Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/jsEeX2rUX99xNjt4tnmBjh8DAWA.roa
File: jsEeX2rUX99xNjt4tnmBjh8DAWA.roa (raw, json)
Hash identifier: FSIuQN7xyQ1j1neUYehM7skVzL2CTQLKEjaokjumWCc=
Subject key identifier: 8E:C1:1E:5F:6A:D4:5F:DF:71:36:3B:78:B6:79:81:8E:1F:03:01:60
Certificate issuer: /CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Certificate serial: 018C86BD10155B4181C5C75BB5D406A24A12
Authority key identifier: 15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/jsEeX2rUX99xNjt4tnmBjh8DAWA.roa
Signing time: Wed 20 Dec 2023 10:19:46 +0000
ROA not before: Wed 20 Dec 2023 10:19:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 185.13.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:bd:10:15:5b:41:81:c5:c7:5b:b5:d4:06:a2:4a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Validity
Not Before: Dec 20 10:19:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ec11e5f6ad45fdf71363b78b679818e1f030160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1b:94:c6:14:5a:e7:b1:65:f2:e8:48:f4:36:
6a:1d:59:83:7d:cc:63:19:82:23:2e:ef:27:ce:45:
db:0a:0e:96:21:0d:07:bc:52:4b:93:61:a4:ac:36:
0f:9b:4e:ac:02:87:70:2a:2a:1a:d0:7e:70:68:4e:
74:90:72:2b:d6:9b:40:04:e0:7e:ee:3d:c8:52:8b:
31:7a:c5:2c:42:e4:3c:c8:01:d6:e5:bc:9f:88:ed:
0e:c2:1c:d9:5d:fb:27:a8:40:85:cf:66:13:18:7d:
db:73:d4:1c:e2:94:29:30:7a:3d:26:02:30:da:51:
bf:2f:f6:20:2c:d7:50:9d:14:2b:c4:02:07:61:d5:
55:be:69:18:9b:91:ba:5e:c3:d3:1e:a4:56:6e:04:
22:2b:97:9a:1d:9a:b7:c4:05:bb:4d:5a:93:02:e2:
6c:f2:ea:07:5e:78:fc:c1:b5:66:42:04:d1:49:54:
c6:21:34:d4:9c:84:df:d5:53:da:99:c2:d9:47:65:
a8:55:a0:ee:ca:ca:5e:09:d4:2c:b6:c1:18:dd:58:
f2:68:a3:82:42:5c:5a:a6:ca:32:d6:78:b5:fb:5b:
9f:73:85:c8:e1:00:2c:a9:24:3a:e6:13:1c:94:11:
45:fc:c8:4b:53:11:5c:4a:12:e0:85:57:b5:53:4d:
8b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C1:1E:5F:6A:D4:5F:DF:71:36:3B:78:B6:79:81:8E:1F:03:01:60
X509v3 Authority Key Identifier:
keyid:15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/jsEeX2rUX99xNjt4tnmBjh8DAWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.227.0/24
Signature Algorithm: sha256WithRSAEncryption
58:9a:4c:b4:d4:07:5a:ab:ac:66:1a:00:0f:15:d7:b4:c4:1e:
17:d2:b9:19:5b:a2:c8:c7:94:1b:c2:27:94:2e:cc:07:0a:9b:
91:73:4e:a9:67:3f:d1:7d:78:bf:40:29:a3:8e:4b:69:35:b1:
28:2f:eb:1b:53:8b:8e:5e:06:b6:56:43:65:9d:88:6c:f0:f1:
9d:3e:40:07:33:46:3c:0e:9b:5f:93:f4:99:0f:4c:38:e6:2f:
39:93:f0:58:7d:41:99:c9:93:e2:2d:a6:fb:03:fb:73:90:c4:
b7:65:e4:9b:0e:66:92:40:fb:4e:64:c5:e2:66:4c:fa:4e:1a:
e8:08:ad:30:b5:e0:b6:35:97:01:9a:b8:6f:80:5a:83:44:06:
3c:08:72:b3:5f:9d:50:2c:da:e9:df:24:01:a0:56:11:3d:33:
a6:39:ba:18:82:16:ef:8d:f3:97:2d:1d:0e:61:eb:bf:3f:04:
80:f1:5a:31:ba:c9:2b:b1:f9:c1:08:7c:4e:fc:3b:eb:a1:e5:
c5:55:05:ae:1c:53:50:25:06:19:1e:18:a4:0e:5d:41:5c:eb:
9d:0e:2d:51:64:29:6e:be:d2:17:b7:70:ec:00:f7:f9:6c:89:
fa:99:cc:fb:5d:91:9b:b1:56:5e:f2:db:74:85:b0:e7:a4:17:
94:b3:53:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 20 15:28:53 2023 by rpki-client on console-fra.rpki-client.org