Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/JRJE3IrYGYgCtQogc_tR8yWLvwY.roa
File: JRJE3IrYGYgCtQogc_tR8yWLvwY.roa (raw, json)
Hash identifier: 8QVWpcyBMpoNgmyuJ4linmxgSDX94RUYNw9zEPHto3Y=
Subject key identifier: 25:12:44:DC:8A:D8:19:88:02:B5:0A:20:73:FB:51:F3:25:8B:BF:06
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 0189F2D0D203624E7BE2A670C6E3C559D6EC
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/JRJE3IrYGYgCtQogc_tR8yWLvwY.roa
Signing time: Mon 14 Aug 2023 06:51:58 +0000
ROA not before: Mon 14 Aug 2023 06:51:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133499
IP address blocks: 185.188.62.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f2:d0:d2:03:62:4e:7b:e2:a6:70:c6:e3:c5:59:d6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Aug 14 06:51:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=251244dc8ad8198802b50a2073fb51f3258bbf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:14:e4:ef:c6:ee:08:99:43:c8:54:df:a8:
d9:5d:ad:2e:ff:ab:a7:83:f4:32:f2:64:34:c9:b5:
b3:95:69:a5:b7:c4:63:9b:c8:da:3f:a5:35:9c:87:
d2:46:12:26:d7:d9:0f:5e:40:d3:5c:ca:3f:9a:10:
bd:04:90:f2:1f:f5:51:b7:48:9d:86:b0:9f:fe:d9:
63:65:69:82:d1:77:cc:1e:12:2d:cd:ac:9a:26:0d:
02:f3:0c:b2:38:0e:c5:51:fc:d3:63:43:fe:60:12:
57:84:dc:16:80:cc:a5:a7:9b:49:ce:1f:51:da:ba:
79:c0:0a:87:7c:67:59:74:11:bd:e2:51:2f:89:e6:
1a:12:9e:80:5d:76:54:49:c0:8a:be:dc:43:7c:d1:
0e:74:da:90:06:dd:2d:3c:25:ce:09:ae:83:07:c2:
21:5b:36:6b:5f:09:d1:a9:13:76:47:bd:06:49:b0:
e3:4a:fd:f8:92:1a:38:ad:fb:08:1c:ad:a1:4b:60:
06:57:30:62:b4:a9:cf:7a:84:04:64:71:e0:78:37:
06:e5:50:4a:ba:da:66:55:d2:db:3f:d8:4c:f5:34:
33:20:8e:cb:8a:ab:88:e0:98:f9:5e:35:f1:2d:f6:
86:64:ae:cc:a5:6f:a0:1d:31:fc:0c:6c:00:6e:a1:
95:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:12:44:DC:8A:D8:19:88:02:B5:0A:20:73:FB:51:F3:25:8B:BF:06
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/JRJE3IrYGYgCtQogc_tR8yWLvwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.62.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e9:90:53:9c:af:9c:c4:17:8a:8f:d1:b9:76:65:a9:77:fb:
1d:2b:36:b3:b2:09:25:db:67:60:cd:d9:48:f4:e3:3e:56:6d:
05:bd:aa:0a:0a:00:bf:47:b5:97:46:21:e5:fd:d7:25:4c:f6:
e4:1d:91:4b:7d:f3:05:c5:4a:97:31:52:67:be:c2:2a:cb:7a:
98:72:76:23:c4:03:5e:22:96:70:1b:80:2a:82:ee:c6:6c:84:
ef:ff:f7:50:89:ce:2d:38:66:36:88:28:fd:45:f5:39:d4:a6:
fa:f6:ea:e7:bd:15:bd:e2:fc:65:7f:e6:1a:13:60:38:6f:9e:
de:2e:0f:7b:33:57:07:3a:9f:3d:55:b2:eb:47:f4:1c:d2:d4:
9b:01:27:6c:ff:15:8d:1a:da:01:41:12:fb:7e:0c:5b:d2:30:
e6:32:eb:13:fa:24:d7:9b:1d:59:fd:d3:b0:13:f2:57:b7:f8:
95:b7:63:f3:cf:69:b6:f7:e9:5a:88:60:d5:d2:e8:4b:07:34:
f8:93:ca:88:30:3f:7a:a5:43:66:79:0d:6b:db:f0:f6:4a:20:
c8:d3:51:ab:eb:76:8e:87:f7:2e:fe:42:97:c8:dc:a3:84:b0:
31:48:1c:36:34:cd:2d:9e:c3:05:97:09:1e:ec:be:b9:16:69:
7d:85:79:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:47 2024 by rpki-client on console-ams.rpki-client.org