Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/JwbkpSaXq5bjB1oQDhnV7FTt_Y8.roa
File: JwbkpSaXq5bjB1oQDhnV7FTt_Y8.roa (raw, json)
Hash identifier: YBd/weMQT6R58DrUVlIvINZ/IkR0XTAnkyWgLUmaZM8=
Subject key identifier: 27:06:E4:A5:26:97:AB:96:E3:07:5A:10:0E:19:D5:EC:54:ED:FD:8F
Certificate issuer: /CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
Certificate serial: 01856EC228EFA43CD49BBE570AB9D04A9855
Authority key identifier: 8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/JwbkpSaXq5bjB1oQDhnV7FTt_Y8.roa
Signing time: Sun 01 Jan 2023 19:14:56 +0000
ROA not before: Sun 01 Jan 2023 19:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49754
IP address blocks: 195.130.194.0/24 maxlen: 24
2001:67c:247c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:28:ef:a4:3c:d4:9b:be:57:0a:b9:d0:4a:98:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a55f4899c246d1754a16882d0e76807eb8e2b5e
Validity
Not Before: Jan 1 19:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2706e4a52697ab96e3075a100e19d5ec54edfd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:c1:97:75:0f:f5:05:c8:3c:e6:a4:fb:a3:
7c:ec:ba:21:82:30:10:33:b9:63:65:53:f7:1d:11:
18:8f:5e:b6:61:db:99:e0:48:c8:23:29:d4:ae:b8:
26:2c:da:9d:ba:e9:73:61:0d:bd:f8:a3:6c:c1:c0:
10:4c:f6:bf:44:af:d6:5d:6b:cb:54:a8:3a:33:75:
d1:d2:e7:a1:04:1b:36:d9:0d:71:86:6c:6a:40:1f:
ba:cf:4d:ee:a1:5a:fb:9b:bf:6a:d2:79:72:ea:a9:
d4:3d:ba:14:5c:a9:8b:08:f8:20:45:74:5b:f9:bf:
00:9c:ca:c2:5e:f9:37:8d:7b:32:cc:36:73:a1:4e:
88:42:e8:14:b0:f9:c2:78:b8:70:cd:61:38:2f:4a:
46:be:e4:2a:eb:74:6e:28:0d:f2:eb:df:2c:19:82:
52:f3:89:57:8f:50:8c:8f:62:0e:d9:78:85:6a:5f:
15:c4:f7:cf:8f:98:4f:73:23:76:99:01:2d:db:e2:
f0:70:7e:38:d6:5b:cf:98:bb:d0:24:d0:34:dd:c3:
b4:b3:7f:ab:17:af:35:39:90:78:c4:52:23:c6:3b:
df:ed:d4:eb:0a:43:22:f6:ab:06:74:c7:29:ce:98:
a4:1a:dd:73:82:f8:e0:11:ed:07:ce:a7:e3:08:7a:
ee:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:06:E4:A5:26:97:AB:96:E3:07:5A:10:0E:19:D5:EC:54:ED:FD:8F
X509v3 Authority Key Identifier:
keyid:8A:55:F4:89:9C:24:6D:17:54:A1:68:82:D0:E7:68:07:EB:8E:2B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilX0iZwkbRdUoWiC0OdoB-uOK14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/JwbkpSaXq5bjB1oQDhnV7FTt_Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/864fe2-0478-4381-8320-bedafb0922dd/1/ilX0iZwkbRdUoWiC0OdoB-uOK14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.130.194.0/24
IPv6:
2001:67c:247c::/48
Signature Algorithm: sha256WithRSAEncryption
6a:c8:3d:f8:44:06:0e:f4:23:8b:46:87:a8:95:e9:40:84:16:
aa:4c:c7:ae:02:4e:4d:1f:81:40:72:02:a5:cf:9e:6d:7c:eb:
a9:e0:5e:9c:f1:6b:54:ac:46:0b:11:74:48:15:25:f9:2b:95:
44:3f:c4:5c:1b:0f:c8:41:0c:c2:25:e0:fa:12:89:8c:5b:d1:
5e:7b:94:bb:76:25:34:2b:26:c0:7b:19:ce:ae:9c:7c:3b:1b:
88:4a:24:d4:cb:02:00:00:2e:fb:cc:c5:b1:49:b3:59:2c:8e:
07:c4:68:93:40:12:38:4d:d8:94:55:38:47:73:a9:81:f9:96:
9a:73:37:58:5b:62:dc:52:1d:64:95:be:cd:3a:9e:90:93:a2:
97:92:57:e5:3f:7a:44:fd:4a:dd:89:7b:84:19:78:45:f4:a4:
bf:54:03:a9:fa:4c:c8:67:48:03:3a:45:3f:f5:04:6c:5e:03:
1d:c0:07:a9:09:31:eb:3b:f3:bd:13:b6:7e:d4:d4:1f:44:47:
8f:f8:c0:dc:8d:66:34:8f:ce:e0:1c:18:b8:44:ae:a8:18:51:
9f:7f:f7:c1:ed:26:f4:0a:45:9c:17:6d:4a:ea:76:8d:40:9b:
72:a1:d8:4d:e9:32:33:19:0f:45:e3:21:34:79:56:49:46:11:
0b:4b:8f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:01 2024 by rpki-client on console-ams.rpki-client.org