Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/JVFsNsj-RoAW1FBfBbWt4bBfDso.roa
File: JVFsNsj-RoAW1FBfBbWt4bBfDso.roa (raw, json)
Hash identifier: UwIi71GxQS5zAQtZSlk3XIlOoRiZ9FvwtTgONoxLWtU=
Subject key identifier: 25:51:6C:36:C8:FE:46:80:16:D4:50:5F:05:B5:AD:E1:B0:5F:0E:CA
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0188F8A3FC7D0AA3F209DBE78ED852AD669F
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/JVFsNsj-RoAW1FBfBbWt4bBfDso.roa
Signing time: Mon 26 Jun 2023 16:57:56 +0000
ROA not before: Mon 26 Jun 2023 16:57:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211056
IP address blocks: 5.57.38.0/24 maxlen: 24
185.215.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f8:a3:fc:7d:0a:a3:f2:09:db:e7:8e:d8:52:ad:66:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jun 26 16:57:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25516c36c8fe468016d4505f05b5ade1b05f0eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9c:93:f0:0b:e3:14:03:67:09:e9:64:9b:c0:
2c:f7:48:da:a1:3e:7c:07:96:e4:11:c8:b2:05:2b:
c0:10:dc:72:a3:73:c4:c0:03:4a:d1:82:70:e8:69:
d0:f5:ea:e7:6d:93:1e:fa:36:c4:99:74:2c:57:cb:
ab:ac:24:9f:38:01:5c:f3:3a:e6:7e:a0:d6:25:44:
08:9f:78:0e:bc:bb:a2:a6:96:c9:84:3e:00:a3:09:
c9:22:d9:6e:18:aa:37:bd:bb:b9:81:61:26:95:8f:
20:10:9a:e3:2a:4b:47:07:30:f5:c3:2a:98:80:e8:
10:5c:21:a6:a1:db:55:95:e4:21:d6:a5:c5:02:d3:
5d:5d:75:3a:80:ad:80:97:2a:b1:87:4b:d3:55:66:
68:6f:0f:6c:ec:db:20:f9:8e:dd:86:c9:9a:54:11:
2c:59:a3:31:8a:07:da:63:da:92:d3:79:5b:df:71:
fc:72:8c:15:4b:64:91:b3:0a:80:e7:c3:6f:98:8e:
a2:ed:2e:c6:2e:28:12:0e:74:a8:4d:63:54:74:18:
72:18:7c:27:8e:cc:d1:66:69:a2:25:2e:01:f6:29:
27:d8:62:03:c9:d3:ce:ed:2d:36:0f:a9:61:4c:53:
7a:d4:db:57:39:70:3a:b5:4e:71:8f:a3:1e:12:12:
f7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:51:6C:36:C8:FE:46:80:16:D4:50:5F:05:B5:AD:E1:B0:5F:0E:CA
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/JVFsNsj-RoAW1FBfBbWt4bBfDso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.38.0/24
185.215.230.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ff:84:56:53:8f:51:02:85:6a:fb:2a:b9:ff:b7:51:16:e5:
ae:ff:3c:e1:8b:88:a8:48:f9:11:a0:4c:83:94:ed:2a:b4:bf:
69:f2:f3:fb:58:5e:bc:f9:00:86:77:02:4e:d9:2f:29:5a:45:
71:79:4a:eb:e1:06:28:b9:44:fa:c6:06:52:4b:d0:ce:92:19:
dd:48:20:b7:4b:fc:20:06:ee:f5:f4:73:e0:89:77:f2:e7:39:
87:1c:75:77:d7:5e:5f:5d:30:f4:1a:e4:a6:0d:95:c7:69:46:
7e:9e:a9:1f:8c:67:94:9f:71:27:05:e9:c8:59:94:66:2e:31:
6d:d8:5f:8a:93:b4:11:ef:80:c8:96:1d:db:d1:6e:24:d9:08:
5f:e5:58:e7:33:6b:c4:69:50:0c:95:db:03:56:4a:9c:4b:bd:
ef:78:aa:e0:ac:a4:9d:f0:65:c8:f8:eb:65:57:88:34:0a:76:
a2:03:eb:d7:45:a2:ea:29:a2:15:96:d9:88:38:2c:4a:af:03:
7b:1b:8f:03:8c:c3:f2:aa:7c:70:78:86:f9:cd:2a:84:45:3b:
0f:4c:8e:aa:16:ba:98:46:ca:d3:93:d7:2c:76:88:e9:a7:65:
99:2f:df:13:80:92:1e:eb:ce:c3:9e:3b:b3:4d:18:de:fa:30:
b5:7b:ad:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:10 2024 by rpki-client on console-fra.rpki-client.org