Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/267a8b-3b7d-4bb0-b222-960dee072f3a/1/JNhpPKEok3rOWKIjLdmf13ygAOY.roa
File: JNhpPKEok3rOWKIjLdmf13ygAOY.roa (raw, json)
Hash identifier: sGAtOQgbNMJfYWdC+fRLL8Zkblb//EXeNJS85ot96CE=
Subject key identifier: 24:D8:69:3C:A1:28:93:7A:CE:58:A2:23:2D:D9:9F:D7:7C:A0:00:E6
Certificate issuer: /CN=e9e9ad934f40594c9f1ba500495a93eeec3c6ce3
Certificate serial: 0185720C3F828EE31C775F7B83AB3E4AF999
Authority key identifier: E9:E9:AD:93:4F:40:59:4C:9F:1B:A5:00:49:5A:93:EE:EC:3C:6C:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6emtk09AWUyfG6UASVqT7uw8bOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/267a8b-3b7d-4bb0-b222-960dee072f3a/1/JNhpPKEok3rOWKIjLdmf13ygAOY.roa
Signing time: Mon 02 Jan 2023 10:34:43 +0000
ROA not before: Mon 02 Jan 2023 10:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 185.253.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:3f:82:8e:e3:1c:77:5f:7b:83:ab:3e:4a:f9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e9ad934f40594c9f1ba500495a93eeec3c6ce3
Validity
Not Before: Jan 2 10:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24d8693ca128937ace58a2232dd99fd77ca000e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e9:80:96:2e:f3:f4:b6:0d:40:cf:8f:1a:51:
8e:5a:5b:1f:8b:79:20:7a:e7:45:b4:85:64:12:28:
23:de:64:39:0d:7c:ef:09:80:2a:a4:f1:ad:e9:96:
f8:79:a3:de:3f:59:e0:5a:e1:60:88:9d:d5:de:d4:
f9:f0:53:ae:67:ff:55:23:a0:ad:54:68:92:e5:63:
3a:74:29:39:4f:9d:44:69:6a:86:99:42:6d:5f:6a:
c1:6e:6c:22:e3:60:0e:b8:0f:7f:b9:a0:4c:b3:63:
5e:05:45:d2:51:c1:e2:95:20:97:83:3d:8c:0d:34:
12:13:13:aa:30:13:5d:20:08:8e:c6:e3:46:88:5d:
24:44:8b:ad:06:7e:a9:ea:08:10:fc:0d:fe:4d:8a:
31:34:3d:b7:e1:d9:95:56:15:5e:d8:86:18:ed:3a:
61:ec:de:84:cf:38:3b:cc:0d:e8:63:68:d9:51:e9:
67:e6:a6:aa:21:7c:03:e6:4c:e1:65:96:a7:2a:04:
18:97:48:04:d9:55:67:bb:31:f7:52:d5:96:90:0e:
6b:8d:ef:87:f9:50:78:36:92:69:bc:78:77:2a:f9:
85:bb:29:a5:c8:48:75:85:9d:f5:53:ad:c0:75:4f:
fd:d1:e4:6a:ab:c0:46:83:09:59:a0:f7:9b:bd:57:
cb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D8:69:3C:A1:28:93:7A:CE:58:A2:23:2D:D9:9F:D7:7C:A0:00:E6
X509v3 Authority Key Identifier:
keyid:E9:E9:AD:93:4F:40:59:4C:9F:1B:A5:00:49:5A:93:EE:EC:3C:6C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6emtk09AWUyfG6UASVqT7uw8bOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/267a8b-3b7d-4bb0-b222-960dee072f3a/1/JNhpPKEok3rOWKIjLdmf13ygAOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/267a8b-3b7d-4bb0-b222-960dee072f3a/1/6emtk09AWUyfG6UASVqT7uw8bOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.56.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:d9:04:5b:a8:29:ed:ff:ea:df:bf:89:d0:3b:85:7b:f3:8e:
09:a7:7a:0b:30:34:a9:02:aa:be:0d:06:b3:c6:86:1d:b9:f4:
d4:9d:af:f3:8d:65:63:0c:0d:fd:35:f2:b1:17:fb:4d:82:4c:
20:c0:0e:b4:e3:45:fc:90:4d:33:14:30:65:a0:ff:cb:a6:e5:
b5:71:5f:f1:d8:96:f1:ce:15:f6:b2:d6:cd:6a:7f:5c:bb:3d:
32:c3:f3:79:b3:b5:b0:c7:15:4b:fe:a4:ff:3f:2d:26:c5:9f:
b4:8e:1b:3f:f7:f7:ca:19:48:68:70:c5:78:4c:89:e4:81:e5:
7c:64:0c:4a:50:9b:94:e6:44:a9:57:f3:21:3e:1a:12:c9:b0:
24:36:8f:fc:10:24:7d:f4:c2:a8:d4:2d:42:e2:87:e7:7e:f8:
89:27:ea:64:87:7e:b7:da:76:4a:f3:1f:c8:e1:22:ad:b1:93:
0a:3f:8b:e1:4a:c6:d5:6c:17:bb:a1:0d:f7:57:3d:a8:c2:20:
0b:32:1a:62:59:6b:0f:02:e8:fe:3a:51:b1:fc:ff:51:8e:a1:
f1:d1:76:16:4f:9f:c6:6b:41:b0:1f:b7:48:2b:71:a8:d0:92:
9c:81:52:a7:ba:a0:09:7a:3a:82:28:97:b2:cd:b3:3f:9b:bd:
ab:8a:bb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:04 2023 by rpki-client on console-fra.rpki-client.org