Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JfI6vaLCkLlsKp6BwmJ0CU8BmyY.roa
File: JfI6vaLCkLlsKp6BwmJ0CU8BmyY.roa (raw, json)
Hash identifier: JdHq5Wgm3IiKMoMIu6IZfcWIxmLmvD11HCfqt/VWqyw=
Subject key identifier: 25:F2:3A:BD:A2:C2:90:B9:6C:2A:9E:81:C2:62:74:09:4F:01:9B:26
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 01856FD4FACA03C1A602E24909D027DA085B
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JfI6vaLCkLlsKp6BwmJ0CU8BmyY.roa
Signing time: Mon 02 Jan 2023 00:15:06 +0000
ROA not before: Mon 02 Jan 2023 00:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137280
IP address blocks: 104.166.180.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d4:fa:ca:03:c1:a6:02:e2:49:09:d0:27:da:08:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Jan 2 00:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25f23abda2c290b96c2a9e81c26274094f019b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:52:28:ac:27:0c:43:e7:48:ce:ab:71:97:0d:
d9:ce:c3:48:46:2f:8c:e7:58:1c:59:47:4c:1f:ce:
ec:fc:a3:85:d8:85:4c:4e:fa:dc:eb:9e:ae:b1:1c:
3d:88:eb:1c:44:5c:e6:3a:63:1c:95:36:c2:58:c4:
ea:6f:9d:35:44:7e:96:37:0b:2c:31:ad:e2:8e:f9:
03:69:73:0d:2a:8d:76:00:30:5f:63:15:4f:fb:63:
06:01:87:e1:a0:59:1e:f2:54:06:48:9f:7f:3e:79:
9d:4e:d7:9b:1a:00:21:de:fe:b2:08:69:66:07:d4:
22:23:3d:5a:c5:6c:f5:29:c0:7f:87:2b:ee:4a:b9:
09:e7:87:95:a6:9f:b6:7f:cc:ba:6c:c4:a9:08:15:
f9:17:43:60:2c:f9:3c:cf:5a:8e:af:a3:ff:a7:47:
8b:96:d8:e2:fd:cf:ca:9c:61:21:bf:2d:5c:62:03:
01:33:5d:f5:5e:88:bd:04:36:2b:e1:02:5c:61:ad:
7f:0b:d5:65:c0:fb:8c:30:89:4d:88:0e:d0:85:73:
e8:47:ed:ed:bc:37:5c:40:d2:f7:f2:cf:fd:ca:e3:
d2:69:fa:3e:e5:32:5d:60:e0:33:4e:f1:50:7d:e2:
4a:50:77:09:6f:d9:7b:82:fc:ef:15:72:d6:93:87:
86:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F2:3A:BD:A2:C2:90:B9:6C:2A:9E:81:C2:62:74:09:4F:01:9B:26
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JfI6vaLCkLlsKp6BwmJ0CU8BmyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.166.180.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:05:27:73:2e:f4:1a:09:24:d5:51:a7:91:6a:c9:5d:5a:0f:
fe:9c:52:76:77:51:18:88:45:fc:f8:ae:89:58:37:5a:75:da:
94:ac:7c:e6:24:8b:c8:9e:d6:6e:d1:a5:ad:78:ff:2c:fd:74:
77:5d:a6:77:ab:b8:79:e3:7d:6a:49:ff:a4:ff:4d:e1:4b:e8:
dd:b0:b6:85:e0:4b:16:d1:de:d9:de:ec:6e:11:15:fd:76:8c:
58:ec:0d:3d:d1:34:30:ce:00:dc:01:ab:ae:a1:47:b5:d5:92:
b4:72:fe:0a:38:88:05:cf:02:75:7e:18:5d:35:57:13:2c:19:
be:a7:c8:c5:80:31:89:b6:78:53:8a:b0:f5:ae:db:84:d6:a6:
9c:b6:77:2c:0b:69:52:f0:57:c3:d4:84:d6:4b:bd:75:8e:bf:
84:8e:88:56:25:39:46:ee:80:03:c7:0d:8b:8a:bf:0f:af:ae:
cf:a6:63:82:dd:16:0b:11:81:a6:a2:37:a5:f4:6e:95:68:cc:
e9:71:88:99:ac:b8:4b:7e:1a:98:cb:09:51:9b:19:27:ef:c0:
33:62:4f:e9:d4:1b:73:9b:72:39:5d:29:20:7e:74:b6:f1:af:
d3:b8:8c:23:30:4d:f8:d5:e1:1b:b5:9f:0a:22:89:31:cf:d2:
e2:06:eb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:30 2024 by rpki-client on console-fra.rpki-client.org