Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/JJvbdL3_EsC6exY8Nn9j7jk82PE.roa
File: JJvbdL3_EsC6exY8Nn9j7jk82PE.roa (raw, json)
Hash identifier: 3QsOarSlXYydqBMumRwFY+5efdyNugOKoTnpCGqqBpM=
Subject key identifier: 24:9B:DB:74:BD:FF:12:C0:BA:7B:16:3C:36:7F:63:EE:39:3C:D8:F1
Certificate issuer: /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial: 01856FD4F8134D264093357EF503B013EAA6
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/JJvbdL3_EsC6exY8Nn9j7jk82PE.roa
Signing time: Mon 02 Jan 2023 00:15:06 +0000
ROA not before: Mon 02 Jan 2023 00:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59447
IP address blocks: 185.220.57.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d4:f8:13:4d:26:40:93:35:7e:f5:03:b0:13:ea:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
Validity
Not Before: Jan 2 00:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=249bdb74bdff12c0ba7b163c367f63ee393cd8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:27:f6:26:87:d9:a9:f4:65:f3:eb:08:1e:6d:
9f:1c:f7:cf:8d:8a:4b:7c:73:aa:40:c0:85:73:86:
42:60:aa:f9:4a:8a:66:0c:66:4f:24:55:7b:fc:4d:
e3:cf:13:d9:28:4a:0d:e1:13:aa:f6:23:c4:66:74:
4e:95:15:08:15:fa:31:3e:29:56:75:1d:42:bc:c9:
c9:90:6b:64:21:00:f8:9a:2e:fd:5a:56:04:89:5b:
94:7c:8c:29:66:24:24:53:6d:cd:46:f5:8c:dd:d4:
0e:e0:cc:5f:4e:93:17:22:de:54:29:07:61:5b:70:
7d:b1:c4:af:23:90:e6:a0:28:d9:90:43:cb:09:53:
9c:af:59:d9:8f:b1:70:f2:9d:e8:40:c4:82:a5:31:
0c:f3:40:b6:67:eb:4a:3d:6c:aa:36:93:0b:30:05:
aa:fb:e6:7f:3b:12:33:5c:a7:42:70:4c:53:31:42:
cc:bc:7c:43:f7:dc:3a:0c:f5:e9:38:d4:80:e4:10:
a2:6b:76:a8:f6:6e:13:79:7e:33:08:83:17:e6:c0:
79:e5:a8:da:79:b7:eb:82:f2:29:b1:89:a4:6a:8a:
cc:76:79:70:ae:2d:ce:e6:51:f7:49:fe:69:ef:52:
91:a0:d5:99:2a:76:02:be:b2:3b:cf:99:d5:89:60:
fe:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9B:DB:74:BD:FF:12:C0:BA:7B:16:3C:36:7F:63:EE:39:3C:D8:F1
X509v3 Authority Key Identifier:
keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/JJvbdL3_EsC6exY8Nn9j7jk82PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.57.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:05:66:a3:eb:de:cb:92:e7:2e:9e:36:60:20:9c:8b:4f:aa:
27:0a:6b:74:12:9d:f9:3e:32:94:a3:5d:a6:94:e6:88:c0:f9:
89:26:88:96:a5:55:85:69:b8:86:44:97:b7:3a:d0:83:43:6d:
86:3e:8e:df:0a:73:57:23:52:19:7f:79:9d:cf:2c:49:ea:fc:
d0:05:76:e6:6e:bc:1d:a3:d7:10:46:f1:60:36:d7:65:69:c8:
c0:6e:9a:ff:84:28:2a:ee:eb:e6:18:b5:e8:50:68:fe:2f:48:
c3:50:c0:ec:80:74:6f:b7:25:90:f9:9f:09:85:2e:b1:94:21:
3c:a8:1e:23:a0:21:6f:2d:7f:ae:91:34:c4:1c:02:74:a0:40:
73:20:a6:24:80:34:85:10:7a:1c:71:ac:74:7a:0c:27:29:10:
19:83:11:1e:f1:86:2a:55:27:48:ae:57:4f:b5:b1:f5:44:4a:
81:9b:6c:9a:6c:63:33:26:a9:98:4e:e9:c4:53:40:10:83:3a:
62:2a:00:0d:b3:de:0b:bb:9d:94:51:7b:d5:48:3b:0e:79:65:
16:e7:6b:74:5d:2e:fe:c6:48:3b:56:c9:62:86:ee:ab:65:18:
d5:dc:24:55:a8:26:fd:ac:c1:78:19:40:83:87:db:2d:46:77:
7f:d5:57:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:43 2023 by rpki-client on console-ams.rpki-client.org