Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/JfkPG-ZG_FreYeNihAMg4LfzeFs.roa
File: JfkPG-ZG_FreYeNihAMg4LfzeFs.roa (raw, json)
Hash identifier: q+FlcbHC4Yiu4IBbxHOBGFG2dzn8AoB91b2sNrD6lw4=
Subject key identifier: 25:F9:0F:1B:E6:46:FC:5A:DE:61:E3:62:84:03:20:E0:B7:F3:78:5B
Certificate issuer: /CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Certificate serial: 0185B9E922A550F352C52349A27ABBCBB25E
Authority key identifier: 79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/JfkPG-ZG_FreYeNihAMg4LfzeFs.roa
Signing time: Mon 16 Jan 2023 09:29:01 +0000
ROA not before: Mon 16 Jan 2023 09:29:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.59.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b9:e9:22:a5:50:f3:52:c5:23:49:a2:7a:bb:cb:b2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Validity
Not Before: Jan 16 09:29:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25f90f1be646fc5ade61e362840320e0b7f3785b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:85:8b:2b:5b:5f:49:9b:f0:98:af:a8:d7:a1:
f5:e0:7a:49:a9:a6:ec:37:6f:fe:53:66:1d:bf:94:
3c:2f:8d:3f:a2:db:89:fb:7a:d2:64:65:cc:89:9c:
b3:e1:c5:e6:db:3e:b2:88:85:ca:5f:f5:3f:69:d0:
c8:08:69:6c:1a:9f:f0:86:73:d1:0a:3e:a6:db:1a:
9c:12:0d:e4:ac:33:4a:4b:d4:f8:64:95:16:0a:91:
cf:c0:98:f1:f5:f0:34:b0:27:37:ca:43:de:de:a8:
d9:04:36:94:cd:e3:e0:35:2d:ab:f4:88:c4:86:06:
e2:dc:cc:10:f6:37:48:26:93:0e:ec:1f:28:53:7e:
e4:56:18:40:ce:cb:84:60:bd:b0:1f:fc:04:68:ce:
2a:2a:53:9a:c3:51:64:ba:df:6a:4d:fd:a8:1e:a2:
14:93:bd:ca:bc:6e:82:61:3e:e9:0d:9a:b0:10:91:
a5:a8:31:fd:ae:a5:24:2f:96:c2:66:ac:d1:93:d1:
db:a2:b3:2b:32:1f:e7:a0:02:2d:a0:52:2b:24:4f:
c1:4e:52:f6:15:3d:23:0d:1f:59:5c:b9:d5:18:2a:
24:27:8e:5e:63:81:b1:d4:3c:9f:37:2e:4d:30:64:
ac:56:72:2a:82:7d:bf:79:cc:b6:f1:b0:81:5d:79:
23:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F9:0F:1B:E6:46:FC:5A:DE:61:E3:62:84:03:20:E0:B7:F3:78:5B
X509v3 Authority Key Identifier:
keyid:79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/JfkPG-ZG_FreYeNihAMg4LfzeFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/eQZczx6-VVs3UnF-WVwnW8rQC04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.8.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:25:d0:97:65:e5:cb:17:a3:4a:a1:0b:02:e5:36:c3:6e:27:
ec:0b:e6:1f:28:4a:e8:d3:e8:b3:28:89:b8:b9:a5:dc:98:e3:
f6:4c:a1:fe:e9:3b:1f:63:60:66:dd:17:23:d7:c8:20:78:6a:
95:8d:8c:33:ae:9d:47:60:e1:60:cb:46:54:4c:bc:07:b0:5f:
98:ea:6c:93:2e:2b:9b:e9:70:a4:38:a0:c7:ab:61:0c:79:cc:
39:82:f8:15:55:bb:c6:6e:db:19:b9:57:b2:70:80:ba:8c:10:
07:7d:c8:05:82:95:df:f7:6c:6b:6d:72:86:dd:3f:14:2d:d3:
e3:a2:bd:24:32:6a:0b:ad:fb:f7:14:f0:40:c3:ea:57:ed:ed:
6d:3c:8a:da:1c:e1:e4:17:c8:dd:03:d2:04:7f:d9:82:4e:8e:
f2:67:92:fa:6e:dd:c1:98:67:0b:dc:11:c2:19:1d:03:82:44:
00:25:33:7f:6e:f4:43:30:33:9a:ee:68:0c:bd:44:fc:ad:26:
b5:92:3c:33:af:06:f1:5c:78:8c:87:53:6a:80:8d:1d:2e:f9:
04:90:71:d6:df:0c:4d:dd:67:0d:67:88:57:1f:91:47:b9:17:
fb:7f:52:d9:87:75:4f:60:b6:13:1b:a3:7b:a6:b7:cb:d0:ea:
60:75:77:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:43 2023 by rpki-client on console-fra.rpki-client.org