Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/Jli5xTvfwA77Hlnu8NDT5GlCUeI.roa
File: Jli5xTvfwA77Hlnu8NDT5GlCUeI.roa (raw, json)
Hash identifier: 5RxX0cjTEEXeVCIDJToeCofFHLCyQwWb7CHEwQhcxRw=
Subject key identifier: 26:58:B9:C5:3B:DF:C0:0E:FB:1E:59:EE:F0:D0:D3:E4:69:42:51:E2
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 01856FCBBBB892FB11E47AE1735593D9EDDD
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/Jli5xTvfwA77Hlnu8NDT5GlCUeI.roa
Signing time: Mon 02 Jan 2023 00:05:00 +0000
ROA not before: Mon 02 Jan 2023 00:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33951
IP address blocks: 193.239.206.0/23 maxlen: 23
95.175.0.0/19 maxlen: 19
194.63.132.0/22 maxlen: 22
91.193.96.0/22 maxlen: 22
217.11.135.0/24 maxlen: 24
2a04:1200::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:bb:b8:92:fb:11:e4:7a:e1:73:55:93:d9:ed:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Jan 2 00:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2658b9c53bdfc00efb1e59eef0d0d3e4694251e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:05:4b:a8:a9:78:20:f2:24:00:51:fb:f5:
55:6b:74:7d:a9:49:48:40:b6:db:e9:4c:c7:76:24:
05:73:bb:8d:4f:2e:37:14:1d:c7:9d:6a:73:50:60:
b8:2b:95:b0:a5:16:1c:ef:87:07:32:21:c2:57:f0:
39:6a:86:ac:5c:ea:e6:80:11:d6:76:12:90:1e:c2:
ed:db:e8:62:6f:09:76:88:a2:09:39:54:51:58:9a:
26:6c:db:9a:d8:d0:ad:a7:90:85:83:6c:e4:49:3d:
85:c0:53:bc:95:94:c9:b4:e2:1f:b7:bc:c9:6c:bd:
41:46:5d:2b:cf:86:dd:2e:5c:12:d0:f9:b8:65:a2:
fa:dd:9f:5e:8f:8f:a3:3b:9d:07:14:15:e2:de:11:
ff:19:30:2a:44:dc:a2:8d:a7:e3:99:85:47:82:5a:
fa:8a:04:a7:cf:2d:38:c5:73:0d:33:cb:ac:26:1b:
da:22:fc:1e:96:39:1a:de:86:ad:05:36:a4:db:85:
c1:a6:36:ca:54:8e:f3:0e:3f:7b:b6:f2:a7:39:03:
61:11:80:1c:af:15:47:db:7f:7d:71:e2:bb:e4:63:
80:08:0c:ec:00:25:70:3c:2d:40:db:be:a9:19:11:
df:29:3a:8d:9d:67:f3:bd:83:89:d6:9c:e1:58:30:
54:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:58:B9:C5:3B:DF:C0:0E:FB:1E:59:EE:F0:D0:D3:E4:69:42:51:E2
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/Jli5xTvfwA77Hlnu8NDT5GlCUeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.96.0/22
95.175.0.0/19
193.239.206.0/23
194.63.132.0/22
217.11.135.0/24
IPv6:
2a04:1200::/29
Signature Algorithm: sha256WithRSAEncryption
44:b6:19:2a:f3:cc:4d:a7:9d:55:94:14:58:8f:45:dd:cf:e8:
6f:0c:9a:14:7a:fa:67:5c:cf:7a:65:c2:c1:3d:d8:d2:94:49:
8f:f0:75:e4:f1:57:ac:eb:69:ef:5a:6e:d7:30:ff:92:3d:8c:
66:86:3b:37:f9:a5:fc:dc:00:60:0e:c9:8d:52:6a:65:63:3c:
c7:6a:d9:79:c6:ac:e8:11:df:ea:02:f1:10:fe:63:9a:44:ee:
62:ee:d5:06:a2:8b:06:70:08:10:c0:a1:ff:9b:0c:55:da:35:
9f:a6:c1:51:f5:92:50:81:83:89:c3:66:93:0c:5a:ad:99:06:
86:c7:e8:b7:6e:bd:e6:c4:4d:80:7c:64:c3:53:49:1f:d3:85:
89:1f:bf:f2:0b:76:cf:40:42:98:d2:10:7d:f6:f8:82:a3:14:
51:17:5d:f2:15:8c:06:3a:ee:13:c3:43:ba:7e:7a:df:75:57:
01:e1:57:99:6a:a2:78:3f:4d:a1:18:79:ac:71:bb:36:73:01:
f2:06:12:3e:a8:43:4c:e5:74:64:87:be:b8:d6:85:e4:fd:1c:
b8:fb:9a:80:45:17:6d:cf:e0:93:a0:3f:26:5f:5c:3c:c6:32:
b2:8c:d3:98:f2:20:8d:5e:9c:30:08:d8:e3:97:ee:64:88:a1:
67:c9:dc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:12 2024 by rpki-client on console-ams.rpki-client.org