Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/JuVtFL1Q35RiP7ZNuMhTFA8j8IE.roa
File: JuVtFL1Q35RiP7ZNuMhTFA8j8IE.roa (raw, json)
Hash identifier: T9AztaW8rwxpzz3DGvXPjMcpEAvBMUvJ56ZpGQ00DU4=
Subject key identifier: 26:E5:6D:14:BD:50:DF:94:62:3F:B6:4D:B8:C8:53:14:0F:23:F0:81
Certificate issuer: /CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Certificate serial: 01856D13D2DB9D3717BE1EF3AD4ACD69A7DA
Authority key identifier: 53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/JuVtFL1Q35RiP7ZNuMhTFA8j8IE.roa
Signing time: Sun 01 Jan 2023 11:24:53 +0000
ROA not before: Sun 01 Jan 2023 11:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 185.168.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:d2:db:9d:37:17:be:1e:f3:ad:4a:cd:69:a7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Validity
Not Before: Jan 1 11:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26e56d14bd50df94623fb64db8c853140f23f081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6c:4c:0c:eb:75:06:5d:7b:b0:6e:b4:d0:0e:
28:ea:ae:ad:29:a3:98:21:44:d7:e5:5f:d1:4c:fd:
d7:50:bc:7e:37:69:90:64:41:00:6d:15:e3:97:1f:
17:55:95:c8:71:fa:6a:5f:c1:6b:fe:ab:6e:17:fb:
a6:d7:ee:68:e0:e8:91:c6:d2:cd:f9:44:5f:ca:5b:
52:a6:db:0f:e6:98:bd:3a:6c:49:02:5a:72:25:3c:
4f:71:9a:14:92:03:0b:71:aa:af:ef:39:5b:f5:e5:
1c:28:5c:39:48:33:f5:d4:be:76:ec:1d:d6:09:52:
72:44:8b:95:b0:58:3b:1f:c3:7f:f2:e0:42:ee:31:
0d:3c:d1:5f:90:de:64:e9:34:ac:a5:3f:f7:11:89:
04:5d:bd:1c:41:a0:77:ab:d5:1b:c2:28:c7:61:00:
5b:c5:5a:b5:84:30:bb:ed:45:6a:3e:27:dc:93:58:
1a:f3:1e:9c:b2:02:40:a9:34:6b:82:d7:36:e6:92:
21:bd:17:a0:c9:ef:87:95:84:36:59:dd:23:b0:6d:
72:a0:9e:a0:34:af:5d:6d:97:f1:f4:7e:1c:18:d1:
24:81:cf:e8:d4:23:d5:a2:ac:b0:55:2b:0e:47:56:
4b:43:f6:bb:93:1b:54:31:dc:94:de:c2:59:47:9c:
7c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E5:6D:14:BD:50:DF:94:62:3F:B6:4D:B8:C8:53:14:0F:23:F0:81
X509v3 Authority Key Identifier:
keyid:53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/JuVtFL1Q35RiP7ZNuMhTFA8j8IE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.216.0/24
Signature Algorithm: sha256WithRSAEncryption
71:09:16:ce:34:dd:88:5e:5e:7e:a7:0e:7b:ec:59:c6:e1:13:
62:30:f0:87:24:cf:fb:db:55:8a:f7:b2:a4:38:f7:73:e3:7c:
98:b5:3f:ad:55:d0:3b:ec:fa:c1:b1:a2:77:77:1a:12:1f:f2:
7e:03:f5:5e:ed:55:80:a7:57:64:97:84:f6:01:14:2f:ed:0e:
19:54:53:53:1e:11:1b:ec:77:ca:88:c3:73:fa:a7:7c:3a:2a:
b5:5d:6d:a5:f9:3e:44:6b:76:4c:40:85:5c:d5:1f:84:dd:b0:
dd:9b:ff:15:a9:c5:1c:45:84:b9:39:a9:e6:5f:93:df:c1:3a:
47:fe:13:c7:a5:23:4c:bc:b7:e8:34:f7:f7:c2:60:0f:2c:c9:
02:5a:99:c3:04:e9:88:f4:b3:74:9b:0a:0c:47:d5:80:45:40:
fe:2e:a5:4e:2d:1d:08:11:59:aa:33:81:65:7b:fc:18:86:af:
84:22:3b:c0:9e:0a:71:02:0c:f2:00:01:b0:41:6f:2d:a1:e2:
1e:72:34:b9:71:c3:8c:2c:b3:77:94:8f:43:ea:c4:f4:51:8e:
f9:ae:63:81:49:c7:3c:87:45:36:47:66:07:43:bb:65:83:27:
6a:6b:c9:9e:81:c5:8d:39:a0:69:69:58:73:35:30:8f:09:18:
0d:dc:36:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:14 2024 by rpki-client on console-fra.rpki-client.org