Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JbJ--a_9vKXJaVJIzHO5TaWGxF0.roa
File: JbJ--a_9vKXJaVJIzHO5TaWGxF0.roa (raw, json)
Hash identifier: jd2SHFBMktV3xLcGG46eSsd9DvmBBSe/U1SHSsaFDsI=
Subject key identifier: 25:B2:7E:F9:AF:FD:BC:A5:C9:69:52:48:CC:73:B9:4D:A5:86:C4:5D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188BA9F043EA9D87C86566B9D08AC78B91D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JbJ--a_9vKXJaVJIzHO5TaWGxF0.roa
Signing time: Wed 14 Jun 2023 15:56:03 +0000
ROA not before: Wed 14 Jun 2023 15:56:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 193.124.91.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ba:9f:04:3e:a9:d8:7c:86:56:6b:9d:08:ac:78:b9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 14 15:56:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25b27ef9affdbca5c9695248cc73b94da586c45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8b:c7:a3:a7:6c:47:b8:b6:b4:84:a5:f5:ab:
ef:40:2c:fc:3e:ef:f3:54:00:55:dc:2c:d3:a3:6c:
91:2f:34:c8:e7:0c:3f:f7:55:3d:74:e5:51:4a:88:
25:ec:c8:f4:08:2c:1e:00:39:9d:b4:16:48:31:d9:
5f:26:f1:f2:2a:92:05:bb:e8:49:45:1d:c2:ed:ea:
74:36:89:d0:e2:07:f5:65:3e:a9:b9:9d:fd:ac:62:
a3:76:9d:e2:bb:cc:7f:54:e3:6c:20:19:7b:61:dc:
02:ea:d2:d7:c1:54:97:c9:c5:bb:51:32:60:ce:ea:
0e:06:83:59:0e:0c:c5:f2:04:4d:23:5a:ab:0c:c8:
19:2c:8e:fd:3d:99:fa:78:70:4c:c3:97:f9:8e:81:
77:9b:ce:39:4e:fd:1e:d6:b8:51:96:65:27:30:08:
9f:d0:88:9a:30:30:ca:37:6f:33:49:54:93:51:51:
e3:53:b3:67:df:49:74:1f:76:22:5b:99:e7:35:6e:
db:5d:ea:06:88:97:f3:af:2f:fd:3f:f0:d5:ef:82:
64:01:84:63:03:af:67:b2:83:4d:45:f7:dc:5a:89:
88:f4:75:4f:a7:ca:bd:17:5f:1f:b6:d8:a0:84:20:
d0:ad:77:db:10:9d:25:07:4e:75:19:7b:f7:9c:ab:
58:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B2:7E:F9:AF:FD:BC:A5:C9:69:52:48:CC:73:B9:4D:A5:86:C4:5D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JbJ--a_9vKXJaVJIzHO5TaWGxF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.91.0/24
193.124.95.0/24
Signature Algorithm: sha256WithRSAEncryption
23:bf:fb:19:e0:26:c7:ce:21:9a:c5:69:cb:67:e7:4b:b8:76:
4c:c5:ce:10:ba:b2:aa:04:f1:af:e1:de:c3:77:da:12:34:62:
7a:5d:97:f9:c5:fe:25:70:38:86:83:34:7f:67:ec:27:0e:85:
0e:1d:e8:cf:ef:c7:16:aa:53:85:c7:fc:de:09:ac:f2:39:15:
fe:88:d4:cf:09:9d:07:9c:26:11:10:63:a6:9b:12:76:ff:32:
85:4f:12:b6:4c:85:7e:d7:81:30:00:4b:80:91:28:cd:13:03:
4e:ce:57:8b:f0:c6:5f:2c:ca:4d:ca:33:8d:cd:e4:f9:23:4d:
f9:70:a0:39:7d:40:ce:37:a5:0e:9b:12:b0:80:ff:70:31:b4:
c6:a0:f2:ce:f4:a1:15:e3:9a:6d:a2:cd:c4:d4:a9:62:ad:7c:
dd:0d:77:02:f0:05:95:e7:7f:bd:90:b5:56:68:d8:e7:71:0b:
01:29:7a:ac:08:a8:44:09:0e:cf:f2:e9:64:e4:df:b9:69:07:
55:47:ee:e5:3a:47:3c:c4:55:52:19:1e:5f:dd:d5:05:e8:30:
1f:ca:ba:55:06:28:28:4f:6d:65:c5:3b:b4:ed:60:f0:89:c5:
50:87:1f:cb:c5:b4:2c:f0:08:be:da:a1:dc:91:56:2e:cc:fc:
de:a0:69:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:00 2023 by rpki-client on console-fra.rpki-client.org