Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JMr6eJW4-nqstgm2lYRGDHcN2bo.roa
File: JMr6eJW4-nqstgm2lYRGDHcN2bo.roa (raw, json)
Hash identifier: 1TVpTVmCfHTy7JxMqXSsfmhjOvbo0EcPJ/8ILHomS68=
Subject key identifier: 24:CA:FA:78:95:B8:FA:7A:AC:B6:09:B6:95:84:46:0C:77:0D:D9:BA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018586C9609BF7272F31573313957EEEB223
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JMr6eJW4-nqstgm2lYRGDHcN2bo.roa
Signing time: Fri 06 Jan 2023 11:13:42 +0000
ROA not before: Fri 06 Jan 2023 11:13:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210654
IP address blocks: 194.87.132.0/22 maxlen: 24
212.192.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:c9:60:9b:f7:27:2f:31:57:33:13:95:7e:ee:b2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 6 11:13:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24cafa7895b8fa7aacb609b69584460c770dd9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:61:7c:82:a3:8e:02:1f:94:bb:2b:7a:01:64:
ab:d6:b4:e6:7b:62:1d:6f:c8:bb:e4:42:c3:95:f6:
3a:2c:ed:99:89:cf:c2:2d:6d:e2:e1:b4:07:73:21:
38:be:60:42:11:e4:ce:49:a1:4c:bb:86:0c:9e:63:
f1:3c:da:8b:d9:f6:05:75:85:62:07:5f:9f:3c:bf:
4e:d9:14:66:9f:cf:dc:ba:23:9e:1e:a6:58:5f:8b:
7c:13:64:94:a0:dc:99:f8:7b:59:aa:27:50:fa:19:
80:2e:03:f5:df:89:c0:40:73:bf:18:b9:30:ba:0c:
66:c9:63:1a:48:4b:af:e5:43:83:e0:ab:07:6b:8d:
ba:90:55:3a:e9:50:df:7b:84:5d:89:3e:fd:27:c3:
47:95:c1:56:10:08:64:31:c7:13:03:b1:40:af:5f:
6e:3b:ce:df:62:03:f4:6e:cf:68:76:52:b2:a0:9c:
ed:34:cd:68:0f:56:c0:8b:ea:40:dd:f3:1f:55:c3:
2e:01:a5:68:ff:0f:c3:3f:5f:9a:50:f9:32:33:e7:
44:da:3e:be:cd:0e:10:61:a2:7a:be:83:67:8e:22:
d6:20:9a:db:68:fe:12:8f:dd:22:91:80:aa:66:c8:
19:c4:53:39:ff:5c:77:7a:4b:6e:25:54:63:36:51:
e7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CA:FA:78:95:B8:FA:7A:AC:B6:09:B6:95:84:46:0C:77:0D:D9:BA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JMr6eJW4-nqstgm2lYRGDHcN2bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.132.0/22
212.192.5.0/24
Signature Algorithm: sha256WithRSAEncryption
38:01:bb:f2:bf:b8:94:02:66:96:67:89:bd:b2:e9:9b:73:5f:
a0:f8:ce:88:a1:25:95:fc:37:cc:a6:67:12:e6:bd:8b:e7:60:
d3:27:53:cb:c6:7a:1f:be:2e:86:85:c8:f5:50:d3:20:da:56:
e3:b1:bc:f7:31:15:32:87:a5:c8:bd:7d:bb:00:e1:8c:d7:1d:
2f:ae:4d:f4:6b:13:9d:e0:42:a4:a7:ab:88:ec:3f:11:f5:72:
26:b7:3c:09:68:6a:ed:ca:3e:61:1e:f9:9b:ce:ef:44:13:26:
12:4d:fe:30:f9:f3:f2:7e:6f:f6:bf:67:d8:b1:9f:13:60:76:
76:0c:22:34:c7:f3:56:14:01:ec:4f:31:c7:17:7e:24:e2:36:
8c:61:13:3b:ee:bb:d0:ac:a8:68:fb:62:48:69:ec:25:6a:28:
01:aa:3b:91:12:07:13:48:66:32:71:db:f3:ea:b0:76:13:63:
1a:50:41:76:13:43:95:21:d0:5c:23:f6:5c:76:71:6b:7f:6e:
f9:83:22:b7:07:09:72:90:2e:64:d5:8b:1f:72:ae:bd:7b:f8:
c4:60:85:47:be:80:8c:0d:ae:c4:51:b1:a6:cd:51:54:dd:55:
b8:71:ce:bb:03:c1:8a:04:c5:3e:06:d0:23:fc:b2:1f:3b:c2:
a6:cc:71:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:55 2023 by rpki-client on console-ams.rpki-client.org