Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/JfNUKtWp5Zmxa2v_P6_alivfu7A.roa
File: JfNUKtWp5Zmxa2v_P6_alivfu7A.roa (raw, json)
Hash identifier: WBzMvq8uERfKkq5RMXJbWAJGj2GuBDsBAkA1bxSZuIc=
Subject key identifier: 25:F3:54:2A:D5:A9:E5:99:B1:6B:6B:FF:3F:AF:DA:96:2B:DF:BB:B0
Certificate issuer: /CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Certificate serial: 01856D41886A3643AC6E2351990F76B6960E
Authority key identifier: 1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/JfNUKtWp5Zmxa2v_P6_alivfu7A.roa
Signing time: Sun 01 Jan 2023 12:14:49 +0000
ROA not before: Sun 01 Jan 2023 12:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8426
IP address blocks: 194.158.160.0/19 maxlen: 19
212.61.0.0/16 maxlen: 16
195.38.192.0/18 maxlen: 18
2a02:830::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:88:6a:36:43:ac:6e:23:51:99:0f:76:b6:96:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Validity
Not Before: Jan 1 12:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25f3542ad5a9e599b16b6bff3fafda962bdfbbb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:d3:9d:1c:2f:c0:77:b4:47:ad:bd:d2:be:
76:94:67:a1:97:8b:f1:d3:56:df:60:a3:0e:7a:df:
f5:69:fc:b0:2c:3b:a2:28:75:c0:2b:95:d6:9e:6e:
3b:24:e7:94:97:49:40:c2:63:cd:12:04:dd:a3:c5:
1d:4f:43:af:bf:ef:a3:75:47:a4:02:dd:24:30:2e:
99:c7:02:81:63:a0:cb:2f:90:28:b1:03:80:8d:47:
c2:14:7a:3e:93:81:85:79:2c:1a:55:e1:18:bd:cf:
24:95:ed:34:6d:0e:40:a0:29:ca:94:44:7a:97:d5:
0a:a0:c7:a4:f1:71:fd:e0:5d:b1:63:ce:e6:a6:7c:
a4:43:81:10:16:ac:e1:0b:6a:41:c8:1d:76:a3:9f:
4c:f9:f6:c1:d5:b9:13:8b:c3:9d:8f:75:30:fe:9c:
6d:da:38:a1:63:11:4b:b1:77:95:87:0c:19:c4:48:
c2:72:4a:43:38:21:9c:f6:df:53:97:b8:b2:a1:d4:
e3:ba:32:8f:d0:e5:0d:91:1c:e0:37:70:a3:11:48:
ea:f9:02:c9:1f:88:c0:04:96:53:68:1f:67:52:ca:
62:e1:a5:4a:aa:25:8c:9b:2e:b9:ef:85:07:c4:54:
45:17:f8:94:87:e5:9d:c7:25:60:62:ad:22:bf:d1:
56:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F3:54:2A:D5:A9:E5:99:B1:6B:6B:FF:3F:AF:DA:96:2B:DF:BB:B0
X509v3 Authority Key Identifier:
keyid:1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/JfNUKtWp5Zmxa2v_P6_alivfu7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.158.160.0/19
195.38.192.0/18
212.61.0.0/16
IPv6:
2a02:830::/32
Signature Algorithm: sha256WithRSAEncryption
a1:80:9e:cd:d7:1e:53:da:54:dc:2c:2f:c3:bb:24:b9:e7:6d:
e8:26:3a:f1:46:6e:03:10:a4:6b:36:4f:34:23:43:fd:24:6c:
1e:ef:49:87:a0:20:ad:18:93:56:1e:9f:25:51:b6:46:5d:c1:
c3:ae:67:8c:0d:0c:51:a1:f8:48:72:0a:a8:f2:2d:47:07:6b:
c4:57:c5:e3:93:7e:17:1e:9a:48:5f:bc:f7:10:ce:4f:f5:59:
fb:92:b6:38:1b:a4:f1:1c:48:aa:ff:65:7e:5d:bb:6d:1d:94:
66:9b:02:a8:c8:41:f4:0e:67:63:91:88:e6:4a:5d:3f:14:d7:
f5:8e:5c:d2:cc:98:93:bc:c9:b4:7a:9c:e7:15:67:9a:f3:a7:
20:46:00:8e:96:47:22:69:39:bd:6f:c8:7b:27:be:51:70:68:
4b:3e:f5:25:3b:2b:b2:ff:4c:a6:70:04:43:8a:3c:55:c1:f7:
db:18:5f:e6:d2:46:51:33:f4:9a:a4:29:85:1c:bd:de:9d:f0:
19:e4:d9:09:f4:4f:4d:0c:df:68:82:b3:2e:8d:95:76:87:e7:
ad:5b:f4:21:60:26:f1:3e:e5:69:d4:53:5f:8f:a7:0b:ee:ed:
7d:18:74:1e:76:9b:b6:05:ef:11:e4:1c:34:9b:3b:3a:15:34:
b6:8d:05:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:43 2024 by rpki-client on console-ams.rpki-client.org