Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Jbz6Wqp1xawANJDIR2Yr0Kl529o.roa
File: Jbz6Wqp1xawANJDIR2Yr0Kl529o.roa (raw, json)
Hash identifier: FMwpamYdE8qzyO/SELO/ZT1D6LrD43aUvkFmPpByV8k=
Subject key identifier: 25:BC:FA:5A:AA:75:C5:AC:00:34:90:C8:47:66:2B:D0:A9:79:DB:DA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018ABC7DD3A57901DCA5D69EF3DD15182739
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Jbz6Wqp1xawANJDIR2Yr0Kl529o.roa
Signing time: Fri 22 Sep 2023 10:44:37 +0000
ROA not before: Fri 22 Sep 2023 10:44:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51722
IP address blocks: 194.87.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:7d:d3:a5:79:01:dc:a5:d6:9e:f3:dd:15:18:27:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 22 10:44:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25bcfa5aaa75c5ac003490c847662bd0a979dbda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6c:c7:84:b7:1f:a5:da:2b:cd:6b:b8:7d:6c:
06:cc:74:41:63:02:6f:2b:7d:c9:8b:a7:5b:cb:0a:
3a:dc:a9:8f:28:10:94:66:33:bf:f2:93:8d:1c:67:
5d:e5:f2:b4:2a:b9:d1:df:57:df:99:a0:37:00:93:
dd:be:61:7e:73:7f:d0:22:30:60:4c:f0:b0:3e:84:
d0:ee:19:a3:c5:a4:2f:a6:e3:32:cc:f6:18:b7:9e:
86:65:ce:ed:30:ee:da:e5:50:6b:30:03:19:c7:30:
bb:70:21:78:00:42:5e:18:94:bc:97:1e:60:ed:d5:
47:bc:77:bd:e1:ea:8a:c3:0b:b8:84:fa:0c:9b:27:
49:94:bd:a6:9b:0a:44:d2:5a:e2:50:fc:b0:9e:1f:
95:a7:1c:27:96:50:80:05:05:7b:85:2f:13:63:53:
33:d2:ec:69:65:d8:6e:8e:e4:6f:4c:67:8c:bc:37:
67:00:7f:f6:a0:f3:34:6e:bd:94:7b:69:fc:20:52:
f4:ef:26:00:cc:63:6a:30:ef:82:96:11:d8:0b:6c:
e7:7f:e8:67:d7:c4:8d:60:c0:b8:d5:19:44:7f:f5:
36:9f:2f:88:d6:29:57:a7:20:0b:20:8c:fe:d1:26:
54:0a:8d:07:b8:dc:a5:00:56:17:2f:9a:f8:55:37:
fa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BC:FA:5A:AA:75:C5:AC:00:34:90:C8:47:66:2B:D0:A9:79:DB:DA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Jbz6Wqp1xawANJDIR2Yr0Kl529o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.170.0/24
Signature Algorithm: sha256WithRSAEncryption
66:cc:6d:3d:a7:e5:6f:88:73:c8:95:de:3c:a5:06:90:37:6b:
d8:7d:7f:30:04:cb:f1:fd:36:7a:5b:7c:45:1b:b9:ce:c0:4e:
cd:f7:a7:d3:a9:18:24:dd:3e:dc:ba:09:a3:d9:4c:dd:dc:e7:
18:29:6a:2f:81:19:8f:71:9d:0b:82:8a:86:6c:ad:84:07:9a:
41:67:82:eb:69:b6:fb:78:ea:b9:02:e3:8a:11:82:43:8d:57:
eb:99:99:bb:35:39:7f:b9:40:11:44:d1:12:3e:1d:8a:1a:eb:
8c:a0:e8:6e:a1:bd:68:bb:a9:f8:47:b4:c9:8f:54:14:81:ef:
08:74:f9:8d:70:e5:8a:73:c3:11:42:50:8c:71:72:ce:09:49:
62:28:ac:6d:b9:4a:24:b6:21:f1:26:60:d8:8e:7c:0b:88:b6:
3a:d7:e9:9c:0b:f6:e1:36:95:78:89:35:6a:e1:df:a8:7a:c3:
13:11:8d:9b:40:ce:5f:1d:19:99:f1:04:5f:bf:a4:d4:15:a7:
b2:dc:86:18:a2:e3:76:0b:5b:dc:ca:95:71:70:34:f4:88:23:
82:5e:ac:06:03:cd:d3:47:65:b8:e8:56:b9:8f:74:68:61:1e:
a9:87:10:0c:65:50:2a:70:5e:30:bf:5a:0a:fe:dc:1b:4e:e2:
10:82:a1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 10:19:55 2023 by rpki-client on console-fra.rpki-client.org