Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/JukyH-xOCgfDC6cA8mv4gvbGdbg.roa
File: JukyH-xOCgfDC6cA8mv4gvbGdbg.roa (raw, json)
Hash identifier: GKGp4o715dU05HQZ61qzqGKnAlpGNfdTZg2wwrObVzE=
Subject key identifier: 26:E9:32:1F:EC:4E:0A:07:C3:0B:A7:00:F2:6B:F8:82:F6:C6:75:B8
Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial: 018570150F70747415583B6B6E3C77402C78
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/JukyH-xOCgfDC6cA8mv4gvbGdbg.roa
Signing time: Mon 02 Jan 2023 01:25:06 +0000
ROA not before: Mon 02 Jan 2023 01:25:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3303
IP address blocks: 193.200.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:0f:70:74:74:15:58:3b:6b:6e:3c:77:40:2c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Validity
Not Before: Jan 2 01:25:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26e9321fec4e0a07c30ba700f26bf882f6c675b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9e:ff:84:17:da:50:c0:89:08:13:26:91:d7:
7d:92:60:4f:35:24:3a:a7:47:62:93:2a:57:01:db:
53:dc:b9:a1:f2:fc:6b:a4:70:cf:c0:5d:61:88:2c:
ae:e0:f1:2f:95:26:e0:c7:17:55:98:ec:92:81:46:
a3:af:2d:ab:b9:7d:42:63:50:d1:78:e7:80:65:c7:
a2:a8:da:e0:fc:f5:7b:0f:84:33:3a:41:b9:c2:27:
14:c3:f6:63:a1:a4:77:8a:63:2e:53:fb:ce:77:7c:
0c:b5:32:d2:20:d8:40:65:8f:32:d9:1c:58:73:83:
39:2b:e3:a1:24:50:fa:d3:ac:3b:6d:56:03:98:2e:
d8:53:a3:41:8f:5d:9f:82:a2:9c:96:91:3e:22:1c:
f3:13:1d:84:59:aa:56:77:14:71:8e:b0:08:d7:a4:
8c:31:a7:2f:64:1a:e2:64:13:1e:08:9d:93:21:26:
6d:5b:5b:6f:7c:38:1a:f6:2f:e1:52:67:0a:11:b9:
04:7b:0b:93:de:3d:14:30:99:29:d9:2c:c9:89:e5:
f4:a5:0e:1a:f6:b8:5c:82:36:ac:2e:ea:e9:89:3e:
10:ab:44:1b:8a:8b:9c:32:0f:58:0d:3c:41:1a:81:
39:de:ed:6e:b6:23:58:27:0e:d1:ee:09:cd:78:8a:
09:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E9:32:1F:EC:4E:0A:07:C3:0B:A7:00:F2:6B:F8:82:F6:C6:75:B8
X509v3 Authority Key Identifier:
keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/JukyH-xOCgfDC6cA8mv4gvbGdbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.5.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:dd:bd:d8:16:93:e3:52:b0:33:1c:88:0e:86:cc:22:6e:f9:
0d:cd:d2:43:55:44:60:f2:aa:cd:50:d8:61:e8:7f:81:4c:73:
dc:9c:3a:8b:2b:4a:ac:92:19:23:59:71:82:84:27:e1:af:51:
79:ca:eb:fe:fd:f2:f5:33:07:13:a9:49:a7:04:c7:5f:24:7c:
89:1e:b7:42:cc:0c:4d:d6:aa:36:33:66:73:b7:2f:bf:3c:5d:
7b:df:db:f2:95:45:0f:25:e6:27:1a:b4:3c:19:e2:c6:04:64:
fc:2b:7a:e5:69:28:21:1f:af:04:fe:86:3f:ab:71:dc:2e:74:
34:1d:0c:74:21:f4:f9:2d:16:16:8d:02:61:08:47:77:40:0b:
63:c3:79:fd:0b:f8:70:c1:6d:a6:9a:4d:07:90:02:17:bc:a8:
1e:61:07:ac:76:a5:2c:2a:d8:8d:cb:ae:76:42:e1:f8:74:93:
10:57:23:0e:b1:dc:6b:1d:96:98:be:e7:50:be:4c:85:64:1d:
92:61:e0:d9:0b:28:01:76:68:c9:ef:91:bc:04:5e:eb:ce:98:
89:0b:2f:36:d1:99:ba:27:e5:c8:7e:b2:b8:e5:12:8f:07:ab:
27:41:ac:9e:6b:d0:fb:eb:a9:99:ea:ef:00:74:bb:0a:b3:47:
be:30:cb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:31 2024 by rpki-client on console-ams.rpki-client.org