Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/JrDuy8kJR5rc0NOl33hFj8U2yE4.roa
File: JrDuy8kJR5rc0NOl33hFj8U2yE4.roa (raw, json)
Hash identifier: PT0wYrfQ5Sx6PvhFa2vuMKPJeXT5UAFdiOynKv6DP8Q=
Subject key identifier: 26:B0:EE:CB:C9:09:47:9A:DC:D0:D3:A5:DF:78:45:8F:C5:36:C8:4E
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018570FBBE843175EAD52A2564B91F7158A7
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/JrDuy8kJR5rc0NOl33hFj8U2yE4.roa
Signing time: Mon 02 Jan 2023 05:37:04 +0000
ROA not before: Mon 02 Jan 2023 05:37:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60461
IP address blocks: 5.1.74.0/24 maxlen: 32
5.1.81.0/24 maxlen: 24
178.251.228.0/24 maxlen: 32
178.251.228.0/23 maxlen: 32
2a01:367:c1f2::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:be:84:31:75:ea:d5:2a:25:64:b9:1f:71:58:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 2 05:37:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26b0eecbc909479adcd0d3a5df78458fc536c84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:24:e1:5b:ba:cc:eb:cf:23:f2:65:b5:36:
76:1c:b7:27:74:9c:c0:61:cb:12:19:e7:20:8a:1a:
76:10:62:ca:cb:58:76:06:5e:35:ae:e3:e7:f8:77:
6d:14:4b:01:97:37:54:34:bf:86:8c:59:94:bc:d7:
90:83:6a:71:b5:f0:e2:63:40:50:4a:c2:bf:48:c6:
bd:90:f8:bc:67:81:f7:51:56:39:d1:f2:ad:b2:8c:
4c:fe:49:b5:e6:39:0b:fc:0c:5d:5d:34:ed:56:a8:
f1:96:7c:84:af:e2:3b:b1:23:87:b2:d7:ee:b1:3c:
2a:6d:2c:77:77:3c:c3:4b:66:6f:32:dc:73:ba:da:
dd:01:8d:46:7f:d6:12:ea:a5:18:46:98:03:5e:e3:
8c:00:1f:55:92:c4:b2:8a:8d:23:63:7b:a5:97:0b:
6b:68:3a:bc:df:2a:af:db:9d:81:59:ce:8c:34:6d:
f8:a8:34:df:59:4d:b7:86:46:a4:d6:79:ac:ea:17:
c5:73:78:d9:b7:c7:e6:d4:7a:27:ef:4f:6f:46:65:
42:13:74:e5:9b:2c:84:fa:65:31:14:28:86:77:55:
ab:b3:2a:38:d3:6e:d7:1d:b0:70:dd:4a:dd:dd:12:
a4:52:2d:77:eb:4b:d4:80:38:eb:50:00:60:fd:51:
5e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B0:EE:CB:C9:09:47:9A:DC:D0:D3:A5:DF:78:45:8F:C5:36:C8:4E
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/JrDuy8kJR5rc0NOl33hFj8U2yE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.74.0/24
5.1.81.0/24
178.251.228.0/23
IPv6:
2a01:367:c1f2::/48
Signature Algorithm: sha256WithRSAEncryption
9b:8a:a5:24:df:8d:c0:69:6e:52:6c:3e:bf:da:df:18:40:0a:
37:d7:f7:46:95:b0:0b:c1:98:ff:f3:b4:75:93:37:75:35:98:
3d:f1:92:03:90:79:24:51:ec:a2:fc:58:b5:34:21:ee:94:7f:
24:97:ae:c2:07:17:09:44:bd:ff:e1:e9:a5:e9:ac:3d:d4:79:
8a:bc:41:1b:ef:d7:24:cd:49:1c:ab:d3:09:2e:52:56:d1:c0:
8e:f8:bc:73:10:59:bc:e1:94:0e:54:b0:f4:94:77:bb:05:f2:
b7:f9:75:09:2d:c6:8c:87:76:7b:b8:1f:46:54:4c:f5:c8:8c:
c6:ef:e2:61:78:d6:53:51:95:31:ec:73:5d:b5:90:b4:35:43:
18:dd:ee:62:84:59:49:61:a8:3a:74:27:b1:44:d5:59:d1:df:
cd:a3:03:f1:6e:8d:03:74:07:36:eb:0e:ca:10:e5:ac:e3:77:
10:5d:7c:f6:6f:3d:25:fe:8b:ad:d6:bb:09:60:69:be:5d:6c:
c9:ad:2a:9a:d4:57:f2:1c:1c:29:90:ee:a0:b8:40:ae:90:5a:
83:eb:d8:01:6a:d2:26:0e:b8:1e:f4:0a:61:65:5d:d3:4e:eb:
7b:f2:ac:ab:ca:0f:32:59:31:a5:3e:35:39:d8:bb:4e:1b:25:
18:5a:bf:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:19 2024 by rpki-client on console-fra.rpki-client.org