Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/jO124mHEQNC-Rt3LpUqWV0_n724.roa
File: jO124mHEQNC-Rt3LpUqWV0_n724.roa (raw, json)
Hash identifier: YZ4Ka0Tauyihm7CPczXSefX/FE75KN3Lr/fI924ntSc=
Subject key identifier: 8C:ED:76:E2:61:C4:40:D0:BE:46:DD:CB:A5:4A:96:57:4F:E7:EF:6E
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018570FBBCDF588C9D6F7FC966D492550802
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/jO124mHEQNC-Rt3LpUqWV0_n724.roa
Signing time: Mon 02 Jan 2023 05:37:03 +0000
ROA not before: Mon 02 Jan 2023 05:37:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48646
IP address blocks: 94.247.45.0/24 maxlen: 24
178.251.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:bc:df:58:8c:9d:6f:7f:c9:66:d4:92:55:08:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 2 05:37:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ced76e261c440d0be46ddcba54a96574fe7ef6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cb:86:e7:df:a7:88:fd:b3:4d:f8:2b:e1:ee:
f6:c6:ef:56:ea:78:5f:46:d7:4e:48:45:41:30:85:
06:f0:8e:64:8a:fd:b2:0d:78:41:22:bc:4e:b9:fc:
39:d5:ef:d7:e2:1b:68:44:80:8c:ba:58:f2:b7:85:
1f:a5:30:25:10:8a:6b:92:21:75:1c:de:62:a3:5b:
f1:c1:ee:da:28:60:e9:e4:ac:54:69:43:71:b0:21:
94:69:99:1f:ee:ec:6a:9f:eb:e8:e5:02:02:86:a9:
b6:87:b8:aa:ea:ea:4e:4a:a0:86:d2:6f:4a:e0:4e:
66:fc:5a:7f:b8:75:a2:3d:14:93:09:f7:52:23:24:
82:01:2b:21:5d:73:33:13:ef:67:29:4c:47:f3:52:
48:43:9e:38:4b:67:53:70:04:6f:b4:1f:b7:59:23:
cb:fe:a6:a8:e4:44:e7:32:02:3a:4e:d4:ba:4a:b2:
c7:94:49:38:bb:4d:95:19:56:ea:89:ef:9e:cb:92:
76:12:97:c8:04:d5:1d:0d:5d:da:83:4f:1b:17:94:
e5:49:5d:d0:6b:4c:af:6a:7d:e1:c2:29:3f:1e:c4:
8a:c2:66:61:19:15:dd:8b:18:c6:7f:aa:ed:7b:6e:
05:a8:20:af:7c:21:a5:3c:b9:d5:11:dd:bf:29:5e:
16:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:ED:76:E2:61:C4:40:D0:BE:46:DD:CB:A5:4A:96:57:4F:E7:EF:6E
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/jO124mHEQNC-Rt3LpUqWV0_n724.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.45.0/24
178.251.226.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:67:7c:e9:77:72:de:22:ba:43:c6:e9:cf:32:38:1f:f2:d5:
dd:74:1c:d6:45:e7:fd:bd:c9:a3:bd:92:39:f0:1a:af:36:27:
9a:52:e6:7f:56:6c:31:3e:67:aa:92:1b:58:79:62:92:f3:03:
95:28:cf:a2:d9:15:ed:93:ed:b6:4b:9a:dc:a7:db:68:be:e3:
8d:ff:c6:7d:d7:79:f4:fd:4c:7c:ed:14:dd:dd:cd:f8:9e:f0:
f8:2f:09:90:56:80:65:38:2d:74:59:16:04:e6:7c:ee:8d:2c:
82:bf:7d:c6:a0:e2:4b:c8:8d:3b:64:ac:53:dc:ab:d2:7a:0c:
93:5e:68:6f:b2:40:b3:af:91:4c:64:bd:01:6c:f2:a2:e5:48:
45:a3:e9:1a:5d:44:d8:40:c3:60:5c:e6:8b:58:57:53:76:08:
cd:90:75:f9:23:5b:a1:92:7a:bd:0d:48:5c:90:fe:52:f4:9c:
1e:a3:e1:92:a7:58:0e:fe:13:87:aa:71:a6:bb:1e:f0:29:10:
8b:35:b7:da:ec:d3:3d:10:78:51:0f:49:e2:2c:ab:37:53:c6:
df:e2:01:c0:5f:c0:22:f9:98:21:c6:d5:14:b9:91:30:49:5d:
a3:ad:ef:11:48:7a:f0:45:36:eb:46:58:79:8a:f4:24:33:5e:
8b:01:8c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:19 2024 by rpki-client on console-fra.rpki-client.org