorithm: sha256WithRSAEncryption
6a:f7:9d:14:82:23:b1:58:f2:67:9f:69:8f:2a:5c:e5:15:f4:
57:77:03:16:f1:31:a8:16:d9:43:70:f3:fe:f5:10:08:0d:32:
8a:9b:de:a0:14:04:dc:d1:ea:dd:e5:c7:54:2b:ff:44:65:52:
96:b7:5e:04:02:7f:b8:8d:49:53:03:1a:ef:f1:c9:c9:9f:bb:
97:38:bb:95:a3:15:02:41:6b:eb:c7:fa:27:b9:16:89:3c:4d:
14:b1:0b:08:e3:ce:72:60:4e:6d:15:aa:14:b4:67:54:2e:f2:
9e:b3:24:1b:ad:a4:c0:f4:ee:1f:93:f9:c4:57:f6:45:cf:b3:
e7:4e:39:72:64:87:b5:e3:bb:79:e6:1a:cc:bd:bf:b5:e6:7e:
ab:51:fd:38:c9:5b:18:e0:6f:4a:d1:d5:43:b8:0f:97:ca:e0:
8d:52:b5:22:41:1f:1c:f3:5a:89:b5:b4:f7:cd:12:22:7a:1b:
48:e4:9f:05:4e:00:33:93:e9:a9:80:bf:1c:f7:22:07:bd:4c:
30:2a:c9:a9:15:c7:66:5c:da:a5:34:05:ee:ab:72:d8:f5:8c:
4a:b8:fc:e5:40:e7:56:b3:8a:49:d2:ac:ae:88:db:4e:b6:22:
94:b4:7c:3a:b1:6a:05:97:2c:af:d2:48:c1:74:6d:5f:47:81:
ee:0a:cc:c4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:17:12 2024 by rpki-client on console-ams.rpki-client.org