Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/JIqoj86dIGGh5L9gqboz0rvZXkE.roa
File: JIqoj86dIGGh5L9gqboz0rvZXkE.roa (raw, json)
Hash identifier: lMpQRaakj4WZJh3IcfiLZ8F9Bp9ix8AkGmP/0Y4c8XQ=
Subject key identifier: 24:8A:A8:8F:CE:9D:20:61:A1:E4:BF:60:A9:BA:33:D2:BB:D9:5E:41
Certificate issuer: /CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Certificate serial: 01856D016BC95ED7408F9122E0FD7AD06AFA
Authority key identifier: F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/JIqoj86dIGGh5L9gqboz0rvZXkE.roa
Signing time: Sun 01 Jan 2023 11:04:47 +0000
ROA not before: Sun 01 Jan 2023 11:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42926
IP address blocks: 185.70.84.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:6b:c9:5e:d7:40:8f:91:22:e0:fd:7a:d0:6a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Validity
Not Before: Jan 1 11:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=248aa88fce9d2061a1e4bf60a9ba33d2bbd95e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:6b:c6:c1:37:25:ec:b5:c6:7e:c0:68:52:
f8:cf:23:2f:d9:10:7b:7e:10:28:93:50:dc:a8:77:
30:9b:ea:73:9d:43:91:89:0e:1f:af:05:25:7f:50:
a6:69:64:ae:2c:2d:d5:dc:b8:b0:7a:4e:88:fc:8c:
79:ba:b5:db:cd:a8:43:94:4a:43:30:22:4c:34:16:
c7:f2:4d:08:8f:0a:77:ef:78:19:73:e3:71:b8:d7:
79:37:bd:a4:dd:f7:50:a5:e6:cd:d1:37:4b:a4:0b:
5c:7d:8c:31:dd:fe:b1:6b:7d:ec:e5:69:f4:3c:6b:
2a:62:a1:46:ee:4e:af:33:1d:32:5c:e9:1c:70:37:
76:2f:ca:66:1f:5a:23:fc:71:26:1c:6f:22:a8:3c:
14:9d:de:f9:b8:de:d8:9d:06:84:a5:ab:13:68:e8:
82:6e:3b:67:43:4d:04:3b:36:1b:c0:73:12:f3:87:
25:d5:76:7c:fd:79:0f:02:2c:91:62:09:77:58:e2:
94:8e:37:46:b9:9f:d4:22:7c:42:46:18:1d:25:12:
e4:3a:40:bb:c3:b6:fb:9a:8e:47:5b:96:e3:7a:a8:
80:6d:0c:bd:d2:8e:9d:d1:cd:48:5e:5b:e3:f7:02:
a0:8b:42:ae:38:f7:24:40:f4:af:2b:b0:28:63:b4:
dd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8A:A8:8F:CE:9D:20:61:A1:E4:BF:60:A9:BA:33:D2:BB:D9:5E:41
X509v3 Authority Key Identifier:
keyid:F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/JIqoj86dIGGh5L9gqboz0rvZXkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.84.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:a1:c9:10:bf:87:88:77:ba:0e:ca:3f:1e:30:94:ba:6f:ee:
2a:92:e1:02:93:a4:3f:b6:fb:83:a5:0e:68:b6:bf:9f:e6:77:
34:2d:3b:15:79:b2:db:97:f5:39:86:00:87:a5:21:8a:b0:83:
a0:73:40:5f:9c:bd:4e:20:7d:0d:0b:36:e5:c2:4e:00:7d:72:
b3:26:61:f7:3f:90:f6:ee:31:18:1e:bb:52:01:76:79:69:c1:
c8:90:77:45:33:0a:02:ad:38:7d:15:fc:98:c6:5f:d5:b2:72:
7d:3f:41:e1:5f:9a:6e:35:88:6e:85:d1:01:8a:c8:62:5c:a5:
61:81:3d:29:a1:e2:1a:37:d5:e9:41:db:e0:13:e4:df:a6:c1:
00:85:df:2a:a5:8d:89:54:58:3f:e6:d6:1f:93:a4:54:78:d9:
09:86:9d:6c:02:fd:b8:1d:68:ae:8c:5d:f3:0a:04:eb:b7:49:
c3:cf:59:53:98:1e:44:ac:ea:37:a7:08:95:69:ad:92:dc:96:
aa:0c:0b:fd:2e:de:b2:cc:5a:22:ac:5c:af:ed:a8:f9:e7:26:
e3:f8:0d:30:fa:c9:fd:b3:55:aa:e7:db:cd:88:1e:01:62:68:
ae:f4:b4:05:f3:93:95:9e:3c:8c:f4:fb:bd:bd:19:a9:f9:76:
15:f7:51:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:04 2024 by rpki-client on console-fra.rpki-client.org