Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JXTYhpeEluFwhS4XeGUSIJ2oIBU.roa
File: JXTYhpeEluFwhS4XeGUSIJ2oIBU.roa (raw, json)
Hash identifier: NW6noZS8ACyKUr+Kn9ajehiaPRjUShG0yvqifAVKi88=
Subject key identifier: 25:74:D8:86:97:84:96:E1:70:85:2E:17:78:65:12:20:9D:A8:20:15
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01860406515E0F292CACFDA34EDDCB02AB20
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JXTYhpeEluFwhS4XeGUSIJ2oIBU.roa
Signing time: Mon 30 Jan 2023 18:52:48 +0000
ROA not before: Mon 30 Jan 2023 18:52:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 194.4.156.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:04:06:51:5e:0f:29:2c:ac:fd:a3:4e:dd:cb:02:ab:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 30 18:52:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2574d886978496e170852e17786512209da82015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:8d:68:b8:23:bf:53:85:fd:7e:31:40:60:
90:c3:ad:c6:7f:e7:10:04:0a:0a:cb:9c:2c:50:22:
4d:7e:fe:4b:39:bf:82:f3:9d:e4:c7:69:f9:57:0f:
66:87:8b:e9:2f:6c:f4:74:14:4b:53:0b:22:f1:15:
c1:4c:7f:11:43:31:26:04:45:5d:7d:0b:f7:f3:9b:
67:09:bf:59:91:d3:70:cf:a7:ab:02:d2:24:0c:07:
67:76:b3:31:57:d3:48:d4:62:36:05:c4:56:f2:d6:
77:40:04:70:4a:94:18:3e:6c:18:5f:d8:33:fd:21:
a9:1a:f1:20:46:e3:be:92:8e:36:17:85:c4:5d:f7:
f0:6a:09:4a:8a:e0:2e:09:26:ef:d1:59:59:89:ac:
33:0d:d9:74:8b:a2:70:b6:0e:fc:0b:e6:63:13:8b:
ce:9c:55:cb:2b:aa:f3:32:4a:5f:38:94:63:eb:6c:
2f:44:5d:39:9a:1e:63:31:1b:68:db:93:9c:a9:29:
b6:f7:9f:a6:ce:e6:65:35:49:03:34:6c:54:7e:85:
fb:0d:ab:fb:1a:d9:b7:a8:93:cc:01:8a:64:de:26:
6a:b7:03:15:0c:74:96:cd:70:4b:81:bb:0f:b8:1e:
60:b2:45:4d:f3:43:83:2e:3e:db:2d:f4:57:8f:0d:
90:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:74:D8:86:97:84:96:E1:70:85:2E:17:78:65:12:20:9D:A8:20:15
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JXTYhpeEluFwhS4XeGUSIJ2oIBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.4.156.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:7c:ce:67:6a:d7:26:d1:14:fd:98:56:69:57:45:e1:c5:7d:
53:58:44:db:67:4b:a2:5e:e6:1a:55:d4:1e:3c:4a:52:3b:28:
93:fa:32:75:51:03:e1:79:b7:b7:86:df:3b:46:92:dd:15:a9:
ed:3f:d3:cc:87:59:f7:de:5a:7a:c3:35:c6:33:64:e9:96:11:
ab:e0:e1:2f:27:b0:b7:0f:c3:9f:2f:da:f1:3e:b1:ec:21:94:
27:94:fa:64:da:e5:c6:ea:f5:6e:ff:95:d4:17:8e:fc:77:41:
55:c8:fd:20:88:66:d2:b9:95:39:b9:fc:cf:2e:7f:e8:56:e1:
6a:b8:ac:0f:9c:c8:7e:5c:e7:30:e0:19:12:2d:b6:57:69:d2:
aa:d0:01:1d:c3:69:30:ac:b3:1d:cb:7f:11:e8:0b:4e:9c:4c:
72:39:e0:88:2d:0a:e8:0d:b3:ed:52:53:e4:f8:f9:f9:c9:5f:
bc:f6:42:ef:78:84:83:db:3a:fb:40:4c:ce:d8:fd:a2:c1:0e:
13:6e:5a:26:3d:12:20:43:15:86:bb:2b:34:da:58:19:7e:85:
42:d2:4a:d7:6c:ec:0b:c3:85:c1:c0:65:65:aa:c9:fe:ac:53:
ae:ec:80:5a:66:2d:77:05:a5:f2:ea:23:67:04:bd:f0:bb:32:
ec:76:a1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:54 2023 by rpki-client on console-ams.rpki-client.org