Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/J8WX3WvWlCRs8IAbEb33f6JWkKE.roa
File: J8WX3WvWlCRs8IAbEb33f6JWkKE.roa (raw, json)
Hash identifier: WkVxytyBZYLLSocHze9h+QeyutbDOQLFCsQAzprQZgg=
Subject key identifier: 27:C5:97:DD:6B:D6:94:24:6C:F0:80:1B:11:BD:F7:7F:A2:56:90:A1
Certificate issuer: /CN=397879aff2c4369d06c4f119a6fd7a5a13db8697
Certificate serial: 01856FD52C85A19AF11E3A7385EFEB5BD763
Authority key identifier: 39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/J8WX3WvWlCRs8IAbEb33f6JWkKE.roa
Signing time: Mon 02 Jan 2023 00:15:19 +0000
ROA not before: Mon 02 Jan 2023 00:15:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200697
IP address blocks: 185.98.24.0/24 maxlen: 24
185.98.27.0/24 maxlen: 24
185.98.25.0/24 maxlen: 24
185.98.26.0/24 maxlen: 24
2a04:7800::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:2c:85:a1:9a:f1:1e:3a:73:85:ef:eb:5b:d7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397879aff2c4369d06c4f119a6fd7a5a13db8697
Validity
Not Before: Jan 2 00:15:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27c597dd6bd694246cf0801b11bdf77fa25690a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fc:70:e3:c7:ae:45:6b:fa:3e:01:e5:22:2f:
78:82:a1:61:5b:f2:b0:42:ee:48:ec:d7:78:cd:af:
c2:c0:b4:94:1f:b8:d6:0a:12:a6:4d:65:13:1f:16:
0d:07:70:66:68:d4:f3:a1:bd:b6:68:bd:55:d0:29:
4f:3b:dd:85:63:4f:c3:e4:bb:73:34:80:c6:92:b0:
ad:50:6f:34:8b:0e:13:bc:dc:c4:47:29:60:74:81:
5b:a5:e7:02:0d:b0:02:65:6d:c1:91:6d:63:ac:75:
97:84:e1:65:7d:71:38:1f:f9:f3:c6:b9:91:f5:c2:
23:2f:ee:b8:5c:ae:6d:94:46:75:57:79:a2:d4:ec:
0c:ea:50:26:ba:3c:4f:7b:47:8e:8e:b8:69:f9:15:
14:99:59:ab:eb:09:64:1e:3f:f3:88:1b:32:c7:83:
f6:d7:18:b0:2a:b7:3c:62:6d:aa:d5:8b:8a:64:5f:
8f:d9:db:5e:3c:72:b8:92:31:b1:35:5f:c7:28:d4:
f6:1e:a9:ef:e2:92:bb:6a:40:7f:c5:01:75:d8:04:
d3:ea:dd:70:ca:05:44:61:f1:e8:b9:26:8f:db:ec:
6f:ee:3d:38:09:0c:3e:35:65:b0:67:b8:7f:ae:de:
47:41:2e:62:ec:bc:ef:c9:ec:a5:a9:5f:22:f2:55:
85:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C5:97:DD:6B:D6:94:24:6C:F0:80:1B:11:BD:F7:7F:A2:56:90:A1
X509v3 Authority Key Identifier:
keyid:39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/J8WX3WvWlCRs8IAbEb33f6JWkKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.24.0/22
IPv6:
2a04:7800::/29
Signature Algorithm: sha256WithRSAEncryption
a1:63:1e:19:82:8f:b8:9b:19:e4:a3:39:2c:98:23:31:74:66:
b3:c3:c8:af:d5:6e:37:f1:50:0a:14:c6:9c:2b:ed:00:54:99:
70:b8:fb:3a:32:85:eb:34:dc:82:bc:35:0c:97:5f:6e:93:9d:
e0:6d:4a:6c:ec:ca:da:ca:ea:52:89:e1:bc:29:9f:d1:c5:3a:
8e:63:2c:9b:2d:45:98:8b:d2:e5:b5:a7:07:c4:fb:07:97:48:
c8:84:5d:a3:4b:f4:dc:b3:55:17:3e:3c:d5:79:66:7c:b6:26:
b1:28:c8:a3:f6:0c:83:80:bc:de:e8:80:d9:c6:3a:bb:7d:f5:
d0:06:a3:cc:34:88:1f:cc:57:91:b3:f6:9a:f4:b6:08:69:3b:
b2:1e:bb:63:08:d4:07:7a:bb:5a:f8:d7:0f:88:2a:a6:03:bd:
21:28:cf:d0:25:dc:f8:3b:9a:41:e8:41:97:0a:01:27:68:83:
12:cd:85:6e:0f:ef:bd:6e:26:6d:d0:90:e0:7a:0e:35:1d:31:
e6:07:ff:c5:8c:8b:37:6b:09:41:e6:9f:31:b1:e8:81:3a:c9:
38:fc:e0:62:b7:71:8a:97:76:98:0f:5c:06:77:8e:60:6e:2b:
99:6b:a9:4b:aa:fa:57:61:33:b7:6f:69:e2:ed:d2:c5:14:db:
a1:f1:f3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:59 2024 by rpki-client on console-fra.rpki-client.org