Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/j1FN3I9-v1n7OYtMO3cdXxYA8gc.roa
File: j1FN3I9-v1n7OYtMO3cdXxYA8gc.roa (raw, json)
Hash identifier: Mvh+u3jhqd9WS02D6xXaj2i4nFGVpGE3Gex6cmCnoxQ=
Subject key identifier: 8F:51:4D:DC:8F:7E:BF:59:FB:39:8B:4C:3B:77:1D:5F:16:00:F2:07
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 0185EFA7789840B4C85A46DA69BADDF818DC
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/j1FN3I9-v1n7OYtMO3cdXxYA8gc.roa
Signing time: Thu 26 Jan 2023 19:56:48 +0000
ROA not before: Thu 26 Jan 2023 19:56:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57588
IP address blocks: 194.39.228.0/24 maxlen: 24
194.39.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 May 2023 10:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ef:a7:78:98:40:b4:c8:5a:46:da:69:ba:dd:f8:18:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: Jan 26 19:56:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f514ddc8f7ebf59fb398b4c3b771d5f1600f207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:df:6e:cf:9e:09:bf:5c:b6:4e:d1:f1:52:9e:
1e:3c:fe:6d:41:de:63:1e:ec:01:68:ee:32:97:77:
90:d6:79:2c:f9:80:1e:c3:43:70:09:6f:6b:72:2f:
ca:9a:db:82:8e:a0:d6:c7:16:ca:82:0b:df:e4:95:
46:97:e6:55:7a:bd:31:2a:a5:30:6b:08:e4:aa:cd:
57:73:07:10:2a:0a:ce:6c:61:c3:af:90:7b:c9:f7:
2e:8d:85:eb:b6:83:af:7b:55:ec:f5:9f:11:05:93:
95:47:48:aa:4b:56:cf:65:cf:73:ae:d1:c4:4b:25:
25:30:d8:cf:76:bf:19:d4:de:71:d7:32:bd:28:ee:
30:fc:d8:44:7b:77:d7:21:5a:85:3a:c7:4f:79:2f:
a2:74:83:3f:d1:2e:0a:ca:65:4c:d8:1e:04:1e:db:
2a:8b:f5:ea:f5:5e:f9:8d:af:51:6b:aa:39:00:9e:
a0:ba:79:0c:8d:6e:40:ba:f4:0e:f5:01:b0:9e:67:
ef:cc:0c:ef:67:6a:d4:2e:e5:c7:9d:ef:a5:f3:2e:
74:b1:c4:50:b2:f4:3a:17:ed:a9:39:58:d3:32:1c:
99:16:20:c9:dd:ce:aa:2a:31:a2:3a:dc:b6:2b:ba:
3b:14:bf:48:82:b3:1e:98:7f:40:40:6e:09:4c:29:
1c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:51:4D:DC:8F:7E:BF:59:FB:39:8B:4C:3B:77:1D:5F:16:00:F2:07
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/j1FN3I9-v1n7OYtMO3cdXxYA8gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.228.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:9a:1f:de:bc:02:d7:5b:0a:eb:29:82:66:7f:6f:db:f2:f9:
f1:d8:80:96:bc:1d:1e:5e:44:dc:a2:7f:0b:98:1b:dc:25:47:
6d:78:74:1c:30:cd:ef:a3:81:3b:6e:23:9e:b8:85:0d:8a:d9:
57:d2:a5:fc:26:b3:c3:1d:95:28:de:25:7c:31:f2:47:7b:69:
a4:42:73:07:32:d4:25:d5:3f:3a:62:41:12:d4:7e:69:e2:d8:
94:b6:0f:de:97:63:38:25:a6:92:8c:5d:fa:fc:d0:96:8c:c7:
f8:f4:19:c1:b6:b3:a3:17:e8:a0:43:3e:0e:e5:d2:81:37:2e:
01:c8:f7:6a:fa:40:71:5d:7c:40:4d:96:56:d3:f2:d2:2e:d9:
28:55:10:b3:6b:32:94:08:36:0a:c0:10:ea:2e:0f:90:2f:a2:
b2:6f:69:d6:c5:c7:b4:b9:78:85:d8:8f:c8:49:82:78:92:36:
6b:3f:7e:7c:96:5e:a3:ba:3e:69:56:da:79:61:67:1d:8f:f5:
65:0d:ee:62:70:56:64:47:31:e9:62:df:df:7e:89:d7:0a:38:
94:3b:7e:39:07:93:b5:eb:b5:06:1d:d5:dd:30:bf:74:8a:36:
36:df:a5:a4:a8:15:b7:05:5c:d5:c2:eb:d1:17:c7:89:20:51:
d7:03:52:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:41 2024 by rpki-client on console-fra.rpki-client.org