Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JTsPIAEuSLpbTBwYUJiL6pe-yuA.roa
File: JTsPIAEuSLpbTBwYUJiL6pe-yuA.roa (raw, json)
Hash identifier: 4TuiirKBboUAcoBi7Zi+14fq0xJFvBIo88UuhDI8WL4=
Subject key identifier: 25:3B:0F:20:01:2E:48:BA:5B:4C:1C:18:50:98:8B:EA:97:BE:CA:E0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C58A34DE22CC3636B3601026637BFAE78
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JTsPIAEuSLpbTBwYUJiL6pe-yuA.roa
Signing time: Mon 11 Dec 2023 11:29:06 +0000
ROA not before: Mon 11 Dec 2023 11:29:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16276
IP address blocks: 192.124.170.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
212.192.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:58:a3:4d:e2:2c:c3:63:6b:36:01:02:66:37:bf:ae:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 11 11:29:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=253b0f20012e48ba5b4c1c1850988bea97becae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:37:6f:38:ef:05:6d:86:a3:f6:f4:e4:93:
e9:8c:8e:25:84:a5:ca:11:ec:1b:b3:45:1f:5b:1d:
a2:22:49:35:e2:2a:6a:0c:f7:0d:53:e9:0e:e6:60:
0a:25:a2:9a:aa:e6:0f:9f:2c:11:8c:f7:49:c3:8d:
f2:4c:d2:b5:f1:83:20:85:fd:c5:f5:f5:61:1a:de:
8b:4d:0b:7e:d1:7c:05:2b:7c:ff:7b:d4:f1:9d:96:
64:79:73:25:40:c6:f7:74:a8:06:b3:c3:d1:f2:32:
0e:f8:ed:52:d5:b0:76:e2:c5:3f:8f:3f:11:19:b1:
67:97:d2:64:a3:b4:23:fa:41:12:f4:a2:1a:e7:45:
02:6e:e6:84:6e:5d:f3:bf:4d:48:b7:d0:33:ab:cd:
e3:41:8b:25:f4:e6:12:ac:7a:f9:90:c6:e0:15:ad:
9e:b1:e2:b8:ce:4c:8e:f7:3f:b6:e8:57:4a:a4:ed:
45:c5:64:9a:1e:fc:e7:1e:80:82:4d:ee:f6:e1:9f:
45:7a:42:c9:f5:11:2c:76:6e:ba:c9:19:15:6a:e1:
78:eb:db:dc:b8:0f:da:42:4a:de:fa:2b:b0:57:cb:
1d:52:b2:ed:c4:2d:41:19:60:f9:a6:2b:ab:95:16:
f1:60:5e:de:95:9a:86:e8:5d:89:e5:fd:04:05:bb:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3B:0F:20:01:2E:48:BA:5B:4C:1C:18:50:98:8B:EA:97:BE:CA:E0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JTsPIAEuSLpbTBwYUJiL6pe-yuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.170.0/24
192.124.172.0/24
212.192.253.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ab:f1:00:d3:f2:31:99:4e:bc:a5:15:09:e3:7a:e8:cd:14:
c5:f5:63:1e:bc:f4:c4:4c:da:19:ef:06:b4:dc:fd:84:cb:5c:
21:d4:1e:bb:69:29:07:e5:3c:58:54:4c:03:bd:d8:21:86:2e:
ae:0a:80:6f:e7:4d:13:cc:2f:ec:c2:78:b0:df:cf:eb:cd:2a:
25:8e:45:2d:e4:b1:d4:e2:4b:3f:c7:0d:3a:f2:35:b3:2c:da:
84:57:70:8c:ac:8f:94:83:96:d0:8e:7c:24:3d:6f:81:0a:47:
79:a2:01:13:a1:9e:f6:f6:44:d0:5d:03:7c:28:29:1b:b7:e5:
1c:15:93:bf:86:1d:71:b6:8b:ef:14:db:ec:3c:b8:02:c8:53:
ff:3b:42:bb:0e:ea:5c:01:81:d2:cd:42:b9:ee:6d:4f:09:91:
77:9d:41:50:f5:38:3f:c4:ca:99:df:91:30:f5:03:fb:60:87:
16:13:1a:e2:31:f8:41:b4:17:7d:11:d5:e8:69:fe:6b:fe:04:
b5:50:f5:ea:0c:45:3c:47:75:d0:c0:68:49:50:f5:5f:e4:8a:
6f:06:07:46:06:59:d6:95:21:e7:44:ff:41:9f:01:2a:13:0f:
32:5a:ae:54:22:0d:a4:c5:97:dc:79:3a:6e:30:8c:70:81:87:
f4:53:84:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:18 2024 by rpki-client on console-ams.rpki-client.org