Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/JMZAgKBiNDYI6SVViM783aiAQwU.roa
File: JMZAgKBiNDYI6SVViM783aiAQwU.roa (raw, json)
Hash identifier: SK2WdalDmorDRxc3FHrIXpDffRIWGcjZaBHg8lxKU1M=
Subject key identifier: 24:C6:40:80:A0:62:34:36:08:E9:25:55:88:CE:FC:DD:A8:80:43:05
Certificate issuer: /CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Certificate serial: 0186449EDFA1BBC724CCA8128072B576E55B
Authority key identifier: FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/JMZAgKBiNDYI6SVViM783aiAQwU.roa
Signing time: Sun 12 Feb 2023 07:55:07 +0000
ROA not before: Sun 12 Feb 2023 07:55:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198892
IP address blocks: 194.0.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:44:9e:df:a1:bb:c7:24:cc:a8:12:80:72:b5:76:e5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Validity
Not Before: Feb 12 07:55:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24c64080a062343608e9255588cefcdda8804305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2a:b8:a1:db:d5:06:09:04:bc:43:e3:d8:9c:
8a:80:0f:b2:b9:66:86:3b:34:1a:22:4d:09:71:c7:
23:43:40:a4:b3:be:ab:9b:c6:2c:cf:91:6f:90:02:
99:a7:c9:b9:01:b9:a5:d6:2a:cd:b2:43:33:8b:59:
37:c5:78:7f:5a:25:94:52:c4:fc:a0:4d:38:52:d5:
89:b9:ee:93:87:76:88:f0:f1:2e:ea:60:0c:a1:f5:
29:f5:f1:05:c9:ba:ea:25:be:22:89:d9:b7:71:3a:
78:94:62:8d:6d:34:5c:ff:5d:9f:20:ea:13:97:de:
25:d0:26:9a:ce:83:88:a0:39:39:d6:4a:95:a7:d4:
29:a8:74:68:00:ee:da:69:0b:6e:8f:0a:0c:8d:38:
53:0a:34:0e:66:3d:5d:1d:a4:74:d3:61:dc:b8:41:
6f:47:e2:9d:48:09:f7:67:14:6a:c2:5f:4c:89:a3:
28:fb:29:71:5c:24:22:b6:22:63:b9:c5:2b:dc:99:
f4:34:1b:55:91:de:4f:79:15:58:53:ea:73:19:d8:
8d:4a:13:e0:c3:49:01:18:b8:11:fe:a0:87:69:fa:
08:ba:91:cb:86:b1:5f:5b:0d:d2:8e:84:0c:d3:ba:
b3:d3:a6:b8:66:6d:d7:1c:e6:ea:63:31:68:c2:95:
6f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C6:40:80:A0:62:34:36:08:E9:25:55:88:CE:FC:DD:A8:80:43:05
X509v3 Authority Key Identifier:
keyid:FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/JMZAgKBiNDYI6SVViM783aiAQwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.173.0/24
Signature Algorithm: sha256WithRSAEncryption
02:27:2d:63:32:13:f5:5e:4e:a8:2b:02:20:b2:45:e2:64:4b:
48:7c:ec:31:4d:d3:d1:81:ab:56:a9:cf:13:68:dd:45:2f:8b:
30:d9:00:f0:82:e5:63:21:af:9c:f4:cd:f5:c9:e9:d4:bf:8a:
b3:19:0a:77:2c:99:fe:64:81:c0:4e:e7:ee:19:21:30:e0:fd:
bb:26:35:ff:ca:98:48:4e:20:7b:15:3f:11:76:4c:81:b3:bd:
34:d8:e6:e9:a8:af:c6:cc:61:22:85:44:63:df:63:3c:31:c9:
91:0e:9b:94:e1:80:67:89:3b:dc:f7:60:35:66:d4:c1:d9:3c:
54:a5:91:04:e2:0f:9e:09:2a:79:e6:b0:e5:68:d2:85:74:19:
50:44:7f:26:0e:3c:0b:a7:87:3a:ca:25:cc:c1:bb:94:a5:19:
05:38:3b:02:37:96:7f:bb:96:af:e9:f5:30:33:c4:7b:7f:d4:
cb:28:fd:31:80:de:e7:37:a5:f0:b9:a1:29:fe:5b:2f:b0:01:
f4:55:6f:fb:0b:5b:c4:b1:58:be:4c:7d:f2:84:af:3c:f2:e9:
73:7b:d0:79:20:fc:e7:ac:6d:81:11:b9:d6:a2:73:77:f8:25:
b8:fa:9f:66:04:86:3a:38:11:fb:70:9f:0b:eb:08:47:6a:2e:
47:4c:cf:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:32 2023 by rpki-client on console-ams.rpki-client.org