Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/JDjIAvgLP15yd_fno1Yw6rSfUlc.roa
File: JDjIAvgLP15yd_fno1Yw6rSfUlc.roa (raw, json)
Hash identifier: s1nts8PC/n202BSIFsSkytQZYF/xSOVVeWDfjtL+GWU=
Subject key identifier: 24:38:C8:02:F8:0B:3F:5E:72:77:F7:E7:A3:56:30:EA:B4:9F:52:57
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018BE4A8FB91229746A3B16388A8E6087756
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/JDjIAvgLP15yd_fno1Yw6rSfUlc.roa
Signing time: Sat 18 Nov 2023 22:59:21 +0000
ROA not before: Sat 18 Nov 2023 22:59:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208328
IP address blocks: 194.36.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e4:a8:fb:91:22:97:46:a3:b1:63:88:a8:e6:08:77:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Nov 18 22:59:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2438c802f80b3f5e7277f7e7a35630eab49f5257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:07:75:8f:4e:8f:4f:d5:0a:f1:dc:ed:c4:95:
43:87:68:db:e9:16:22:8b:96:df:05:04:60:57:27:
9f:00:30:1a:4b:fa:16:2c:3c:ba:13:b7:60:23:ea:
77:7e:cf:d0:f7:44:bf:36:bd:97:2c:1e:ca:6c:5d:
8f:a3:c9:41:97:cc:c1:f4:2c:42:b0:fe:9c:2a:a8:
2c:b7:cb:b2:e3:7b:75:19:6a:64:93:aa:c6:89:18:
18:f9:17:88:96:0c:a7:06:1b:4e:e2:20:a8:01:b0:
f9:e5:9b:9a:b8:25:ed:a1:15:8b:a8:25:01:6e:f6:
88:35:23:3b:41:85:25:d9:f7:10:e9:ef:e5:ea:c5:
f3:f0:bc:8d:35:9c:67:0f:cd:d0:50:64:06:13:d7:
91:f7:cd:e5:cf:76:83:68:72:e0:95:e1:2b:da:d3:
fc:91:61:eb:5a:a3:54:fe:8b:d5:76:83:99:e4:85:
7e:ed:1b:c8:8c:00:6a:35:9d:29:45:63:33:b1:95:
41:54:d7:3c:ac:35:2a:16:bf:e1:eb:01:87:42:92:
c4:71:55:56:c4:29:d6:65:f2:2c:8b:de:1d:36:65:
2a:17:fd:03:79:99:49:2e:38:e1:20:a0:9d:b8:a2:
af:43:88:93:2d:dc:65:02:22:01:b1:a5:9e:97:a1:
2f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:38:C8:02:F8:0B:3F:5E:72:77:F7:E7:A3:56:30:EA:B4:9F:52:57
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/JDjIAvgLP15yd_fno1Yw6rSfUlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.26.0/24
Signature Algorithm: sha256WithRSAEncryption
87:40:2b:1f:2e:5a:ec:36:15:14:3e:03:04:ab:42:41:cb:78:
47:26:b0:6c:82:85:9e:67:53:61:30:bb:a3:04:b1:1e:63:23:
1f:88:94:d5:27:3a:48:bc:a7:fe:4d:67:44:f4:28:19:df:06:
88:a1:7a:57:65:ad:d8:9d:72:42:c0:59:8a:23:d4:85:83:c5:
55:f9:4a:d3:b3:92:44:be:d4:15:94:7e:91:e4:f8:68:f5:3c:
b8:52:a2:fe:ec:50:24:57:c2:05:d9:71:23:b2:f0:43:50:df:
eb:a6:1e:3f:d5:89:19:72:15:5e:17:c5:13:bd:2e:6c:b6:bf:
be:9d:c6:57:0d:f6:8a:0d:32:56:c9:06:f5:88:a0:15:b3:d0:
be:47:69:a4:4f:40:97:52:65:38:26:56:3a:bc:6c:68:23:24:
00:ea:fa:41:90:92:d0:4a:4f:76:7d:60:07:54:d2:ee:89:19:
71:da:e1:77:73:40:d5:a6:48:c7:18:aa:35:1d:1b:2a:8e:17:
87:d5:cf:6b:8f:55:a4:7b:ac:f0:59:9f:26:fb:7b:d4:cb:d1:
2f:3b:e5:57:24:f9:fc:3d:ef:a4:25:a8:af:39:eb:7c:27:27:
56:14:28:0d:04:7f:62:f7:0e:97:c6:c3:a3:ed:a3:f2:34:b6:
47:86:33:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-fra.rpki-client.org