Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jlo8ByMGYxdfwCtmQ3HdCQraBu8.roa
File: jlo8ByMGYxdfwCtmQ3HdCQraBu8.roa (raw, json)
Hash identifier: dtoQgiC7w6ZEuFHg1MtFekt9BBctx9BCxgLpH7bwPmo=
Subject key identifier: 8E:5A:3C:07:23:06:63:17:5F:C0:2B:66:43:71:DD:09:0A:DA:06:EF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189C05BA5E97EFAB3B71FCB7F6B6C79DAEB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jlo8ByMGYxdfwCtmQ3HdCQraBu8.roa
Signing time: Fri 04 Aug 2023 11:42:59 +0000
ROA not before: Fri 04 Aug 2023 11:42:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50448
IP address blocks: 194.87.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c0:5b:a5:e9:7e:fa:b3:b7:1f:cb:7f:6b:6c:79:da:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 4 11:42:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e5a3c07230663175fc02b664371dd090ada06ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:10:1e:e6:a8:0b:ab:13:7e:06:fb:16:6e:68:
3e:4c:b8:77:ef:31:25:44:d1:8a:c6:5a:68:99:aa:
ed:ba:73:81:12:2d:a6:bd:53:9c:95:1a:15:e4:16:
18:20:58:76:c9:d8:18:61:5c:ee:ef:60:49:01:fb:
d7:d9:2c:12:6c:f0:ca:e2:b7:af:7b:63:03:70:3c:
78:99:b6:a8:2c:46:46:26:fe:de:f9:94:bb:48:12:
1a:90:e8:6c:de:4a:89:0c:33:51:0c:5f:57:8e:ce:
ea:fc:9a:34:3e:53:ae:24:60:94:6d:38:35:e3:2e:
89:dc:f9:78:71:6d:0c:15:c1:ef:db:2e:ff:9d:ac:
f7:af:9f:55:34:23:45:cd:c7:19:62:0d:3d:ee:5a:
72:06:82:29:41:58:d1:f7:bf:6a:2a:13:ee:12:88:
42:c7:ad:69:82:c4:2b:0d:03:2d:21:ac:f7:f8:38:
b7:68:f5:d5:16:76:06:7e:5e:34:2a:99:37:6b:82:
2f:18:3c:45:8a:fc:f7:29:22:77:ac:72:a6:37:94:
4f:f0:d1:57:b3:65:74:27:ee:03:b7:8b:63:d3:ca:
55:8d:c7:e8:8f:30:68:5a:87:9b:69:0c:ba:e0:b2:
c9:ac:f6:fc:91:de:01:f7:cf:a4:7b:8e:f2:3d:8e:
e0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5A:3C:07:23:06:63:17:5F:C0:2B:66:43:71:DD:09:0A:DA:06:EF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jlo8ByMGYxdfwCtmQ3HdCQraBu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.162.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:dc:95:e3:ea:4e:55:29:e0:e8:d4:58:09:cc:08:8f:de:61:
c9:12:4c:a8:05:e3:f2:3d:87:fe:47:ff:05:4c:03:05:e8:db:
e9:b6:9d:53:fc:65:c4:e3:94:91:83:ca:8c:f4:4a:96:50:64:
f3:6c:ac:fd:ee:2f:0e:d3:73:49:08:49:93:68:d3:54:3d:8c:
81:b2:c2:68:f6:82:ba:46:2d:f6:99:29:05:ad:fe:74:75:34:
69:92:88:4d:a5:5b:f9:f1:08:11:91:63:3f:ad:0c:4a:b0:b0:
ab:10:b6:b5:2e:3a:28:dd:71:ed:f9:9f:b9:7a:d4:a4:64:d9:
4d:07:1c:bf:cf:4c:fc:63:68:6d:ee:f1:71:a9:ff:4e:b5:b7:
58:70:92:2a:f9:3c:3f:51:6b:dc:f9:5b:c2:7c:36:62:47:3a:
29:03:12:f5:8d:17:45:88:83:30:07:73:d8:43:ca:18:82:90:
aa:4b:0f:38:1d:b9:22:07:ba:61:e3:a0:b1:7d:d3:52:5c:b4:
a1:b1:2a:31:3d:89:f8:8c:92:81:95:41:1f:06:18:75:b7:5a:
3c:43:4f:ed:e0:68:61:84:40:39:92:85:96:60:3c:57:29:61:
fb:aa:c1:65:07:2a:2c:92:cd:df:a8:b0:6d:99:5a:0c:4f:7f:
13:f7:a7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:19 2024 by rpki-client on console-ams.rpki-client.org