Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/JTjXbLcE-_vdvCiKY4oKualTy5c.roa
File: JTjXbLcE-_vdvCiKY4oKualTy5c.roa (raw, json)
Hash identifier: +mNSuGORzs9F6w9ANd97pkEfe/XOnfeUOOhx26iEHTA=
Subject key identifier: 25:38:D7:6C:B7:04:FB:FB:DD:BC:28:8A:63:8A:0A:B9:A9:53:CB:97
Certificate issuer: /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Certificate serial: 01856C4A543E8FA586EA6530A91E017EC486
Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/JTjXbLcE-_vdvCiKY4oKualTy5c.roa
Signing time: Sun 01 Jan 2023 07:44:48 +0000
ROA not before: Sun 01 Jan 2023 07:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56464
IP address blocks: 188.244.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:54:3e:8f:a5:86:ea:65:30:a9:1e:01:7e:c4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Validity
Not Before: Jan 1 07:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2538d76cb704fbfbddbc288a638a0ab9a953cb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:be:d3:40:cb:a9:d4:da:2d:1d:75:73:97:
8a:31:80:bd:ff:e5:d9:c5:4d:da:ac:b1:91:0a:e0:
78:6d:b0:f6:85:7c:e0:62:89:61:4e:4c:cc:73:42:
79:d1:50:1c:78:73:24:68:99:56:53:d4:c1:2b:23:
4b:0d:dd:0b:2a:2c:d9:eb:bb:6b:d8:91:87:5e:57:
29:fb:dd:be:6e:35:4a:af:4d:99:69:c4:4a:24:6c:
44:2e:65:a1:e7:05:36:2b:b6:1f:fc:d2:9b:3e:46:
63:a2:e4:d5:ef:0a:a8:c5:d4:0e:db:97:c7:9e:b8:
47:6a:12:44:99:bf:55:6b:79:e5:b4:0c:7a:fb:af:
03:64:da:e3:7e:78:5a:25:66:c7:2b:c9:db:c9:7e:
85:10:0c:f0:68:08:f7:91:85:38:69:9a:9a:03:eb:
f2:9a:dc:db:79:61:71:af:6c:1d:a4:8f:72:7f:27:
27:e3:be:91:9d:5d:ac:e7:4e:25:db:49:f2:24:4e:
eb:af:d7:16:53:25:05:32:22:86:f9:07:38:19:fa:
3e:96:7e:c0:33:22:6c:7d:d3:6c:8e:e8:d5:7c:48:
95:40:13:d7:d9:39:81:25:bb:04:f8:41:37:25:fe:
51:08:7f:d8:c7:cf:06:dd:04:cb:67:d0:e9:bf:d8:
15:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:38:D7:6C:B7:04:FB:FB:DD:BC:28:8A:63:8A:0A:B9:A9:53:CB:97
X509v3 Authority Key Identifier:
keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/JTjXbLcE-_vdvCiKY4oKualTy5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.124.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:10:de:bc:39:e3:4f:24:12:86:c2:cf:d4:75:b1:cd:93:43:
3f:9a:bd:ec:b0:a3:ef:aa:61:80:e4:ce:c1:7d:99:6e:0d:4e:
f0:45:37:c7:92:de:24:54:ef:cd:62:01:2b:2a:fd:19:fa:0a:
1a:34:00:d0:fd:16:b9:bd:90:ea:64:55:a1:8a:51:6f:00:ce:
b5:e4:a6:5d:da:14:b7:18:dc:cd:85:57:ae:07:9c:af:3d:fd:
8d:b3:e6:f7:fd:4b:50:d7:1f:a1:0b:1f:c2:51:19:86:a3:2e:
ec:61:03:5e:e3:ac:1b:c5:64:c7:2e:78:fd:22:4c:19:fd:21:
ae:92:0f:91:90:75:f4:69:69:c5:92:fe:91:66:71:6f:d9:07:
c3:a8:67:f6:ec:c5:ee:a3:4e:6c:f1:c9:a4:52:03:ca:26:23:
02:f3:55:fa:76:08:98:6d:52:80:4c:e1:1e:6d:bb:69:52:66:
a9:a9:2c:32:35:8c:fc:2f:68:f6:98:9e:05:07:5f:8c:f1:c6:
3f:52:44:6a:13:2e:f2:66:25:62:4c:28:eb:11:1d:82:50:7d:
38:f1:22:b7:3c:1a:2d:f0:8a:2e:a3:34:b9:ed:53:a3:1a:34:
28:df:8a:2e:ee:b8:26:da:15:d5:91:5d:bd:57:71:77:4b:ea:
37:03:5e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:15:05 2024 by rpki-client on console.sobornost.net