Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/JEJZ5eAEXpzdQk8d4VMuAsZGcU4.roa
File: JEJZ5eAEXpzdQk8d4VMuAsZGcU4.roa (raw, json)
Hash identifier: qn/+xdp96GxKoAJv/ga+5Q6iYiOdGfhNwb7jcDScATo=
Subject key identifier: 24:42:59:E5:E0:04:5E:9C:DD:42:4F:1D:E1:53:2E:02:C6:46:71:4E
Certificate issuer: /CN=521d2c07c28ac7b726a825d3693afe2397209de6
Certificate serial: 01856BAEC3939ABC4C621C3D86BDAF2E7B74
Authority key identifier: 52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/JEJZ5eAEXpzdQk8d4VMuAsZGcU4.roa
Signing time: Sun 01 Jan 2023 04:54:53 +0000
ROA not before: Sun 01 Jan 2023 04:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5467
IP address blocks: 93.175.0.0/19 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:c3:93:9a:bc:4c:62:1c:3d:86:bd:af:2e:7b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521d2c07c28ac7b726a825d3693afe2397209de6
Validity
Not Before: Jan 1 04:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=244259e5e0045e9cdd424f1de1532e02c646714e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:27:9b:c6:c9:fa:01:bf:31:88:e3:0b:b3:2e:
47:3c:9f:44:8f:39:68:8a:6e:88:72:98:fc:d2:03:
fd:6e:4a:6a:78:f8:a1:30:5d:dc:61:0c:fe:59:81:
5c:f0:5b:d6:31:20:be:49:35:65:48:6d:2a:1f:1c:
40:f5:c9:f3:e3:e5:25:84:0a:a3:69:97:d7:54:94:
3a:a5:d2:45:5c:d8:5c:b6:12:5d:40:2c:7e:b5:4a:
74:da:74:74:48:66:7f:ef:39:07:bd:21:a5:11:0c:
05:e5:91:31:be:aa:33:d8:55:cf:e1:80:8c:7e:46:
ea:74:7c:4a:10:64:15:be:3c:38:89:5b:28:d2:8a:
24:cf:bb:1a:b4:d0:49:80:98:00:7c:bd:ed:97:b8:
09:19:c5:27:9f:97:b3:9b:68:08:f7:ec:7d:10:14:
15:51:4c:9f:11:42:9a:97:dc:eb:1c:e4:cd:ed:e1:
4f:0f:87:ec:b9:00:91:d6:f3:f8:21:76:e9:7f:b8:
6f:bb:b5:7e:67:1b:b5:e2:40:d6:e5:48:f5:8d:3e:
41:a6:4c:29:8a:b5:0f:2b:7f:8e:08:66:2d:6e:4f:
f0:e7:c9:62:98:4b:a6:81:74:3e:4b:8f:b6:99:2a:
b2:57:a4:d3:e8:50:09:4c:69:0e:24:1c:b2:b4:f2:
65:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:42:59:E5:E0:04:5E:9C:DD:42:4F:1D:E1:53:2E:02:C6:46:71:4E
X509v3 Authority Key Identifier:
keyid:52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/JEJZ5eAEXpzdQk8d4VMuAsZGcU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.175.0.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:c2:e6:77:c6:47:16:7b:1a:63:53:7d:96:62:a8:35:6d:8d:
63:f3:73:2c:4a:38:7f:fb:8c:81:3d:c4:b3:d1:2f:4a:62:35:
62:61:81:8b:7f:11:2a:55:89:ae:ed:75:75:4a:ce:7c:3a:2e:
f4:44:78:58:53:bb:2b:51:d5:88:85:8b:fe:f7:f2:11:7b:7b:
93:b2:e0:89:69:ab:28:ed:17:d8:3a:19:d5:f0:5e:82:0a:1c:
33:7a:a2:77:98:da:f8:84:f9:e3:ef:3d:de:26:ad:99:0a:b7:
14:1e:1d:ed:9c:6c:f5:76:13:0e:ed:a0:05:b0:16:eb:1d:a7:
cc:a7:4f:78:93:98:71:12:42:a3:3f:bf:2a:37:1d:9a:6b:a0:
21:2c:ee:c9:b3:45:c7:0c:9c:32:3a:cd:c5:d2:06:6d:1a:89:
0a:b2:60:d2:9f:a7:10:e0:ad:06:d7:89:b2:fb:e5:d4:a5:26:
b4:9a:f5:f9:63:6c:9b:75:dd:2d:9d:49:aa:a3:8e:81:aa:5a:
e3:0a:8f:56:93:c0:4d:34:18:37:0b:84:28:25:5f:a1:ae:87:
4a:86:26:f6:bd:75:1c:56:31:00:5b:b3:1b:67:67:fb:b0:c0:
e7:4b:ef:b7:72:11:f6:3d:fa:b6:ba:cb:81:e9:7d:a3:3d:c1:
ca:db:97:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:59 2024 by rpki-client on console-fra.rpki-client.org