Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/jxdamviLS8WAS5gM4oLmFISLKac.roa
File: jxdamviLS8WAS5gM4oLmFISLKac.roa (raw, json)
Hash identifier: 6b4eb4RxzKhNgNS6H3S5bark54ysarpT9iHkGa5F5CE=
Subject key identifier: 8F:17:5A:9A:F8:8B:4B:C5:80:4B:98:0C:E2:82:E6:14:84:8B:29:A7
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0188051C6EE532C81156F0F51A0657B6E382
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/jxdamviLS8WAS5gM4oLmFISLKac.roa
Signing time: Wed 10 May 2023 10:02:09 +0000
ROA not before: Wed 10 May 2023 10:02:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 87.246.28.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 17 May 2023 18:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:1c:6e:e5:32:c8:11:56:f0:f5:1a:06:57:b6:e3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: May 10 10:02:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f175a9af88b4bc5804b980ce282e614848b29a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:2a:f9:58:51:6d:16:79:ca:28:7f:7f:37:
5f:bf:a1:ca:ff:8a:9a:b9:09:10:65:64:7a:70:be:
97:d6:ee:33:29:53:0f:c6:8d:78:71:b0:9a:38:4a:
9c:47:18:09:f1:eb:b1:92:98:a5:eb:ca:36:f0:b9:
3a:8e:30:ad:8a:65:3c:41:c9:96:2e:64:2b:74:19:
d3:37:1c:6e:59:86:17:e7:3f:f2:e3:08:47:a3:38:
24:d6:aa:e7:3d:dc:4f:14:29:b7:19:9c:ea:7c:63:
96:a0:d8:2f:57:87:1f:53:88:ad:60:df:87:42:3b:
27:f2:94:f4:06:92:f3:63:35:74:2d:ef:0e:da:8a:
8a:57:92:2d:29:d4:fa:eb:8b:da:e6:af:02:41:3a:
44:4c:3e:b3:7a:d6:c6:9a:c2:32:8e:47:9c:34:a9:
9d:ea:a3:db:50:6f:61:a5:a3:c1:89:0d:3f:1c:17:
f9:03:ef:17:33:f5:bf:d9:74:16:46:13:bd:80:7c:
37:05:24:20:4c:08:54:d0:15:db:65:97:0f:7f:a4:
76:1c:f9:64:b2:da:72:f4:ab:a7:26:44:da:c0:8b:
60:2e:d0:8c:bd:71:48:5a:04:ee:d5:8b:c4:a1:d4:
cf:a8:81:40:ba:41:3d:fa:b8:2d:25:cd:a1:67:14:
33:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:17:5A:9A:F8:8B:4B:C5:80:4B:98:0C:E2:82:E6:14:84:8B:29:A7
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/jxdamviLS8WAS5gM4oLmFISLKac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.28.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:f0:d9:78:21:33:4f:4b:05:9a:21:8c:2b:0e:12:a5:ba:93:
f8:53:32:45:9e:fb:d2:78:6f:1c:c1:11:f9:6e:a1:2e:b6:be:
91:dc:1c:da:65:5c:d9:5a:80:4e:d1:df:bf:ac:0b:db:3e:c2:
45:44:9e:99:bb:96:94:b0:90:16:20:da:d7:80:53:90:09:1c:
a9:5c:02:32:35:51:9a:dc:f8:1a:c3:dc:0f:10:f1:32:29:cb:
c4:94:c5:a3:df:c0:30:dd:dd:05:c7:e4:d1:23:7d:cc:63:60:
f5:4c:e2:20:42:7b:6f:9d:97:80:58:cd:61:92:2a:3e:2d:f1:
32:a2:ee:0a:08:a9:4e:9b:bc:a0:5d:d7:ce:f6:c9:08:6f:d4:
f8:5b:c9:95:f2:b6:8d:bc:a2:d4:0a:98:08:0d:95:af:58:7a:
3c:d9:3f:b9:11:d9:4a:7f:2b:0d:5a:ae:e0:25:18:f9:28:bf:
eb:a9:63:f8:e9:21:e8:a5:f7:52:94:0d:1d:d4:9c:b1:ad:04:
dd:96:01:f3:da:9d:7d:0a:fa:91:dd:ee:90:3e:5c:18:37:88:
90:30:bc:d5:b9:98:fb:49:4c:67:d7:ec:3c:e4:50:1d:32:df:
dd:9f:4d:b4:1c:55:13:a4:93:c1:59:74:be:3b:26:6f:66:3e:
fc:63:a8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:14 2024 by rpki-client on console-fra.rpki-client.org