Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jqPOYSZpaeeOGvinhRSjFj8ad9o.roa
File: jqPOYSZpaeeOGvinhRSjFj8ad9o.roa (raw, json)
Hash identifier: 1OWkHxoRH/LFE0QsotE5SIx/Q/w1PMuQ3ybEQxVusHs=
Subject key identifier: 8E:A3:CE:61:26:69:69:E7:8E:1A:F8:A7:85:14:A3:16:3F:1A:77:DA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018757025191CF6C3C14FA1FE09C60154F4C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jqPOYSZpaeeOGvinhRSjFj8ad9o.roa
Signing time: Thu 06 Apr 2023 14:39:42 +0000
ROA not before: Thu 06 Apr 2023 14:39:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 194.135.104.0/24 maxlen: 24
193.124.24.0/24 maxlen: 24
195.133.21.0/24 maxlen: 24
195.133.26.0/23 maxlen: 23
195.133.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:57:02:51:91:cf:6c:3c:14:fa:1f:e0:9c:60:15:4f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 6 14:39:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ea3ce61266969e78e1af8a78514a3163f1a77da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0c:bc:7c:30:48:02:58:19:68:2e:4b:1d:ad:
1d:b5:1f:5e:33:eb:6c:46:7f:0e:b0:5e:96:10:98:
bd:73:a3:95:f1:cd:b1:e1:3c:32:d6:de:4b:ef:50:
9b:bb:8d:46:d8:10:3c:e6:30:81:f9:a5:4d:fa:3b:
54:72:d0:31:ff:59:50:fa:7e:df:04:3f:61:fd:76:
10:a7:5d:e7:9c:51:5d:2c:3b:fe:a3:41:02:b9:cd:
07:f7:9a:16:76:22:30:c5:aa:81:49:b7:d0:97:4d:
9c:18:a5:87:21:c0:95:12:b4:20:ea:1e:e2:2c:4b:
42:9c:bf:78:c2:5c:32:ec:fd:12:c0:b8:b0:32:06:
7f:9e:30:b0:83:10:d7:e0:da:1a:a0:90:88:fc:d2:
50:4a:aa:9b:1b:a7:87:08:5d:1d:de:c2:a9:d0:51:
5e:67:b2:12:c8:d8:29:f0:6a:2c:71:66:36:9e:1f:
11:71:6c:ec:9a:16:a6:d0:f3:05:3d:07:2e:d9:c3:
f5:65:88:db:56:bf:09:d7:e6:b0:04:e9:c9:76:ed:
34:b0:cc:6a:74:2e:b8:b7:32:16:24:f6:bb:b2:b5:
2b:10:3e:ae:58:4e:b0:3b:6b:87:2e:cd:f3:09:ed:
0b:d7:d5:ec:c4:e6:69:01:85:bd:54:b9:67:e8:8b:
a7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A3:CE:61:26:69:69:E7:8E:1A:F8:A7:85:14:A3:16:3F:1A:77:DA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jqPOYSZpaeeOGvinhRSjFj8ad9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.24.0/24
194.135.104.0/24
195.133.21.0/24
195.133.26.0/23
195.133.59.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d5:87:e6:95:09:6c:07:65:3d:67:f8:be:95:53:c5:10:5d:
53:1a:33:5e:07:37:fe:59:79:cd:61:44:94:10:24:1d:96:61:
20:85:e0:8d:c5:40:21:0b:f3:cd:a9:a0:7b:61:9d:ad:f5:9e:
8f:db:e5:44:0b:a8:dc:2b:b3:02:b4:b8:63:96:c7:04:9e:0b:
77:d2:9a:a9:63:c4:ea:9d:c9:9d:b4:98:2e:1a:87:e2:a2:73:
7e:40:4b:10:8f:ac:3e:87:29:e2:1a:4e:2e:6c:a1:20:76:76:
34:86:b5:f5:b6:9f:26:da:1e:3d:bf:63:78:4e:d6:cc:2f:d5:
01:fe:de:af:bd:65:26:1d:82:de:7a:c9:dc:39:5c:6b:3b:d4:
8e:e4:aa:e6:3d:c5:fd:b8:7a:45:55:11:dd:2b:0a:3b:be:66:
af:ae:4e:fd:ae:fc:dd:47:e0:93:16:8a:7c:b9:0f:58:23:89:
2a:68:64:5c:50:dc:c3:e8:0a:6f:ec:06:2d:93:53:3d:92:49:
04:94:68:dc:3c:83:0a:2f:3c:6f:3f:a3:ae:32:2c:40:be:2f:
29:bc:9e:0a:01:ee:9f:45:58:b1:24:56:a6:ec:3f:57:98:7b:
03:dc:25:f2:dd:f7:72:33:26:59:9b:c1:9a:8f:82:5b:bd:87:
ab:fb:75:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:04 2023 by rpki-client on console-ams.rpki-client.org