Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/_JWIcPPJ5NxKtGYDUqazKcHVXJc.roa
File: _JWIcPPJ5NxKtGYDUqazKcHVXJc.roa (raw, json)
Hash identifier: iT4Uf+dKPJc58DBISPm3mL66XTk+OAV54BO23BCqLJk=
Subject key identifier: FC:95:88:70:F3:C9:E4:DC:4A:B4:66:03:52:A6:B3:29:C1:D5:5C:97
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0189E50860019BA65FF45B473FFC85C3B49B
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/_JWIcPPJ5NxKtGYDUqazKcHVXJc.roa
Signing time: Fri 11 Aug 2023 14:37:58 +0000
ROA not before: Fri 11 Aug 2023 14:37:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209982
IP address blocks: 194.35.52.0/22 maxlen: 22
91.239.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e5:08:60:01:9b:a6:5f:f4:5b:47:3f:fc:85:c3:b4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Aug 11 14:37:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc958870f3c9e4dc4ab4660352a6b329c1d55c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4f:ee:29:d5:83:3d:36:26:e1:2f:b0:09:5b:
af:68:1b:21:03:ef:14:f4:d3:46:cf:68:a1:2f:77:
d1:0c:78:73:c2:02:2c:f2:8f:20:ad:76:36:e7:06:
eb:1a:cc:e2:4b:14:79:f9:33:3b:ad:bc:94:ed:db:
0c:bc:04:e9:b6:3f:21:a9:99:16:34:54:a9:5e:43:
47:31:63:3d:e6:f2:ac:ba:8f:6f:a5:a4:10:4d:d2:
a3:d9:5b:60:fa:b9:87:da:8a:36:74:1b:5a:0d:5f:
63:53:46:bc:82:b9:25:46:93:71:ff:a2:af:6b:67:
df:0c:1d:28:c4:d1:7f:ef:aa:ed:52:52:88:44:a4:
52:8a:59:b4:f4:13:da:d5:b9:de:bf:c3:ac:18:df:
7e:95:b8:6c:9d:28:f1:08:87:0b:f8:82:1a:c2:1c:
c7:f0:61:62:e4:89:e9:1b:33:7e:da:49:52:00:5e:
fc:2c:04:7f:1e:02:1e:48:31:3e:aa:07:0d:9c:bc:
16:c5:d6:0b:bd:82:d0:e2:c3:cb:0c:00:0f:5a:f7:
92:c7:f6:5a:4e:87:79:10:ea:9f:a1:aa:a6:59:af:
83:bb:c7:a2:a5:1c:c2:fb:8c:4e:4d:ca:31:a1:09:
de:30:26:24:4c:96:08:fe:bc:d1:1a:67:22:93:c0:
04:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:95:88:70:F3:C9:E4:DC:4A:B4:66:03:52:A6:B3:29:C1:D5:5C:97
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/_JWIcPPJ5NxKtGYDUqazKcHVXJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.59.0/24
194.35.52.0/22
Signature Algorithm: sha256WithRSAEncryption
99:6b:83:a8:0f:c9:5b:70:1d:05:5c:87:1b:3b:a0:3e:ed:f2:
8f:ce:e3:20:71:c7:29:ac:0e:b8:7b:e1:20:1f:16:d3:c4:7d:
e1:bc:ca:56:43:c1:ad:84:b7:6f:5f:5c:01:ed:21:76:96:42:
44:9b:8c:48:5a:7f:14:09:5d:a9:d4:1d:b5:cf:66:14:45:87:
bf:67:92:39:6f:5e:53:56:77:b7:b6:4c:50:9f:61:c3:e5:7f:
3b:0a:2c:89:4d:6d:fd:82:42:5b:7a:3a:78:94:96:c4:b6:15:
db:04:53:59:eb:55:54:8a:49:ab:6f:7d:84:40:8d:9a:06:46:
9b:bb:ac:ba:4c:3a:9f:7f:8a:78:62:2b:0f:40:c8:f3:c7:49:
ed:7e:42:ed:ab:88:3c:2e:95:27:86:27:f7:1d:b4:27:01:64:
cd:90:d7:38:5c:ae:1c:d5:76:50:41:b9:bb:0b:7e:ea:95:64:
88:d5:01:ee:06:52:b7:94:c9:97:d6:5f:84:5f:da:6e:35:82:
05:f5:72:bd:dc:ec:85:02:93:50:ff:88:df:e7:94:7b:f5:28:
ad:e0:39:e8:29:94:dc:c9:4d:1a:25:f7:96:e8:91:f0:95:ff:
3b:57:f8:c1:f0:92:b5:9e:6a:7c:12:61:af:9b:1a:ab:40:e4:
ea:68:69:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:21 2024 by rpki-client on console-fra.rpki-client.org