Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/JFA-KCGrbwZOITU4KT70M06f6nM.roa
File: JFA-KCGrbwZOITU4KT70M06f6nM.roa (raw, json)
Hash identifier: 7HYzgm8MFdXBtXEeC+3SNmm8kiTpPDCSJNw8uvdKyYk=
Subject key identifier: 24:50:3E:28:21:AB:6F:06:4E:21:35:38:29:3E:F4:33:4E:9F:EA:73
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0185F38F3ACB143CFBDED124F09BB15CF90B
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/JFA-KCGrbwZOITU4KT70M06f6nM.roa
Signing time: Fri 27 Jan 2023 14:08:48 +0000
ROA not before: Fri 27 Jan 2023 14:08:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47774
IP address blocks: 193.231.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:8f:3a:cb:14:3c:fb:de:d1:24:f0:9b:b1:5c:f9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 27 14:08:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24503e2821ab6f064e213538293ef4334e9fea73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:58:dc:76:c9:50:c7:33:49:cd:8b:ec:35:df:
e7:12:32:79:ee:b9:8f:77:57:b8:5f:f0:d2:59:b1:
f3:dd:90:ef:dd:3b:e5:0a:36:7e:37:c8:00:54:06:
10:64:13:64:f2:95:b7:ed:6a:97:4c:71:6a:e6:64:
62:f0:4a:96:9b:b9:41:49:76:86:08:3b:14:49:bb:
e9:77:a5:bb:3e:b2:32:01:d6:5a:34:98:e7:a7:60:
e4:d8:89:4e:02:87:9c:9c:77:d3:b0:46:05:24:24:
3a:6e:7b:f8:30:0e:e9:bd:fa:a8:2a:bd:b5:11:03:
e3:19:85:06:1a:0e:67:cf:bc:d9:99:97:a7:a7:88:
0b:20:76:81:3b:e2:89:5b:00:2e:b2:fa:6e:b3:e5:
ae:aa:6b:1f:d7:22:5d:72:2b:1c:56:03:52:7a:8e:
c6:5f:ed:14:45:a0:ba:46:ac:60:49:88:aa:ad:90:
ff:8e:56:7e:7b:90:9e:5c:f9:ba:53:65:9a:45:2e:
20:df:2a:a6:b0:4f:16:d0:f9:20:f9:df:84:e6:43:
b8:d7:d0:5e:42:b4:38:b1:7e:d3:9b:04:e0:9d:c5:
dd:ad:c5:c0:26:e4:1f:93:b8:e8:d8:2d:29:96:8c:
bc:ba:2b:93:52:1f:92:1a:a3:98:57:fe:7a:06:b7:
b9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:50:3E:28:21:AB:6F:06:4E:21:35:38:29:3E:F4:33:4E:9F:EA:73
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/JFA-KCGrbwZOITU4KT70M06f6nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.231.111.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b2:a2:21:ab:69:1f:6e:d5:b5:56:dc:29:f3:7c:d3:f4:f0:
ff:54:60:2f:8a:19:ae:34:f0:be:b0:f6:8c:a6:69:8a:c2:30:
4d:c2:d0:78:42:55:26:5e:cc:19:44:5f:4e:cd:07:e4:c4:f9:
04:9b:9b:0c:cb:84:c5:93:33:36:ca:b0:59:bb:1c:72:3c:a7:
07:dd:96:5f:03:91:34:a7:f8:4d:02:4e:da:c6:e3:81:24:00:
59:92:2e:15:b5:df:f2:a7:8f:43:82:67:a4:48:ce:ff:a3:56:
71:03:4d:00:b6:a0:44:4f:6f:2e:7a:1a:69:07:cc:87:2d:57:
7e:b3:fa:ac:84:99:63:48:c2:ca:1c:4e:d9:eb:b6:eb:f3:75:
f0:7e:84:f8:87:44:4f:f4:9d:56:35:9d:da:55:32:bd:ba:f4:
1a:e6:c9:76:d4:56:3d:b9:94:bf:1f:6f:94:f3:48:e9:ea:b8:
f8:9d:ec:9f:6f:d5:62:83:aa:23:53:03:4a:57:de:66:fb:b5:
f0:40:3c:11:f0:00:b3:bd:6c:88:b0:37:79:37:69:e5:f9:9e:
a9:95:de:40:1c:58:48:78:fd:f5:67:58:e4:7f:90:50:56:91:
f0:55:de:8b:79:34:ca:43:e2:63:9c:03:44:a7:62:30:73:ea:
9b:37:ae:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:06 2024 by rpki-client on console-fra.rpki-client.org