Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/JZbURrswLn-Irw79QpZzq5XBer0.roa
File: JZbURrswLn-Irw79QpZzq5XBer0.roa (raw, json)
Hash identifier: vaZJ0XXmgMvVUulRhCsQHO0MzvsgJSal+1MKuThSyJs=
Subject key identifier: 25:96:D4:46:BB:30:2E:7F:88:AF:0E:FD:42:96:73:AB:95:C1:7A:BD
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018A45E0F23BE8FFC4E007A81435947AC7D7
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/JZbURrswLn-Irw79QpZzq5XBer0.roa
Signing time: Wed 30 Aug 2023 09:58:04 +0000
ROA not before: Wed 30 Aug 2023 09:58:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2856
IP address blocks: 94.154.34.0/24 maxlen: 24
94.154.33.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
94.154.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:45:e0:f2:3b:e8:ff:c4:e0:07:a8:14:35:94:7a:c7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Aug 30 09:58:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2596d446bb302e7f88af0efd429673ab95c17abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c5:16:ac:92:03:c3:ce:60:74:82:59:92:dc:
77:5c:4d:4a:d7:bf:22:5a:aa:c5:63:9d:b3:73:62:
46:36:5b:66:16:38:e9:12:95:e6:43:69:43:49:2f:
29:f1:b5:4d:a4:e3:7a:f9:fb:0e:59:73:e0:30:93:
23:93:0e:fb:d0:01:e3:b8:72:1e:45:e2:c7:12:2a:
e2:57:2a:ae:a6:75:79:a7:83:62:7c:0b:f4:b4:88:
f6:df:05:1e:bd:c4:0f:fe:a3:73:0a:09:14:11:56:
70:a2:68:a2:01:f8:85:e1:c1:e4:29:73:06:1f:40:
d3:b3:4a:f8:49:67:f8:b9:f4:e7:be:e6:6b:dd:fe:
d7:3c:24:9d:db:6f:27:45:43:20:96:28:1d:3e:b5:
28:8f:38:3e:2c:cf:e7:14:bd:63:3a:1b:4d:4f:3d:
09:65:c2:af:2b:c7:54:6c:04:4c:1b:a5:80:ea:33:
87:55:59:db:c9:a3:db:f5:6e:8f:c8:3f:a7:f3:f3:
ff:89:4d:fb:31:aa:e7:a1:26:38:e5:6f:32:db:1a:
96:77:ae:8a:0e:57:6e:69:af:68:8f:a2:9a:ef:d7:
91:06:ec:ee:c8:7d:5a:42:12:bb:ea:b3:a9:b0:01:
f9:24:6c:42:67:94:de:70:03:27:8b:0a:d1:b0:8e:
1c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:96:D4:46:BB:30:2E:7F:88:AF:0E:FD:42:96:73:AB:95:C1:7A:BD
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/JZbURrswLn-Irw79QpZzq5XBer0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.33.0-94.154.36.255
Signature Algorithm: sha256WithRSAEncryption
8a:9e:4b:b9:73:94:80:c6:f2:87:a0:88:ea:60:58:1d:7a:3f:
d8:f5:9b:97:22:23:5a:a7:5a:c1:78:d3:0c:4e:32:5b:59:e8:
0f:91:bb:d0:e5:7d:65:d6:45:a5:79:89:f6:06:55:67:8f:4b:
ac:51:98:53:d3:76:c8:1e:15:51:6a:74:ba:f9:e9:97:67:28:
6e:0c:87:b3:aa:c3:77:92:12:00:27:e6:75:f6:b5:e0:c8:e9:
29:7e:9a:e1:d2:a2:25:26:50:f8:be:a4:1d:2e:92:93:3b:f2:
68:ed:17:7c:62:cd:cf:d7:18:5d:ed:b1:6b:e3:d4:72:37:01:
11:16:c9:f4:be:af:3c:53:84:24:3a:8f:81:3d:91:80:8a:23:
85:a3:71:28:4e:e0:72:56:8e:db:78:64:db:5e:50:74:d2:18:
f9:19:61:71:8f:f3:0a:e6:d1:aa:dc:67:fc:cd:db:cd:34:8c:
d5:6b:58:23:3d:06:01:9b:10:84:86:b1:f2:55:49:2f:9b:2b:
c2:c7:5e:da:5e:70:6d:46:86:81:4d:71:2c:f2:3d:05:0e:fd:
9e:6d:25:b6:d8:63:4a:0e:96:c0:76:5d:2a:76:4c:c3:3b:09:
4b:8e:bc:22:6d:77:72:8d:b8:6e:0b:80:23:54:d6:75:77:ab:
8b:17:56:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 13:12:03 2023 by rpki-client on console-fra.rpki-client.org