Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/jZqAGIwAi3eDwvjAXys_cq7_8vM.roa
File: jZqAGIwAi3eDwvjAXys_cq7_8vM.roa (raw, json)
Hash identifier: zHwD/2SOV/V9Aj3vUFz5v3fh8bvU62diNbYmeBTNkGA=
Subject key identifier: 8D:9A:80:18:8C:00:8B:77:83:C2:F8:C0:5F:2B:3F:72:AE:FF:F2:F3
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01857139C47DAE07D4E0FDC7A416F8B881FA
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/jZqAGIwAi3eDwvjAXys_cq7_8vM.roa
Signing time: Mon 02 Jan 2023 06:44:49 +0000
ROA not before: Mon 02 Jan 2023 06:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5542
IP address blocks: 194.225.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:c4:7d:ae:07:d4:e0:fd:c7:a4:16:f8:b8:81:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 06:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d9a80188c008b7783c2f8c05f2b3f72aefff2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d1:5d:64:62:d3:ca:5f:3b:bc:56:99:4e:9d:
e0:c1:1c:01:c7:ba:9c:c1:be:2a:ca:e9:69:68:92:
ed:6e:44:27:e7:49:42:cf:00:7f:42:81:49:0f:11:
e6:97:ab:fb:1a:b1:3d:b8:46:8a:95:03:29:c8:36:
d0:dc:45:3d:89:1f:c8:37:32:6f:fa:89:69:00:91:
d0:89:9f:67:12:9b:3a:16:fd:05:e9:24:5e:9a:ba:
f0:8c:57:07:c7:a3:b6:b4:55:4f:20:0b:d1:4c:cc:
91:56:e7:6b:81:49:3f:1d:c8:2b:5d:64:92:0d:e2:
0d:dc:6e:2d:1c:67:5b:8d:9e:a2:85:5b:f1:7f:a4:
c8:b1:39:36:66:b3:81:6b:ac:3f:d0:e8:37:91:30:
c0:04:cb:b1:22:5c:14:89:df:57:ba:da:3f:da:42:
0a:49:a8:8f:fb:01:e6:bd:05:13:64:54:d6:f0:7d:
59:6e:a1:f0:c6:65:6d:bd:e6:4f:cb:0c:d4:4a:10:
1e:9d:52:45:79:48:44:0e:a3:e4:4b:7f:8b:59:b2:
f7:63:f9:f8:0b:1e:22:97:6a:0e:25:6e:01:fb:27:
a0:40:b3:7a:85:c4:9b:e8:c0:5c:0f:81:12:78:ad:
6d:7c:79:c9:55:06:59:bd:ab:3b:f2:c1:39:c1:03:
c7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9A:80:18:8C:00:8B:77:83:C2:F8:C0:5F:2B:3F:72:AE:FF:F2:F3
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/jZqAGIwAi3eDwvjAXys_cq7_8vM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.225.77.0/24
Signature Algorithm: sha256WithRSAEncryption
49:7e:f5:35:31:8e:5c:1e:72:4f:4b:b8:0c:47:9e:04:88:9d:
46:38:0d:07:18:8c:e0:ea:b8:d4:5a:7e:af:3c:1f:5b:c3:d5:
f5:d5:a6:ea:fd:1f:82:67:00:20:e7:21:ed:5b:4d:66:17:74:
77:67:fa:d3:89:7e:18:d1:7d:ed:96:7e:b2:6e:fd:47:a6:53:
2c:58:d3:c9:a4:7a:fc:66:6d:9a:95:d1:2d:4f:48:03:c0:2a:
05:4f:4d:73:91:0e:9a:65:eb:43:dc:30:36:ed:73:52:61:7e:
2b:d6:97:9f:98:66:15:c7:cf:61:9b:c1:99:fa:34:3f:44:c2:
f9:7e:88:f1:aa:24:15:6d:fa:d8:aa:3c:cd:15:3e:ba:66:1c:
33:12:e6:13:0b:7f:62:09:95:65:de:9a:9c:3a:3c:8e:c0:b3:
29:c2:7e:0b:05:ce:28:62:b7:49:93:94:a1:85:36:52:9f:8c:
7d:24:73:00:8c:86:e4:d9:f2:91:57:2b:fd:9f:a2:7f:1f:ab:
92:bb:79:84:4b:be:57:c0:90:82:83:9f:f0:8e:62:2d:7d:2b:
05:77:74:58:c7:05:90:ae:b5:bd:dc:1c:e0:ce:96:d4:53:db:
c6:68:f4:45:67:67:45:2a:b1:25:47:77:60:76:75:b0:40:f6:
a3:81:74:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:00 2024 by rpki-client on console-fra.rpki-client.org