Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/J4De1vKYkJxPV5_77Q0Til3Kxkk.roa
File: J4De1vKYkJxPV5_77Q0Til3Kxkk.roa (raw, json)
Hash identifier: SW39Gke3Sq5wZCV0fl/0QFgxXwwNgi3teTsQ7jxkq5U=
Subject key identifier: 27:80:DE:D6:F2:98:90:9C:4F:57:9F:FB:ED:0D:13:8A:5D:CA:C6:49
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 018571CC270957CC6B9F87D7B7CE492A7E04
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/J4De1vKYkJxPV5_77Q0Til3Kxkk.roa
Signing time: Mon 02 Jan 2023 09:24:42 +0000
ROA not before: Mon 02 Jan 2023 09:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42675
IP address blocks: 194.26.217.0/24 maxlen: 24
2a12:7800::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Nov 2023 08:19:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:cc:27:09:57:cc:6b:9f:87:d7:b7:ce:49:2a:7e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Jan 2 09:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2780ded6f298909c4f579ffbed0d138a5dcac649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:69:41:bc:7b:38:92:66:93:c2:55:3e:51:84:
3e:21:a7:14:6f:d6:bb:47:1b:c5:39:d6:7a:cc:fc:
a9:5e:7d:0a:fd:30:00:f1:7c:e7:74:6a:e4:b6:8c:
3f:ff:46:4a:a8:dc:b3:3d:6b:48:f6:70:39:eb:14:
98:fd:da:18:35:cd:03:7a:f3:82:57:89:fe:01:71:
a5:33:22:6c:3b:32:17:a2:18:69:bd:e5:b1:18:cd:
48:54:1e:79:77:58:56:83:94:46:e2:1b:15:bc:77:
ae:23:e3:01:7d:6e:bb:e5:39:94:1c:7a:09:3a:65:
f6:a7:a9:06:9f:c0:51:df:df:e9:d3:0d:86:87:31:
8d:64:c6:ab:18:d2:43:90:b3:6a:0a:63:e6:33:65:
39:e1:e0:ed:e7:32:5e:75:15:1e:b9:d3:6c:ff:df:
4b:80:3f:89:82:1f:48:e8:0d:3d:e9:ac:08:0e:af:
ad:8d:63:ef:b4:da:31:48:43:fc:b6:e5:02:0e:ac:
00:c2:6c:c5:71:2a:81:f4:cc:15:c3:9e:51:a0:f5:
ff:92:7d:65:f4:a4:34:c6:d5:02:ab:e5:0b:9d:34:
5e:92:4b:9c:4b:ae:8f:dd:1e:21:e0:e9:be:05:70:
78:47:ba:0f:87:a3:c4:5b:25:65:40:69:d7:2a:f6:
be:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:80:DE:D6:F2:98:90:9C:4F:57:9F:FB:ED:0D:13:8A:5D:CA:C6:49
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/J4De1vKYkJxPV5_77Q0Til3Kxkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.217.0/24
IPv6:
2a12:7800::/32
Signature Algorithm: sha256WithRSAEncryption
2f:b5:18:30:9c:d7:e2:63:09:6b:9a:e8:04:30:ff:de:53:b9:
ae:ba:90:29:b6:90:66:65:bc:49:9c:5e:20:c7:3a:9d:21:12:
78:48:88:23:fc:40:5c:59:2a:94:37:ef:d3:ea:8e:ae:a1:5d:
2b:86:6e:7a:75:3a:d4:5c:2f:1e:52:02:2f:f5:6b:3f:91:e5:
dd:bf:ad:4a:0b:76:5e:f3:76:d6:a9:23:36:eb:ac:8d:4f:ba:
c6:79:94:11:c0:39:28:b3:c5:77:89:e6:e5:93:73:6a:e3:a7:
66:5a:31:95:fd:3f:9b:20:5c:3c:5c:86:c6:8b:7d:49:f9:6a:
7b:cd:36:0d:79:b7:53:fb:36:11:ae:bf:00:f1:7c:e9:4b:36:
fb:a0:87:24:a8:83:d4:65:e9:c1:7b:f2:9b:98:fa:7d:1b:db:
9c:0e:03:9b:e1:ce:5a:e4:a8:27:c5:bd:cb:86:2e:57:c7:d2:
ac:cd:31:fb:77:3b:44:bf:f2:25:ae:df:df:a2:91:65:e3:e5:
bb:19:ec:05:1f:31:dc:fb:7d:9d:a8:19:70:6f:89:72:a8:2a:
11:9d:fb:c4:85:4b:87:12:d8:f3:70:3f:40:99:17:e7:3d:ed:
d3:6d:1c:09:77:87:ee:f7:23:f2:2d:29:d2:b2:88:75:44:74:
58:b4:d2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:01 2024 by rpki-client on console-ams.rpki-client.org