Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/JDSgvszkb-JttOKRFB-FLqOd_NM.roa
File: JDSgvszkb-JttOKRFB-FLqOd_NM.roa (raw, json)
Hash identifier: i4QFoBCNHDuqU4Frorzvk/I9zj5JK+C6FbNs/PtS0J0=
Subject key identifier: 24:34:A0:BE:CC:E4:6F:E2:6D:B4:E2:91:14:1F:85:2E:A3:9D:FC:D3
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 0189D1100ED6429A4CB0D7049277EB35D7B2
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/JDSgvszkb-JttOKRFB-FLqOd_NM.roa
Signing time: Mon 07 Aug 2023 17:33:57 +0000
ROA not before: Mon 07 Aug 2023 17:33:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 94.154.44.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d1:10:0e:d6:42:9a:4c:b0:d7:04:92:77:eb:35:d7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Aug 7 17:33:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2434a0becce46fe26db4e291141f852ea39dfcd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1a:69:ae:0d:25:1a:53:13:be:cb:59:c0:35:
68:3d:66:e9:1f:ff:78:d6:29:60:0b:af:00:64:53:
1b:e7:c5:c6:4e:48:03:d8:7b:81:fc:a5:76:b5:f9:
28:3d:a0:6c:3c:57:79:b8:ba:2a:31:99:c9:35:c4:
62:18:9d:ef:55:a5:f5:ba:4b:45:90:6b:b6:9b:40:
09:dd:e6:f7:10:35:1b:88:eb:56:b3:27:ba:e0:c3:
21:03:a8:46:5e:93:3b:64:de:c2:ea:3a:d5:52:42:
ae:6c:01:de:15:3f:93:6a:a7:d3:a4:df:cf:b9:e3:
44:de:a6:9f:29:8e:5a:7a:e0:31:f6:5a:a6:cd:6b:
b1:32:7d:15:7e:29:35:5e:48:e6:9a:38:40:5d:4b:
2d:76:1b:b2:4c:a9:d6:53:c3:fb:1c:f0:00:60:a2:
6f:f5:ee:f2:07:92:a8:4b:b8:a9:4c:da:e8:44:15:
ae:56:85:93:50:33:69:db:ba:58:1b:f2:33:78:fd:
44:08:e2:3e:b6:90:e8:87:99:27:85:3c:60:f7:15:
0a:f0:d0:93:bf:42:86:f0:64:34:e7:da:55:30:64:
fd:3a:e1:97:9b:b4:d6:a3:b9:75:51:d1:51:13:a1:
0c:52:1d:bf:80:57:d1:4c:bd:a2:90:39:02:d7:08:
64:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:34:A0:BE:CC:E4:6F:E2:6D:B4:E2:91:14:1F:85:2E:A3:9D:FC:D3
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/JDSgvszkb-JttOKRFB-FLqOd_NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.44.0/23
Signature Algorithm: sha256WithRSAEncryption
87:a2:f6:67:8b:86:e5:f0:d6:8c:6c:0b:0b:cd:ed:c8:e1:43:
7c:d5:b3:f4:80:4f:83:22:2a:79:65:52:08:32:d5:c6:33:a6:
98:90:1a:b1:cb:6a:53:40:00:e8:d9:71:6e:99:cd:a0:27:58:
62:7c:ee:45:9b:18:98:fd:3d:b7:53:61:9b:29:f8:74:13:bb:
7d:a9:64:b4:6f:8a:a5:75:22:e9:5b:e7:5a:ae:4b:88:33:dd:
1a:24:9f:e7:0c:68:30:f3:b4:56:41:bd:83:de:49:09:e0:e2:
95:cf:29:cb:bf:46:af:3a:5d:af:6a:f4:37:bb:c7:dc:84:27:
b3:fc:33:fc:28:8d:2e:73:5e:f9:8e:cc:b8:8c:89:43:6f:61:
4a:f7:c8:04:85:06:f4:a2:3c:a2:4f:a7:dc:dc:d2:bc:5c:fc:
02:03:71:db:6e:9b:86:23:25:a3:b5:e7:3a:34:76:59:f4:6e:
dd:8d:b6:11:c8:3c:6b:fd:ad:d6:62:8e:3e:3a:39:68:e4:d1:
c7:37:a0:41:14:80:a9:9b:8d:d9:a3:24:cc:85:f7:47:dc:ae:
ca:4c:55:75:92:c2:53:da:f5:2b:a2:7b:52:69:6e:08:1a:aa:
83:db:64:33:f2:44:3d:90:ad:ce:68:36:2b:d8:a4:a3:54:48:
20:8e:3d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 09:23:18 2023 by rpki-client on console-ams.rpki-client.org