Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/DJrM8puZUDWc8NNOQJnN6FNbPgA.roa
File: DJrM8puZUDWc8NNOQJnN6FNbPgA.roa (raw, json)
Hash identifier: jMRlb6VgxefOjxMUlB4Nl0WlZyXWoMn4F3ugqTGtptY=
Subject key identifier: 0C:9A:CC:F2:9B:99:50:35:9C:F0:D3:4E:40:99:CD:E8:53:5B:3E:00
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0185E8878492E6BA8E32060C91E880EA8D0D
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/DJrM8puZUDWc8NNOQJnN6FNbPgA.roa
Signing time: Wed 25 Jan 2023 10:44:33 +0000
ROA not before: Wed 25 Jan 2023 10:44:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207747
IP address blocks: 195.143.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:87:84:92:e6:ba:8e:32:06:0c:91:e8:80:ea:8d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 25 10:44:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c9accf29b9950359cf0d34e4099cde8535b3e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:38:91:60:e6:e8:d0:54:47:48:85:00:62:c2:
cc:9e:02:42:d5:e8:bb:2a:17:b9:b9:ae:23:83:96:
df:5f:a7:f1:a0:3f:14:06:e6:f5:96:65:51:12:4b:
d7:a5:e3:b4:f9:3c:f3:0b:4e:70:e5:3a:8e:c4:fd:
c0:86:06:b6:32:98:9f:bc:91:dc:ef:8c:80:58:2e:
a4:d4:bd:8e:86:6f:fa:c8:d1:3f:c6:d7:ef:a6:3f:
9e:02:45:91:4e:46:4c:27:2d:7d:df:9f:16:8c:3c:
45:f9:16:a5:7b:87:ec:83:35:80:20:3f:54:6a:d7:
a8:22:96:2f:32:76:dd:3b:c1:28:45:e5:85:60:62:
58:13:6a:b8:5e:21:fa:a6:19:8f:82:56:5e:62:29:
cc:b0:f0:6d:e7:3d:2c:fb:7b:32:fb:f0:be:49:f8:
cd:84:e7:63:53:a4:4e:f3:f0:21:e0:41:4a:73:f5:
7b:fc:90:ba:63:a8:2d:14:00:8f:c6:a4:8b:31:4a:
6a:5c:41:b0:63:68:aa:cf:0b:a2:ab:0d:6a:be:59:
a9:ac:02:80:6e:35:9d:c6:b2:f6:12:1d:5c:db:36:
d9:9a:90:77:fa:17:39:6e:50:bc:ef:78:73:fc:64:
1e:55:74:36:6e:99:bb:eb:07:d4:ec:55:e1:fd:11:
f9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9A:CC:F2:9B:99:50:35:9C:F0:D3:4E:40:99:CD:E8:53:5B:3E:00
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/DJrM8puZUDWc8NNOQJnN6FNbPgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.143.125.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:fa:af:2a:99:97:26:b9:c7:2e:c2:f2:f0:95:b7:a6:3c:03:
90:f5:f2:38:8e:9c:97:a5:1f:f0:29:f0:48:82:32:0c:58:4b:
3e:af:2e:cb:e6:f1:25:b7:92:c1:15:19:ba:9e:48:0a:d7:67:
10:05:46:cb:35:71:5a:13:c2:ed:a0:49:98:b4:92:6d:d9:35:
13:24:be:44:7d:e3:2f:4f:c5:38:3b:4f:93:4d:02:1f:bb:15:
cc:08:dd:a3:4c:1d:c9:d1:0a:24:ec:0f:ef:4c:5f:f1:9a:97:
ee:08:c5:d0:30:c7:d4:91:7b:4d:d7:00:25:3f:f3:73:96:3f:
f1:22:d8:3f:16:0d:d4:b8:c0:96:8f:e7:5b:8e:f4:1c:87:32:
1c:0e:f4:3b:cd:c2:5b:ff:58:18:e3:09:6c:41:28:ee:77:6a:
0e:10:99:45:77:45:82:02:2d:79:94:4b:0e:9a:43:bc:fd:bc:
7c:ed:16:a8:fb:56:a5:52:50:ce:26:8a:8f:f2:83:00:2c:2a:
9d:69:71:cf:49:69:99:0b:c4:97:25:b7:79:dc:d4:74:a8:7a:
c6:11:39:55:52:68:ba:af:6b:87:07:7b:2a:2d:c0:6b:13:65:
f9:57:f8:0d:d9:43:c8:5c:c9:b3:18:df:d8:a5:83:78:ad:98:
f2:d2:39:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:23 2024 by rpki-client on console-fra.rpki-client.org