Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/jNwemZ28QJuqowqjfXzpXLWYsGU.roa
File: jNwemZ28QJuqowqjfXzpXLWYsGU.roa (raw, json)
Hash identifier: rmfEx3bW9ZYut+0RuaUwghvv+J3oiygKq9BYP3g9Ph4=
Subject key identifier: 8C:DC:1E:99:9D:BC:40:9B:AA:A3:0A:A3:7D:7C:E9:5C:B5:98:B0:65
Certificate issuer: /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial: 01886DFA00598CC360ABE469D418055D3BF4
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/jNwemZ28QJuqowqjfXzpXLWYsGU.roa
Signing time: Tue 30 May 2023 18:44:40 +0000
ROA not before: Tue 30 May 2023 18:44:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400509
IP address blocks: 185.139.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Jul 2023 20:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6d:fa:00:59:8c:c3:60:ab:e4:69:d4:18:05:5d:3b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
Validity
Not Before: May 30 18:44:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cdc1e999dbc409baaa30aa37d7ce95cb598b065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:70:a3:13:82:5c:db:dd:12:44:35:01:c0:
85:3d:3a:9e:13:1c:cc:2b:d0:ab:20:b0:dd:ba:0d:
84:99:04:2e:0e:25:19:0a:7c:f1:2a:81:5b:b7:ad:
60:35:40:37:bb:9a:46:54:ac:9b:d5:9f:10:ff:1b:
54:4d:08:f4:10:e8:eb:6d:1b:e5:7d:e4:ef:ff:11:
21:46:71:62:6a:14:41:92:2a:92:1f:2c:94:86:17:
c3:ec:9c:25:fc:76:e5:41:3b:88:9e:16:05:55:bc:
c0:d4:73:30:7e:a3:13:fc:37:5f:ee:c7:5c:53:23:
d1:35:56:23:53:35:d0:47:c8:13:b9:93:ee:17:67:
08:56:0e:7e:a2:ea:0a:af:aa:ce:a8:0d:f6:69:12:
58:90:a8:04:fe:7f:a7:36:fd:06:6e:59:c0:01:2d:
4d:30:02:7f:63:0e:8f:a3:cf:32:2e:e9:24:a5:50:
96:bb:ee:61:8a:e9:09:c3:a9:4e:9e:12:63:ba:73:
0d:5d:c5:d3:06:c7:31:65:51:98:42:7e:11:13:18:
94:b5:11:aa:85:61:c0:bb:e2:fe:20:30:f7:02:a2:
ee:ee:16:f8:f7:d6:bf:48:09:c5:f7:29:83:3a:9f:
a4:42:fb:5a:18:a3:16:0c:d3:43:b7:96:d7:6a:86:
0b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DC:1E:99:9D:BC:40:9B:AA:A3:0A:A3:7D:7C:E9:5C:B5:98:B0:65
X509v3 Authority Key Identifier:
keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/jNwemZ28QJuqowqjfXzpXLWYsGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.35.0/24
Signature Algorithm: sha256WithRSAEncryption
33:83:9e:79:34:a2:23:59:27:4f:25:55:a7:ed:2a:ea:bf:f3:
81:c6:ba:be:04:c7:83:ff:13:03:d4:70:53:ae:c3:94:6f:07:
e7:a8:6c:c8:72:ee:5e:df:82:3a:27:a7:26:3c:00:5c:e5:07:
f7:fa:0a:3b:55:f6:7e:18:a3:aa:38:55:58:f0:78:7a:26:44:
dd:d1:88:86:a8:72:42:1a:14:42:b0:5d:1e:e9:47:e5:58:27:
20:5a:a5:2f:a7:b1:be:ca:29:c4:7b:4d:61:98:5c:30:3b:63:
42:57:26:54:7c:6d:be:09:72:90:22:df:a9:b2:6b:28:c7:2c:
64:95:c6:01:d0:56:1c:2d:c5:36:93:0a:f1:4c:bd:12:e3:47:
88:b3:16:da:61:a1:f3:23:9f:9e:16:04:8a:9b:85:ba:27:ad:
85:1f:8b:f5:1d:90:54:26:e9:85:84:f8:1b:1c:dc:af:69:7b:
33:2f:c3:5a:e1:be:9f:99:43:f6:cc:8e:54:09:f5:d9:bb:ff:
1a:3d:2b:fe:60:8c:72:04:a1:f8:f1:c1:87:eb:3b:7a:28:84:
01:b5:5c:f4:9f:58:23:fe:67:35:42:d9:2b:76:38:b2:38:ae:
b6:59:b1:80:bb:47:49:69:14:29:f5:d6:83:0c:d6:c8:bf:de:
1e:9d:06:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:47 2024 by rpki-client on console-ams.rpki-client.org