Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/J3CqZZ-Em2x7qFUNppv13jp78FE.roa
File: J3CqZZ-Em2x7qFUNppv13jp78FE.roa (raw, json)
Hash identifier: GFfBWZNppL7MC5ojLH40EkB4mrGcdhxhE5ODbxukfGU=
Subject key identifier: 27:70:AA:65:9F:84:9B:6C:7B:A8:55:0D:A6:9B:F5:DE:3A:7B:F0:51
Certificate issuer: /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Certificate serial: 01856BD37E8BDB3E76E5A1A2A5D7781E9DAF
Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/J3CqZZ-Em2x7qFUNppv13jp78FE.roa
Signing time: Sun 01 Jan 2023 05:35:00 +0000
ROA not before: Sun 01 Jan 2023 05:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15532
IP address blocks: 91.206.104.0/23 maxlen: 23
194.11.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:7e:8b:db:3e:76:e5:a1:a2:a5:d7:78:1e:9d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Validity
Not Before: Jan 1 05:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2770aa659f849b6c7ba8550da69bf5de3a7bf051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:80:cc:c8:68:44:9b:7d:29:21:d9:56:b1:6e:
f5:10:5e:19:38:6b:03:e6:fe:5d:85:f2:25:14:99:
83:2a:ed:ac:b1:64:95:64:50:2c:23:7b:47:7f:c7:
f1:dd:5d:05:29:7c:f8:21:31:70:22:6a:1b:23:53:
72:53:17:b0:ec:e4:50:af:6a:e3:62:bd:d8:d5:05:
ac:04:7c:9d:89:09:e7:78:9c:a3:bb:3c:23:f2:0f:
52:1a:58:2b:fd:3f:1d:0d:23:bc:c5:11:2b:e9:08:
ce:98:fe:40:9e:5f:e6:08:8c:82:74:9b:44:de:c4:
87:31:bd:d7:bd:cc:3b:51:46:3e:b0:2f:33:0f:52:
2a:07:4e:34:3b:6f:07:3b:b9:e5:24:70:a6:df:40:
fb:62:89:55:30:0c:8e:90:00:7f:57:15:2c:0b:e1:
53:ce:de:bf:08:dc:4c:8f:1d:7d:96:0a:3f:da:d3:
35:a1:d4:3d:2b:f7:b8:17:bf:8f:75:f5:6d:43:80:
90:fe:d6:ae:a1:42:ca:c2:3e:7d:9c:ef:84:d0:b4:
ea:7c:77:45:5b:ae:09:a9:8f:a6:5c:e0:34:b1:63:
ec:62:9f:95:0f:b9:15:e6:e2:05:14:02:55:03:7b:
16:d8:9f:12:f2:d8:0c:49:48:82:74:5c:ab:e6:6b:
43:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:70:AA:65:9F:84:9B:6C:7B:A8:55:0D:A6:9B:F5:DE:3A:7B:F0:51
X509v3 Authority Key Identifier:
keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/J3CqZZ-Em2x7qFUNppv13jp78FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.104.0/23
194.11.223.0/24
Signature Algorithm: sha256WithRSAEncryption
70:c6:91:a8:8d:7c:1c:e9:60:da:53:5b:74:14:bb:27:99:0a:
72:4f:7d:ba:20:54:5f:78:aa:4f:48:2e:f9:b9:a1:b6:39:dc:
23:10:63:35:87:00:2d:72:93:f3:bf:ee:12:67:ae:41:9d:00:
d1:09:f6:57:37:85:59:58:7a:a2:55:b3:4a:d9:e6:ef:95:6f:
83:94:59:69:cd:9a:48:e6:82:12:69:f6:a6:18:69:02:8e:31:
ce:e5:f5:75:34:c3:a1:aa:aa:7c:68:36:04:f7:05:cb:c6:17:
f1:43:af:5a:7e:2a:9a:2e:f5:3c:ea:ac:b1:6d:d2:95:5a:90:
49:bb:e1:d8:0e:d7:68:1b:47:57:d5:34:dc:51:6d:dd:3e:6f:
45:6e:cf:db:15:f9:cd:99:8f:11:7f:02:85:44:b4:ff:8c:bc:
62:05:cd:a9:6a:a8:32:e3:b1:cc:b7:85:e8:49:5b:6c:f5:8f:
00:2d:d5:14:5c:6e:7c:30:23:04:d5:eb:2e:d6:3d:bf:a3:6c:
78:18:b4:a1:53:93:37:b2:0c:55:24:59:a8:e4:4e:d2:77:00:
4e:63:3c:1a:24:f9:55:6b:bb:92:81:38:46:c0:e8:2e:59:fa:
78:72:ac:73:1d:46:18:2e:dc:6a:3b:67:22:39:1c:f8:af:6c:
24:9f:67:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:36 2024 by rpki-client on console-fra.rpki-client.org