Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/Jx6uf3tB_TTjjMEXnsJd75jivys.roa
File: Jx6uf3tB_TTjjMEXnsJd75jivys.roa (raw, json)
Hash identifier: vEaVBliHWxRpOTflnxjd2GjUrncv/h4O0VURE4xihAA=
Subject key identifier: 27:1E:AE:7F:7B:41:FD:34:E3:8C:C1:17:9E:C2:5D:EF:98:E2:BF:2B
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 01857070854CCF93769A0C5A2C02A3B8A830
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/Jx6uf3tB_TTjjMEXnsJd75jivys.roa
Signing time: Mon 02 Jan 2023 03:05:00 +0000
ROA not before: Mon 02 Jan 2023 03:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20765
IP address blocks: 185.126.35.32/27 maxlen: 27
185.126.35.80/28 maxlen: 28
185.126.35.64/28 maxlen: 28
185.126.35.0/27 maxlen: 27
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:85:4c:cf:93:76:9a:0c:5a:2c:02:a3:b8:a8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jan 2 03:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=271eae7f7b41fd34e38cc1179ec25def98e2bf2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:63:cb:12:f1:d9:9c:c2:11:ac:ff:81:e0:90:
94:60:5b:38:75:f5:67:5f:9b:d3:bf:22:da:e9:65:
1b:93:87:98:06:2c:4a:bc:ad:e0:78:da:60:6e:c7:
dc:54:ab:c4:74:95:38:c8:de:64:1b:6a:92:38:28:
bb:96:dc:61:e0:ce:ba:7e:55:04:a5:53:47:7d:fb:
11:7e:0a:85:e7:46:f2:03:a0:af:01:4d:50:b8:83:
70:c5:04:0b:1a:67:87:11:e7:80:82:de:86:82:ce:
98:28:4f:17:3f:18:34:18:a5:9b:99:7d:d1:05:3e:
08:b6:0f:64:60:5a:b2:77:96:a0:8b:d6:df:60:6e:
81:e0:2f:f7:7f:cf:00:ba:ec:fd:71:41:b6:96:92:
d3:75:50:8a:0b:bf:5e:f4:1a:47:e2:d8:0c:8e:f7:
7a:c9:61:50:6d:47:54:65:c7:74:c8:1b:d0:1b:75:
9b:22:d1:a3:70:e4:66:87:c4:20:27:10:07:77:12:
ee:8a:f4:ba:db:1b:9c:3a:15:ca:bb:e7:27:70:8c:
0a:4f:c4:3c:2f:1b:e1:aa:ca:d4:d1:4a:d9:e7:93:
16:45:74:8c:5b:65:6b:ef:c6:88:c3:2c:25:12:ef:
cf:64:d4:c0:d4:1a:d3:23:70:6d:4e:0e:f4:01:93:
e7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1E:AE:7F:7B:41:FD:34:E3:8C:C1:17:9E:C2:5D:EF:98:E2:BF:2B
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/Jx6uf3tB_TTjjMEXnsJd75jivys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.35.0-185.126.35.95
Signature Algorithm: sha256WithRSAEncryption
3d:8a:92:e2:51:ad:b5:01:eb:42:02:9e:e2:8e:45:d7:e5:89:
af:1e:5c:8c:af:6e:e3:37:9e:f5:7b:45:ff:fa:32:61:c8:62:
bb:44:9e:ba:a0:ef:a0:bf:e5:6f:21:fe:d7:b3:46:4c:fa:63:
ec:97:50:2a:66:3d:83:39:d0:a2:54:50:07:48:41:ac:fb:bc:
e8:02:db:7c:af:69:b3:d5:2e:ba:15:77:d3:fa:de:56:1a:21:
cf:a0:31:40:43:f5:2b:7a:0b:0c:54:7d:d6:cb:e1:ed:0e:d7:
c0:d7:d0:cf:51:3c:6c:15:6f:dc:7d:40:05:30:d1:7d:55:67:
fc:b7:ee:d3:57:87:6c:40:7d:66:96:ba:99:72:17:a3:51:eb:
40:26:34:88:8b:fa:71:75:fc:f7:c9:50:8c:70:25:c4:69:6a:
3a:4f:50:df:7b:58:f7:06:7c:e4:5b:4a:b8:d1:34:15:93:2c:
3e:c7:2c:57:eb:87:0a:8d:e6:3c:69:7d:07:f7:21:85:8a:b1:
cb:b3:6b:63:cb:2a:c1:85:24:83:ee:d0:07:70:db:6d:d1:15:
d8:c9:4b:05:f2:37:ed:e6:c4:84:2b:5c:9a:cd:e3:a6:8c:21:
bf:e9:04:3e:3d:4b:21:82:b5:4d:e1:9a:c4:7a:cb:7c:c3:8b:
a6:19:81:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:44 2024 by rpki-client on console-fra.rpki-client.org