Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/JWHqnddWmj55K7qSgm85vyGJR1k.roa
File: JWHqnddWmj55K7qSgm85vyGJR1k.roa (raw, json)
Hash identifier: kRtqIp9ec9OggUeRUKXjxJlM0CfLCh3lrM21uVD6Mbw=
Subject key identifier: 25:61:EA:9D:D7:56:9A:3E:79:2B:BA:92:82:6F:39:BF:21:89:47:59
Certificate issuer: /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial: 01856DEF6335022BF63DB99A10764508EF38
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/JWHqnddWmj55K7qSgm85vyGJR1k.roa
Signing time: Sun 01 Jan 2023 15:24:43 +0000
ROA not before: Sun 01 Jan 2023 15:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61108
IP address blocks: 185.226.40.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 20 Apr 2023 12:57:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:63:35:02:2b:f6:3d:b9:9a:10:76:45:08:ef:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Validity
Not Before: Jan 1 15:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2561ea9dd7569a3e792bba92826f39bf21894759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:99:be:51:96:48:47:fe:23:4e:cc:a8:72:22:
1a:ee:2c:d3:aa:59:cd:a0:7e:7f:7b:dc:bc:5b:5d:
b1:b5:7d:13:1b:8e:0b:5a:84:49:66:26:a1:6b:58:
3c:39:b4:52:d1:67:6d:fa:80:68:da:bc:db:78:44:
49:7f:d7:cd:86:04:fd:55:27:fd:8c:88:bf:69:fb:
96:c2:0f:65:a2:e2:5e:b2:32:fe:9a:13:28:52:f9:
96:f9:10:39:d2:8f:3b:ed:b2:fd:2f:e8:6c:ed:38:
3d:ea:0f:8d:6b:7a:64:72:22:07:69:52:e1:85:ac:
96:48:ca:10:6d:46:0e:c7:22:90:0a:b2:1d:1f:e9:
e6:cf:dd:40:b6:45:a5:80:9b:5d:55:db:68:39:8d:
7b:e2:e0:7d:c6:41:0a:83:11:58:eb:42:ae:2a:b2:
3e:77:43:12:06:6c:47:41:dd:3f:58:2c:d9:24:7e:
f7:ab:9f:7a:43:08:a4:c7:5c:68:80:c0:1c:2e:6d:
90:73:f8:92:bb:03:42:5d:66:03:4f:dd:a5:0a:7f:
f4:40:65:0d:c6:ca:12:43:35:80:90:fb:d9:30:93:
31:77:fe:52:29:34:e2:4d:1e:97:65:98:6b:20:3f:
e9:44:ee:fc:c7:1e:eb:76:ba:69:24:e3:c6:fb:72:
8e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:61:EA:9D:D7:56:9A:3E:79:2B:BA:92:82:6F:39:BF:21:89:47:59
X509v3 Authority Key Identifier:
keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/JWHqnddWmj55K7qSgm85vyGJR1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.40.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:5a:f9:d3:a1:2e:16:04:8d:33:3f:0f:36:a1:ec:de:b7:fd:
86:dd:f9:82:2d:9e:84:ff:66:60:64:8c:56:ed:e7:e8:dc:b8:
2b:fa:2f:3e:fe:ac:ac:3a:7f:15:39:94:25:c9:9e:f5:32:76:
a0:68:6a:32:42:f6:03:f1:0c:24:a6:f7:9b:8b:35:3b:9a:fc:
83:39:1a:29:67:4a:24:ad:1b:be:b0:41:7f:f8:5b:25:9a:6d:
0b:d2:59:64:85:e2:db:b0:53:8d:64:e2:86:72:72:ef:2c:28:
3e:8a:d8:01:a8:e8:88:9e:e6:27:13:78:84:16:31:99:c4:b0:
9c:b1:fd:af:d8:5c:1f:b6:0a:41:3a:1d:14:ab:44:78:e5:4c:
46:0e:20:11:d1:f3:ab:c0:30:ff:4d:1c:01:40:0d:d8:a1:6e:
40:3f:f5:02:74:97:5d:d9:d2:62:ce:9a:66:bc:49:46:77:4d:
12:c7:2a:56:84:a7:90:ab:31:99:76:16:12:1e:b1:2d:6d:74:
7d:83:53:4a:47:57:d8:c1:79:a2:3c:ea:df:3e:d3:ca:d8:ec:
db:a0:fe:01:8b:db:c8:88:10:7b:b8:87:2a:dc:68:0a:62:23:
fe:58:27:1e:55:c0:1b:d3:dd:d1:47:71:a0:60:06:50:2a:d2:
57:ad:fd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:09 2024 by rpki-client on console-ams.rpki-client.org