Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/sjHhAqJAUadvUL7OKwRPlUA5-_s.roa
File: sjHhAqJAUadvUL7OKwRPlUA5-_s.roa (raw, json)
Hash identifier: BIn6GMdjEYLK+jOcPECaH+SoPxS7p3/s6haRF4+sIVU=
Subject key identifier: B2:31:E1:02:A2:40:51:A7:6F:50:BE:CE:2B:04:4F:95:40:39:FB:FB
Certificate issuer: /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial: 018AD760C16E95A1583ED98F1B5DC723DCC1
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/sjHhAqJAUadvUL7OKwRPlUA5-_s.roa
Signing time: Wed 27 Sep 2023 16:02:36 +0000
ROA not before: Wed 27 Sep 2023 16:02:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1273
IP address blocks: 194.70.32.0/22 maxlen: 22
194.70.37.0/24 maxlen: 24
194.70.38.0/23 maxlen: 23
194.70.40.0/21 maxlen: 21
194.70.48.0/20 maxlen: 20
194.70.64.0/20 maxlen: 20
195.173.0.0/16 maxlen: 16
212.240.0.0/16 maxlen: 16
195.11.0.0/16 maxlen: 16
194.70.2.0/24 maxlen: 24
194.70.4.0/22 maxlen: 22
194.70.0.0/23 maxlen: 23
194.70.8.0/21 maxlen: 21
194.70.16.0/20 maxlen: 20
194.70.80.0/21 maxlen: 21
194.70.88.0/22 maxlen: 22
194.70.92.0/23 maxlen: 23
194.70.95.0/24 maxlen: 24
194.70.96.0/19 maxlen: 19
194.217.0.0/16 maxlen: 16
194.70.128.0/18 maxlen: 18
194.70.240.0/20 maxlen: 20
194.70.192.0/19 maxlen: 19
194.70.224.0/21 maxlen: 21
194.70.232.0/23 maxlen: 23
194.70.235.0/24 maxlen: 24
194.70.236.0/22 maxlen: 22
194.159.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d7:60:c1:6e:95:a1:58:3e:d9:8f:1b:5d:c7:23:dc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Validity
Not Before: Sep 27 16:02:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b231e102a24051a76f50bece2b044f954039fbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:d6:94:5e:e1:d3:45:b5:90:cf:61:7d:f3:
0e:21:71:6e:89:9b:e9:c6:4c:5b:1f:e5:3b:af:6e:
bd:18:40:b8:b4:91:2e:36:f9:3e:25:37:eb:df:af:
61:0d:f3:c4:1f:1a:b8:a7:e6:f6:ff:c9:7f:91:32:
a8:3f:9d:04:80:04:ff:69:6a:09:cb:12:69:7a:7f:
db:63:7e:53:a9:50:90:4f:ca:a1:9d:eb:9b:73:cb:
85:b9:b7:87:58:6b:ef:be:82:7a:8c:ef:09:bf:35:
02:9d:64:bf:56:09:54:b1:9e:88:6d:75:e5:c6:17:
ff:10:61:12:58:5c:38:d2:e1:36:8d:2a:18:f3:cd:
d8:cc:12:ca:b2:fe:67:23:13:49:ba:f5:d0:89:b9:
c4:9a:26:1c:52:81:03:40:1a:55:e7:f4:dc:55:7a:
21:7b:e8:a7:94:3c:f5:6b:ee:e8:c6:7f:26:ed:35:
77:7c:9c:04:7e:3a:69:41:12:ae:c1:57:db:88:7d:
b5:51:51:14:fb:67:85:30:33:4e:c8:fb:ef:ff:ba:
38:95:15:5b:fb:98:c6:6c:38:f4:bd:c0:1a:a0:87:
6b:84:9a:cf:62:79:a2:10:d0:12:40:d6:46:90:e4:
a5:dd:64:98:ad:2f:d6:24:3c:23:44:b3:31:f8:23:
7a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:31:E1:02:A2:40:51:A7:6F:50:BE:CE:2B:04:4F:95:40:39:FB:FB
X509v3 Authority Key Identifier:
keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/sjHhAqJAUadvUL7OKwRPlUA5-_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.70.0.0-194.70.2.255
194.70.4.0-194.70.35.255
194.70.37.0-194.70.93.255
194.70.95.0-194.70.233.255
194.70.235.0-194.70.255.255
194.159.0.0/16
194.217.0.0/16
195.11.0.0/16
195.173.0.0/16
212.240.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a3:40:1a:47:81:da:e7:1d:4b:b8:cf:7a:db:ba:f9:aa:62:58:
6f:3d:54:a8:07:9e:40:3c:17:de:c0:68:56:95:88:74:35:fe:
c3:55:39:8a:51:8f:93:4c:6c:ee:8e:e2:ed:b0:38:a1:ba:fd:
91:8e:24:f7:9b:ea:84:a3:07:f3:c5:02:bf:0d:07:66:02:be:
de:72:94:c3:18:94:0f:50:ac:09:b8:8f:cb:ea:65:b2:5d:67:
27:8d:c6:f2:7e:15:78:72:d2:65:dd:68:86:e5:6c:ad:91:d0:
02:e1:37:2d:f4:77:43:95:cf:23:3d:67:90:76:41:34:d8:dc:
2b:01:20:67:c5:46:72:db:9f:6c:3d:49:72:f9:84:c8:9d:75:
40:3d:25:1a:8e:95:3d:b0:56:de:13:43:b7:40:e8:19:08:54:
af:56:65:a0:f0:b8:0d:2e:55:bb:09:97:62:ed:eb:f3:07:7a:
48:2a:c4:e2:ba:84:62:78:09:3c:c2:69:fd:8a:3c:a3:ca:ec:
a6:1d:47:f9:55:3d:82:6f:09:3e:ca:00:2b:6e:ff:75:78:f6:
ff:13:bc:f5:ee:6c:03:10:e7:0b:bf:25:84:e8:83:d2:d6:78:
ce:b0:ad:40:52:07:d7:b6:d1:c5:06:8a:85:84:30:3b:9b:72:
0d:3d:42:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 10:25:49 2023 by rpki-client on console-ams.rpki-client.org