Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jib9LlNNBxTCyoCigsSZj4fQn7Y.roa
File: jib9LlNNBxTCyoCigsSZj4fQn7Y.roa (raw, json)
Hash identifier: 3wbNP/MnFblUzgqBuZi3IKY0KUrHEpHJRD12/5kW+7Q=
Subject key identifier: 8E:26:FD:2E:53:4D:07:14:C2:CA:80:A2:82:C4:99:8F:87:D0:9F:B6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C2A2957D46BA22F76CC2723F663778C91
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jib9LlNNBxTCyoCigsSZj4fQn7Y.roa
Signing time: Sat 02 Dec 2023 10:53:21 +0000
ROA not before: Sat 02 Dec 2023 10:53:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 192.124.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2a:29:57:d4:6b:a2:2f:76:cc:27:23:f6:63:77:8c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 2 10:53:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e26fd2e534d0714c2ca80a282c4998f87d09fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:40:2e:3f:48:ce:0d:0b:27:d3:58:55:32:
95:45:1c:37:80:dc:76:f1:40:50:0d:4d:1c:70:85:
09:f6:2e:e5:25:b4:2d:53:cb:e2:7f:90:3e:bf:e2:
10:bd:fc:9d:2e:34:db:21:c2:a9:4b:51:25:a2:fa:
2c:e2:a6:21:d2:5d:49:80:0f:e2:eb:34:79:ba:da:
6c:80:cb:e2:9a:a9:e1:27:da:3a:e7:dd:9c:6c:41:
72:67:dc:eb:45:5b:ff:99:0d:c3:95:42:e2:5e:22:
2f:c0:78:18:ac:d7:35:12:69:32:f5:af:3d:29:d9:
b8:41:87:10:2c:d3:a8:10:e3:2d:5e:a8:11:7d:0c:
2c:3c:8c:4c:17:3b:0d:64:67:3d:44:7f:6f:7b:38:
03:75:5e:5f:81:f6:c7:04:cb:dd:ec:6b:b1:be:03:
34:8c:9f:eb:02:4d:ea:fb:fe:bd:1a:29:e5:ef:3d:
c4:3f:23:fa:43:17:53:7d:3c:d1:c9:b9:90:df:2c:
6e:f2:69:c7:f7:75:5c:b3:43:d5:af:c0:fe:00:14:
83:1c:b8:b6:36:57:27:5b:ec:bd:20:aa:81:79:48:
d1:b6:fd:1a:59:e2:70:56:37:75:00:13:07:e2:89:
f4:84:79:e2:cd:b9:97:31:71:99:77:bc:33:a1:e9:
03:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:26:FD:2E:53:4D:07:14:C2:CA:80:A2:82:C4:99:8F:87:D0:9F:B6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jib9LlNNBxTCyoCigsSZj4fQn7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.175.0/24
Signature Algorithm: sha256WithRSAEncryption
36:c4:f2:7d:91:e0:e8:f9:00:95:24:94:10:3f:1e:cf:bc:e2:
5b:f8:47:f4:04:4b:25:ac:6c:c0:e8:01:ac:c3:4a:ff:8e:2d:
ca:13:59:88:9b:4e:33:0a:b3:33:90:88:2d:9c:39:e8:42:b6:
cd:25:99:8a:be:51:f2:c4:99:9b:dc:1d:73:11:2b:56:7e:51:
00:bd:50:d5:31:bf:46:3c:a4:e1:2a:27:4a:bd:b1:0a:fc:0a:
2a:73:45:86:5a:d8:77:bb:1c:30:1f:96:3d:04:b8:a2:27:76:
de:1b:1e:53:d6:6f:a5:b0:62:49:40:d6:78:28:30:3b:ab:ba:
34:ed:a6:99:7d:b8:fb:ea:7b:82:4a:f0:9f:21:38:2e:63:38:
e0:27:47:bb:61:0a:9e:9e:65:86:9b:46:67:d4:62:a1:8c:21:
9d:b5:3c:ed:93:cd:92:61:60:33:69:56:f8:e3:a7:87:d9:32:
8e:a7:d0:88:07:3e:65:f2:e5:27:34:63:cb:73:e9:15:c3:3f:
c3:da:57:35:a6:b7:22:ed:1a:5f:68:ff:23:23:44:bf:f1:2f:
61:be:85:5f:b3:86:3a:61:d1:e6:03:44:cf:50:46:b7:fb:e4:
51:76:c0:9b:6e:c2:e9:9a:a7:6d:00:36:f4:7a:2a:2f:f7:5f:
65:06:8c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:21 2024 by rpki-client on console-fra.rpki-client.org