Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Jislwq45Y-fy9iNIT7_K_obNtGE.roa
File: Jislwq45Y-fy9iNIT7_K_obNtGE.roa (raw, json)
Hash identifier: Dl9qw3tfnvlOdWh1LcycZ7KWNesSB1Dq3s56IsqVztw=
Subject key identifier: 26:2B:25:C2:AE:39:63:E7:F2:F6:23:48:4F:BF:CA:FE:86:CD:B4:61
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01875B9E6F14A75BB9BD82F4D219147A5429
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Jislwq45Y-fy9iNIT7_K_obNtGE.roa
Signing time: Fri 07 Apr 2023 12:08:42 +0000
ROA not before: Fri 07 Apr 2023 12:08:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203647
IP address blocks: 194.135.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5b:9e:6f:14:a7:5b:b9:bd:82:f4:d2:19:14:7a:54:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 7 12:08:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=262b25c2ae3963e7f2f623484fbfcafe86cdb461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e8:bf:ed:dd:54:ab:57:23:c0:22:84:15:40:
23:7e:42:14:67:51:3a:87:bc:ce:42:29:17:c4:84:
f8:4c:f3:27:25:73:ca:2c:22:4f:55:72:41:ae:c7:
a6:8b:fc:53:cd:12:3d:2a:c0:87:5b:f1:67:ea:d0:
a7:84:df:cd:79:90:f9:a8:de:39:8b:39:f2:99:e7:
01:ec:98:e2:dd:b4:af:5b:44:ee:5b:f7:bc:4e:c9:
de:e4:21:5e:b9:23:22:a3:d6:c2:83:5d:80:70:a2:
de:38:a8:1a:61:63:92:c3:77:42:7d:78:93:e4:78:
8f:bb:f9:bd:ad:93:44:8b:e3:ff:da:19:4d:1d:86:
2a:5c:96:66:5b:46:e1:72:33:53:8c:e9:97:83:13:
cf:01:18:72:71:4c:c5:61:2a:2a:03:54:07:d8:89:
d7:e4:79:1d:10:4a:9f:95:98:04:62:fe:c5:d2:4d:
24:6d:8f:69:86:99:41:1b:64:23:44:d3:3f:60:30:
5b:98:49:47:5f:35:b5:bc:65:33:92:66:6b:68:84:
7a:26:cc:48:6c:a3:d0:16:77:6a:89:1e:e7:f3:15:
25:92:13:83:61:3c:18:19:3c:f2:6c:4f:86:27:6b:
e2:5b:3b:74:14:1e:23:5f:59:8d:da:da:34:31:d0:
37:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2B:25:C2:AE:39:63:E7:F2:F6:23:48:4F:BF:CA:FE:86:CD:B4:61
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Jislwq45Y-fy9iNIT7_K_obNtGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.135.119.0/24
Signature Algorithm: sha256WithRSAEncryption
22:e1:f8:46:41:67:14:e5:59:b0:be:09:92:ec:cc:82:f9:95:
65:6f:27:08:58:84:94:08:1d:81:fa:12:35:11:57:71:a3:cf:
14:1b:d2:3d:e6:cf:14:c9:57:63:d0:03:50:1b:5c:83:86:7e:
da:a5:de:8a:a0:49:4a:52:6c:9b:16:2f:dc:66:38:5e:4b:4f:
d5:40:36:d9:48:34:80:a5:1c:66:62:3a:fe:c8:17:b7:81:c3:
fd:c7:a1:a1:89:3b:f0:4f:06:74:bd:8d:1e:dd:1e:6a:a4:4d:
d2:a2:e2:14:00:2f:96:6b:d3:3a:a3:0b:07:3c:88:50:72:07:
f2:2a:e0:6b:5e:26:14:8f:57:2e:72:43:29:cf:78:e5:ef:d4:
45:88:f4:f3:10:57:c6:9a:bb:07:6b:de:a8:56:d9:25:97:ff:
8a:f5:e0:ea:51:94:58:9a:11:be:22:50:a8:6e:a3:ea:da:f7:
a3:14:dd:cd:a6:89:11:c5:01:19:23:da:1d:dc:9d:b9:df:4c:
29:2a:9b:92:20:a8:73:09:3c:c3:f8:4c:0c:c1:87:9c:e6:24:
00:68:6c:05:fc:0a:67:24:fc:e8:81:7a:ee:ce:60:3c:6f:a4:
22:9a:aa:16:5d:65:e6:a8:16:d6:ae:0b:6a:86:ba:a0:06:fd:
6c:44:80:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:18 2024 by rpki-client on console-ams.rpki-client.org