Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/JEv7-vgmBn96YUL3SY31xYHeYOE.roa
File: JEv7-vgmBn96YUL3SY31xYHeYOE.roa (raw, json)
Hash identifier: qb9kNIPaAC3nT+srcVSbVamMXzpuZspNzcN+wKuRPUc=
Subject key identifier: 24:4B:FB:FA:F8:26:06:7F:7A:61:42:F7:49:8D:F5:C5:81:DE:60:E1
Certificate issuer: /CN=14bf39139b710c4f7237edfd88518655af39c323
Certificate serial: 018A086ED11C3451D977AC65A2105934145C
Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/JEv7-vgmBn96YUL3SY31xYHeYOE.roa
Signing time: Fri 18 Aug 2023 11:36:34 +0000
ROA not before: Fri 18 Aug 2023 11:36:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16262
IP address blocks: 94.199.4.0/24 maxlen: 24
192.162.240.0/21 maxlen: 21
195.211.100.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:08:6e:d1:1c:34:51:d9:77:ac:65:a2:10:59:34:14:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323
Validity
Not Before: Aug 18 11:36:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=244bfbfaf826067f7a6142f7498df5c581de60e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:62:1d:ee:de:47:f3:77:51:aa:ae:8b:06:07:
b2:be:83:0c:cd:21:62:4b:aa:10:3a:19:c0:7c:be:
e5:17:dc:46:24:b4:d1:71:98:a1:4d:b2:13:32:66:
eb:94:f0:da:96:f1:da:5c:78:72:50:ef:93:6d:f2:
c2:0b:75:a6:01:bc:0a:79:75:d9:70:08:9d:14:32:
44:2b:20:d5:82:35:14:90:3b:46:48:06:69:4e:9d:
46:a5:1b:74:30:fc:bc:50:83:47:2d:8b:87:01:0e:
fd:a7:f8:d5:40:1d:ea:90:fb:76:72:e9:90:9f:cb:
6b:cd:e5:d2:c0:af:81:3b:28:1d:ef:6c:15:ca:34:
02:7a:2c:8a:8d:65:f8:ec:1e:6d:81:b1:23:a8:b3:
14:4d:37:f4:ae:fe:c1:59:9b:95:b8:9f:1d:83:b4:
29:85:64:64:ba:59:52:90:f7:f7:90:3f:73:35:6b:
ed:35:54:bf:4e:d0:01:8b:15:e7:37:69:22:5d:09:
a1:3b:79:60:42:8e:71:b6:c0:19:73:a9:7e:ef:82:
57:25:20:42:e4:cb:0c:59:fb:5c:d6:ed:dd:1f:e7:
05:62:4e:52:f8:31:aa:4e:09:91:87:06:91:61:03:
55:55:2d:28:be:91:cd:a2:65:76:2b:87:f6:00:59:
85:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4B:FB:FA:F8:26:06:7F:7A:61:42:F7:49:8D:F5:C5:81:DE:60:E1
X509v3 Authority Key Identifier:
keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/JEv7-vgmBn96YUL3SY31xYHeYOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.4.0/24
192.162.240.0/21
195.211.100.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:bf:4e:bf:87:e5:da:01:c1:b4:e9:58:13:f5:52:94:84:e4:
04:09:ae:c6:84:7c:68:e0:18:96:12:a4:cb:1f:4c:5a:eb:03:
76:60:23:03:32:e8:c2:bd:b2:07:5d:c4:45:50:a6:e4:89:21:
e5:92:e6:43:5c:cf:26:ea:a6:e7:f0:1e:c0:58:8c:8d:9d:a6:
c3:7e:d9:1d:66:1c:64:08:99:ef:61:c5:ef:bd:63:ae:8c:6b:
d1:c9:2c:81:ec:20:4d:e9:a5:fc:04:48:68:95:a6:ce:f8:ab:
f1:ca:58:72:bc:2d:27:07:61:e1:a5:62:2e:e4:bc:60:ee:e2:
e1:c1:2f:61:dc:65:6c:25:39:83:ae:c6:81:60:7a:eb:db:19:
52:87:ec:1a:57:14:fd:c6:62:60:2e:18:b3:bc:e4:6b:d6:01:
9a:84:ca:f9:03:e0:49:f0:46:d1:03:04:35:d8:c0:93:d3:b8:
bb:5f:f2:50:f6:33:6e:7f:71:e5:9b:c9:3d:d9:03:e8:90:e6:
c8:ec:1e:79:96:e6:c2:e0:8f:26:51:12:ec:91:d8:b0:3d:73:
30:a0:85:72:7e:59:11:4f:33:4d:91:a4:f4:5d:69:6c:9d:2e:
76:ce:54:cc:65:05:42:b1:b1:53:ad:e7:c5:2f:65:42:94:82:
bf:dc:51:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:42 2024 by rpki-client on console-ams.rpki-client.org