Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JMrkS_NtIvXJ5Cy3Fzta8_vLQfk.roa
File: JMrkS_NtIvXJ5Cy3Fzta8_vLQfk.roa (raw, json)
Hash identifier: QbUGCQuq5h8PxvqL/tg3KvwcKHzzS1iE62AEo5t0VXo=
Subject key identifier: 24:CA:E4:4B:F3:6D:22:F5:C9:E4:2C:B7:17:3B:5A:F3:FB:CB:41:F9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189543F281BA67C61AC4976383FC6FEF270
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JMrkS_NtIvXJ5Cy3Fzta8_vLQfk.roa
Signing time: Fri 14 Jul 2023 11:52:52 +0000
ROA not before: Fri 14 Jul 2023 11:52:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139482
IP address blocks: 194.180.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:54:3f:28:1b:a6:7c:61:ac:49:76:38:3f:c6:fe:f2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 14 11:52:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24cae44bf36d22f5c9e42cb7173b5af3fbcb41f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:81:9c:a3:48:5a:fa:e9:0d:34:c6:b2:23:ce:
9b:23:5f:58:67:4a:ce:1a:2d:12:d3:7b:cf:9f:aa:
ef:e0:33:7c:5c:60:03:3f:07:21:e1:6d:6c:9b:79:
b4:a8:b2:8a:ca:91:3a:75:6d:9a:eb:3d:52:75:79:
11:70:c2:20:60:95:06:a9:cb:7c:de:b8:32:6b:d7:
ce:17:43:e1:d8:b5:1b:61:66:68:ba:a0:d1:c0:24:
1a:67:f8:b7:8c:96:c4:24:63:de:4e:24:df:b4:3c:
6b:19:58:4f:6c:06:b1:ad:58:79:d4:40:ad:3c:4b:
79:fb:79:63:68:8b:fd:bf:ae:b1:b0:09:3b:b3:8b:
04:3a:44:11:37:0c:39:ce:35:92:50:e0:ce:fd:83:
de:50:b8:55:c5:b6:8f:3c:33:2d:35:f5:78:41:b9:
24:b9:d7:6f:9c:fb:24:a0:09:2b:c5:77:96:35:cb:
d2:7b:4e:8a:9b:82:28:08:81:a5:35:af:42:53:ca:
0e:9d:ad:c4:c7:66:ed:a9:7e:ee:30:9c:0f:7f:b1:
63:32:8b:77:71:d6:18:35:d2:b5:5e:6b:d0:f1:9a:
b7:74:a0:fa:e0:73:6f:1e:15:90:1a:d9:47:5a:ae:
5b:dd:b6:b0:9b:0e:a3:1f:30:a7:fc:e6:97:bf:e1:
02:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CA:E4:4B:F3:6D:22:F5:C9:E4:2C:B7:17:3B:5A:F3:FB:CB:41:F9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JMrkS_NtIvXJ5Cy3Fzta8_vLQfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.37.0/24
Signature Algorithm: sha256WithRSAEncryption
53:d9:89:60:06:03:05:75:e2:02:46:23:2e:91:e1:c3:f8:e6:
f1:ec:8d:ee:61:41:8c:08:69:7a:5f:b8:ec:16:7f:a0:71:35:
6c:21:f1:04:cb:77:57:55:08:c1:00:30:97:3f:d9:d2:ea:e0:
bc:48:2f:2a:00:ba:78:3e:d4:45:a7:f7:31:6d:64:22:56:82:
47:bf:e1:5c:b7:80:c2:fa:81:e8:4b:42:5f:35:e0:3e:98:b0:
b4:9b:5f:7c:e7:20:fb:8b:65:58:4c:25:a3:16:87:d8:84:d7:
8a:d0:8b:ec:a7:a1:e7:e3:9d:ba:8f:d9:07:95:35:bd:89:30:
e0:25:98:78:61:5a:0f:fc:0f:77:36:fc:90:01:8e:99:97:3c:
72:45:95:84:d5:92:79:6e:81:94:23:ba:d0:77:5b:ed:57:bc:
81:25:8d:dd:9f:5d:b9:0a:c2:95:cf:2f:1b:23:e6:ed:fb:ef:
e1:7e:a4:d0:f5:da:5d:df:e9:2f:69:35:7c:01:e6:b2:46:ac:
16:bb:68:86:43:11:3b:d0:28:93:a5:96:6e:33:cf:07:85:b6:
12:93:6e:dd:1a:13:ff:73:8d:9e:14:d3:c4:84:11:4b:4a:3c:
a1:7d:54:91:44:13:85:ca:8d:4a:55:c5:9f:67:2b:02:5e:f5:
ff:c1:dd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 9 14:41:17 2023 by rpki-client on console-ams.rpki-client.org