Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/jctF-x_kxl7D8AcSO4WF5rT_M7k.roa
File: jctF-x_kxl7D8AcSO4WF5rT_M7k.roa (raw, json)
Hash identifier: BZliNVwARgtHfKgooid0w+fRa0Vck4XKHgEX3PRZbvg=
Subject key identifier: 8D:CB:45:FB:1F:E4:C6:5E:C3:F0:07:12:3B:85:85:E6:B4:FF:33:B9
Certificate issuer: /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial: 0188540885B7ECDD6363192081017D001C03
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/jctF-x_kxl7D8AcSO4WF5rT_M7k.roa
Signing time: Thu 25 May 2023 17:50:24 +0000
ROA not before: Thu 25 May 2023 17:50:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 185.201.17.0/24 maxlen: 24
185.201.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 May 2023 18:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:54:08:85:b7:ec:dd:63:63:19:20:81:01:7d:00:1c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
Validity
Not Before: May 25 17:50:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dcb45fb1fe4c65ec3f007123b8585e6b4ff33b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6b:7b:46:d9:2e:25:36:11:0e:0d:69:eb:d0:
dc:7c:60:05:d9:da:98:6a:0b:b3:b5:65:05:97:d0:
cd:23:b3:fc:fa:5f:e3:7c:90:40:87:da:f0:45:bc:
f0:f3:65:98:1f:5d:1d:56:4a:85:dc:ac:9a:23:c4:
b3:f9:4a:7e:1a:45:5f:0f:e5:8d:57:7c:13:9a:f2:
0a:f9:4e:0c:6f:dc:47:e4:7e:0a:fe:99:70:76:26:
5e:50:a7:c5:5e:bb:f9:0c:21:d2:40:fe:5a:8b:68:
74:0a:34:f8:07:01:8f:0f:26:b2:e0:54:35:bf:5f:
c8:cd:f6:91:fa:a7:8d:81:61:54:e4:f9:b4:c9:19:
2c:d0:76:45:b2:10:ec:53:22:08:29:1f:ea:40:00:
3d:5e:04:e5:0c:9a:28:88:fe:36:a1:82:33:00:66:
de:a8:e1:de:da:4d:d7:64:14:77:79:25:80:67:74:
d3:82:77:25:59:58:6f:af:36:11:35:69:14:e1:60:
8c:1c:d2:7e:89:87:72:14:8e:7f:f0:b1:15:cb:07:
5e:ca:4c:32:cf:e1:3b:b2:8b:96:f5:de:63:40:8a:
7f:d3:00:78:ed:ac:26:c3:5d:d4:88:1c:27:9f:36:
eb:ec:79:62:ae:9f:2b:10:e3:66:51:28:84:22:a0:
56:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CB:45:FB:1F:E4:C6:5E:C3:F0:07:12:3B:85:85:E6:B4:FF:33:B9
X509v3 Authority Key Identifier:
keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/jctF-x_kxl7D8AcSO4WF5rT_M7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.17.0/24
185.201.19.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:29:cd:12:8e:6a:15:6d:bd:52:1b:4f:b9:31:97:66:32:c8:
b0:ad:58:5f:7c:62:fc:bd:ad:8b:e2:10:36:a2:dc:be:99:c2:
bc:72:8a:5a:c2:d7:4e:a9:06:0b:f4:b2:eb:af:92:c0:a2:ee:
6d:c4:d8:04:35:fc:41:4f:c6:59:ca:ce:a8:77:48:69:b6:e6:
b3:ef:40:18:31:80:23:ff:d0:a3:bc:57:94:d2:95:65:21:b4:
b7:15:b0:d6:5c:36:60:21:e1:b6:fa:c3:0d:f0:a7:99:a8:a0:
ff:1b:82:8f:02:d2:2b:67:4b:2b:ce:ca:07:7c:5f:f1:a8:c7:
8f:e2:73:bb:61:5d:ac:3e:0c:28:c8:be:ad:9d:e5:4b:04:21:
63:76:b7:2e:6f:ed:eb:de:5c:c1:73:3c:55:e6:52:ba:cc:07:
84:21:42:d4:29:ed:ec:c8:82:45:44:e5:95:60:95:38:fe:60:
99:1f:f0:c8:1e:ed:68:0a:1c:ad:78:84:66:4e:fc:36:9f:1c:
bf:07:91:5c:7c:28:14:a6:fc:5b:0f:b8:fc:a7:87:da:26:64:
6a:f8:3c:a4:af:09:40:86:8c:00:50:37:53:07:56:ac:20:4b:
34:89:12:c6:d3:19:8a:89:cd:fb:20:eb:dd:f8:cd:24:c0:7f:
cb:79:f0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:32 2024 by rpki-client on console-ams.rpki-client.org