Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/sJxCWXRA1YQdnuoqk3kWT6dcmmg.roa
File: sJxCWXRA1YQdnuoqk3kWT6dcmmg.roa (raw, json)
Hash identifier: ANa9bR5lUY17TJCIdG7TcrFTDaFpeOAbXeSK8GzdCSs=
Subject key identifier: B0:9C:42:59:74:40:D5:84:1D:9E:EA:2A:93:79:16:4F:A7:5C:9A:68
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 018776BCDD54200E83E0B507861751198ED4
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/sJxCWXRA1YQdnuoqk3kWT6dcmmg.roa
Signing time: Wed 12 Apr 2023 18:31:41 +0000
ROA not before: Wed 12 Apr 2023 18:31:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43278
IP address blocks: 194.147.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:76:bc:dd:54:20:0e:83:e0:b5:07:86:17:51:19:8e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Apr 12 18:31:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b09c42597440d5841d9eea2a9379164fa75c9a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:0b:b6:69:44:ec:ab:31:0d:58:b2:b8:93:
1b:33:a2:58:f2:32:24:9f:79:48:9a:d2:23:13:ed:
29:f5:77:e5:e4:1b:59:ad:10:f5:94:5d:11:16:15:
59:2c:ab:e3:c8:6c:9b:15:d8:54:66:aa:de:77:ac:
75:b4:c2:dc:07:8c:b9:25:d0:21:d8:bf:cf:a8:c5:
a6:9d:42:e9:0e:ad:c5:ac:5d:d1:e7:04:a8:5d:69:
7b:79:2b:87:2d:7d:65:d7:8c:a6:e3:f0:2c:05:9e:
a4:b8:15:ad:1e:da:ca:bf:b8:a5:00:9f:5b:98:c0:
24:b9:33:c6:1d:ca:87:90:5e:1a:49:90:d9:02:0b:
74:29:2b:6e:be:7d:1c:be:c5:31:d8:2e:d5:c1:0f:
48:8a:af:e1:39:8b:83:fc:ce:75:b7:82:38:31:9a:
6a:a7:15:0e:de:95:e1:b2:24:6f:40:17:98:1f:90:
fe:a8:08:8e:24:92:9c:b1:e8:44:a7:14:7a:de:7b:
ad:4d:d8:0d:aa:e9:e5:04:61:dd:28:ef:22:dd:a4:
67:64:10:b6:92:4d:4e:7d:b3:31:28:4f:1c:79:9d:
66:96:11:e2:2d:29:51:4c:02:7d:42:a7:10:4b:9a:
41:2e:7c:f8:62:11:77:ca:21:aa:a3:05:24:3f:7a:
08:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9C:42:59:74:40:D5:84:1D:9E:EA:2A:93:79:16:4F:A7:5C:9A:68
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/sJxCWXRA1YQdnuoqk3kWT6dcmmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.90.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:34:2f:f6:9e:07:ba:d3:c8:67:6e:f5:fc:0a:43:be:b7:e0:
56:40:7f:3a:a0:29:0f:d3:2c:ff:f1:ef:11:fa:da:92:37:b3:
fb:ba:4e:b5:f1:36:46:1e:93:12:5d:03:87:46:55:41:9d:2e:
3d:11:fa:27:a0:6e:25:54:8f:3c:3b:93:cc:b3:85:5d:8e:68:
4b:0c:7a:97:97:a2:29:29:29:2c:4f:5c:da:85:82:36:cc:80:
41:19:48:99:24:2f:e6:14:af:ed:c1:97:44:7a:e5:36:75:1b:
fa:53:0a:1c:7d:96:ff:8b:84:44:08:ad:0c:27:37:b4:5d:77:
4a:47:86:e6:15:2d:26:95:c8:bb:37:13:18:31:0b:90:9c:5c:
2b:be:74:be:91:77:eb:8e:d3:1a:58:b1:2b:65:e9:81:b3:fd:
f8:6e:3c:3f:b4:02:96:4a:0a:fb:9c:af:f7:3d:47:87:6c:b2:
c8:06:0d:17:ae:e6:6c:df:63:61:f5:1e:aa:26:9d:14:7b:a0:
bd:2d:1c:fc:fe:48:0d:f4:4f:c6:34:40:e3:02:24:a3:18:24:
e2:56:a1:c6:36:f7:35:28:cd:b0:00:36:85:5e:1f:ae:41:4d:
c9:b9:82:f6:d8:f4:30:de:10:00:e8:c6:64:4c:b5:48:88:39:
68:dd:18:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:00 2024 by rpki-client on console-fra.rpki-client.org