Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/jlpa8ME36iJ6SLr8r38gk2SyaLE.roa
File: jlpa8ME36iJ6SLr8r38gk2SyaLE.roa (raw, json)
Hash identifier: nWgXPUDmW7bMSREPEkAGMQ+F2T10KENBafx0Q9KvNs4=
Subject key identifier: 8E:5A:5A:F0:C1:37:EA:22:7A:48:BA:FC:AF:7F:20:93:64:B2:68:B1
Certificate issuer: /CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Certificate serial: 01856D0A84D688E06CAC83E9FC533B39722D
Authority key identifier: 01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/jlpa8ME36iJ6SLr8r38gk2SyaLE.roa
Signing time: Sun 01 Jan 2023 11:14:43 +0000
ROA not before: Sun 01 Jan 2023 11:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207143
IP address blocks: 185.35.28.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:84:d6:88:e0:6c:ac:83:e9:fc:53:3b:39:72:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Validity
Not Before: Jan 1 11:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e5a5af0c137ea227a48bafcaf7f209364b268b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:08:bd:f7:7f:94:5b:28:da:78:36:0d:7e:1b:
6d:7e:73:de:65:f2:17:e5:76:88:a8:4a:b6:c2:cd:
44:99:0a:cf:d8:39:15:bf:11:cf:38:5b:54:61:5e:
49:56:6f:31:71:a4:02:ab:df:cf:5c:cd:aa:ef:b5:
45:e9:1f:e7:16:42:d8:ab:6e:02:15:3d:6d:46:56:
56:c9:5e:df:aa:de:a6:b5:02:0e:43:57:5d:d8:58:
33:04:b6:80:63:e1:6f:ed:2e:43:c8:3e:04:66:a5:
31:aa:cc:e2:06:d8:f1:77:d0:06:a3:51:ee:25:d7:
67:a3:27:c1:3e:1a:50:57:a9:e8:29:0d:d7:9f:20:
c9:14:c2:b0:1e:1e:c4:64:5f:0b:73:af:c3:59:4b:
4c:29:59:1d:d3:b1:00:4c:85:64:98:6e:d0:de:68:
71:b1:c5:06:91:8c:a9:b2:52:ac:b6:26:7e:33:a7:
fe:5f:d3:b1:5d:46:32:ee:27:c9:68:14:b3:7e:32:
84:a9:76:64:fd:b5:4d:3c:39:9f:af:d8:4a:9e:a9:
e6:e8:86:b6:ef:13:d6:6b:e3:05:d6:81:59:94:ac:
63:3a:6d:02:e3:1c:49:d9:ce:d9:61:6b:b2:0b:33:
00:8e:2b:d1:dc:b4:69:50:77:e5:26:8c:e7:50:27:
eb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5A:5A:F0:C1:37:EA:22:7A:48:BA:FC:AF:7F:20:93:64:B2:68:B1
X509v3 Authority Key Identifier:
keyid:01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/jlpa8ME36iJ6SLr8r38gk2SyaLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.28.0/22
Signature Algorithm: sha256WithRSAEncryption
29:a2:11:5a:e0:22:17:47:cd:cf:02:b2:df:7c:7a:ba:0f:aa:
24:aa:d1:58:7a:20:1e:06:7f:48:e7:2f:d0:31:c1:f8:6a:df:
e6:28:c5:7a:95:94:64:92:0d:dc:c5:9a:6f:08:fc:b8:c8:72:
df:2f:b1:b2:76:0f:8a:ab:35:16:fc:11:4c:38:1d:fa:b7:d1:
7f:4d:d0:f9:69:7a:04:39:cb:d8:05:a4:bc:9f:7a:3d:5c:63:
f2:df:e9:7f:8c:51:d8:1e:29:69:4f:d0:3e:93:1a:98:73:a2:
d2:f2:95:bb:d8:a7:f3:52:76:96:bf:05:e7:cf:95:eb:f3:cf:
72:ca:bb:86:5f:43:e4:20:81:35:17:35:82:a2:f6:e2:c9:67:
5e:7d:0b:87:74:3e:80:c0:05:af:1e:a7:61:ba:5c:f3:3f:34:
f5:63:42:72:f3:a8:cc:23:45:ea:f3:8b:71:39:2f:6e:f6:81:
c3:6a:36:ff:4f:72:a7:7d:4f:43:e9:8e:aa:19:32:34:2f:cf:
d8:c9:9d:04:bb:d3:85:a3:c7:2e:fc:34:2f:fc:b6:8f:5c:d9:
96:82:6f:94:31:e3:ea:fa:fa:15:44:0c:c3:91:3e:6c:bf:63:
83:c3:2b:8f:6a:bd:b1:bd:c6:6a:96:34:ba:8a:9c:94:54:8b:
5a:15:e3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:53 2024 by rpki-client on console-ams.rpki-client.org