Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/jSJYPWiOmgX21rKQTCE64rtzEuI.roa
File: jSJYPWiOmgX21rKQTCE64rtzEuI.roa (raw, json)
Hash identifier: B904Y/ie3Sb3maG1Woka3eDBmxN6AB9SCK6/Il1Qgmg=
Subject key identifier: 8D:22:58:3D:68:8E:9A:05:F6:D6:B2:90:4C:21:3A:E2:BB:73:12:E2
Certificate issuer: /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial: 01856EB8F636FFBF2EA601DE9E3B0524147B
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/jSJYPWiOmgX21rKQTCE64rtzEuI.roa
Signing time: Sun 01 Jan 2023 19:04:53 +0000
ROA not before: Sun 01 Jan 2023 19:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33927
IP address blocks: 185.93.186.0/24 maxlen: 24
194.6.232.0/23 maxlen: 23
194.6.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:f6:36:ff:bf:2e:a6:01:de:9e:3b:05:24:14:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Validity
Not Before: Jan 1 19:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d22583d688e9a05f6d6b2904c213ae2bb7312e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:df:c7:90:a1:4c:f7:1a:11:a5:4f:06:4c:ab:
a2:38:a8:7d:8d:73:90:b1:bc:05:d3:cf:ee:ff:20:
8b:dd:20:e6:46:a4:43:e2:b0:76:7c:cd:87:1b:e5:
ee:e5:db:e1:74:48:fa:e2:8b:19:18:10:e3:61:86:
5d:6c:95:15:8f:a2:c0:66:2c:e5:f0:9f:57:e1:08:
38:80:c9:2a:ad:45:d3:73:16:03:cc:18:5b:cc:95:
de:b0:2e:bb:26:56:87:a9:1d:75:d0:b9:cc:5c:28:
15:29:77:f3:fb:09:c5:b0:05:dc:a3:bc:6e:6f:16:
27:a0:05:52:f2:a1:5e:3b:aa:1a:98:83:94:2a:b3:
d9:88:86:40:d4:4d:97:3a:1f:98:2a:ac:00:37:83:
ab:e7:9a:65:fb:af:98:b2:5c:fc:80:6d:c4:f5:18:
8a:ad:49:66:07:ba:23:6b:33:8e:40:8a:c9:b4:33:
17:53:5f:99:54:67:98:4b:40:0f:61:fe:41:a1:36:
f7:5d:76:8e:6a:9e:17:2f:e6:e4:b6:d0:c0:b4:ce:
c9:17:97:29:1e:2f:80:98:00:00:5f:77:c7:73:d6:
09:23:a8:90:6e:9b:8c:e2:fc:2b:c9:84:0e:d7:a9:
d6:13:1b:65:99:f7:82:19:6e:2f:88:cc:bf:8d:1b:
4b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:22:58:3D:68:8E:9A:05:F6:D6:B2:90:4C:21:3A:E2:BB:73:12:E2
X509v3 Authority Key Identifier:
keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/jSJYPWiOmgX21rKQTCE64rtzEuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.186.0/24
194.6.231.0-194.6.233.255
Signature Algorithm: sha256WithRSAEncryption
29:14:cd:12:37:f3:ba:3a:bf:89:cb:3f:71:34:8c:ec:05:24:
4b:26:40:3c:e4:78:79:de:34:58:be:de:24:3f:b4:1a:4c:83:
f5:36:26:94:f1:fb:76:b3:b4:f3:36:01:d5:56:96:e2:3f:b5:
0a:98:94:e8:58:8d:0f:f8:0d:7d:a7:ae:09:47:13:bc:b4:56:
26:3e:a8:ce:81:38:35:88:0e:c0:f1:34:5b:10:1d:40:f5:83:
15:91:b9:61:48:84:72:fc:6d:13:39:9c:66:6e:b6:d5:f0:9f:
02:29:e6:0a:7b:a4:2b:ad:b9:67:34:79:94:22:ac:96:22:77:
df:c2:4f:68:8f:be:6e:bb:f8:4b:e1:5b:c8:43:ae:8d:00:d0:
e1:6a:3b:34:23:11:df:0d:47:8b:11:a1:81:dc:d3:7e:24:22:
72:be:b4:b9:d4:fb:21:e1:fe:7c:36:c2:61:96:09:8e:01:98:
13:28:7a:36:1b:de:09:c4:c6:19:6d:76:ad:95:f5:3b:16:89:
46:e0:a8:dc:dd:dc:ab:97:1a:71:b1:ef:46:e5:50:9b:57:0b:
51:55:41:59:0c:61:ff:83:48:1f:51:87:a1:ff:70:3d:39:22:
00:4f:e4:f3:86:ed:36:32:50:a3:f0:fa:80:05:16:a4:d6:3e:
e2:fc:00:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:33 2024 by rpki-client on console-ams.rpki-client.org