Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/JDzKPRnBIhXxp2KDXrlaIxRwvkw.roa
File: JDzKPRnBIhXxp2KDXrlaIxRwvkw.roa (raw, json)
Hash identifier: PXyxlfzk6CROTzxZqXYa3uo2i7Ue8KuuUSufp+Rm3Rk=
Subject key identifier: 24:3C:CA:3D:19:C1:22:15:F1:A7:62:83:5E:B9:5A:23:14:70:BE:4C
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0186B17242A8FC06F351BD8DC814DD900657
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/JDzKPRnBIhXxp2KDXrlaIxRwvkw.roa
Signing time: Sun 05 Mar 2023 11:05:00 +0000
ROA not before: Sun 05 Mar 2023 11:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 185.185.251.0/24 maxlen: 24
185.122.36.0/24 maxlen: 24
79.143.58.0/24 maxlen: 32
79.143.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b1:72:42:a8:fc:06:f3:51:bd:8d:c8:14:dd:90:06:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Mar 5 11:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=243cca3d19c12215f1a762835eb95a231470be4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5f:37:23:65:c4:63:9b:4a:9c:4d:bc:da:fd:
2b:f1:90:44:81:b7:4c:73:ec:9d:26:ad:00:99:14:
17:57:d1:88:ea:9b:d2:7f:2d:23:a0:b5:70:4e:27:
c6:07:b9:52:4f:d9:ac:00:5d:79:48:42:4e:ab:e7:
cc:c8:dc:2e:34:ba:ae:72:50:9a:33:35:1b:35:56:
09:d1:83:c0:29:f5:45:1f:53:0e:da:bd:a7:9e:fc:
c5:58:77:5b:a2:af:5d:fb:38:65:89:0c:7c:b4:3a:
bf:37:90:8d:e9:15:52:e3:8b:12:a6:77:33:3c:57:
24:e7:44:72:20:95:5a:05:77:9c:f1:4c:3d:7b:39:
cf:cf:27:42:f3:d2:bc:ac:5d:04:72:3c:6a:19:f7:
f0:b2:a0:2b:8e:af:50:bd:4d:9d:aa:91:af:91:29:
2d:03:11:c1:c9:ae:3f:cc:b9:6e:c2:72:78:dc:e8:
cd:0d:4f:f8:c4:04:a6:ad:da:97:4c:3b:37:7b:d6:
28:7e:8b:41:2d:74:8b:7d:0b:5d:e5:63:aa:64:5f:
36:c4:cf:27:7d:b5:03:2a:b6:92:b6:ee:db:46:51:
b8:cb:2c:cd:e2:61:1a:2a:b2:33:49:f6:86:e6:05:
e6:2e:5d:71:a0:a8:e8:61:d3:d5:36:89:32:bb:d7:
b9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3C:CA:3D:19:C1:22:15:F1:A7:62:83:5E:B9:5A:23:14:70:BE:4C
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/JDzKPRnBIhXxp2KDXrlaIxRwvkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.56.0/24
79.143.58.0/24
185.122.36.0/24
185.185.251.0/24
Signature Algorithm: sha256WithRSAEncryption
95:38:49:47:78:83:f6:88:6c:59:bf:a8:f1:43:29:76:f8:5e:
9d:43:07:3b:73:49:b4:87:96:0e:c2:0e:a6:28:92:6b:0f:35:
03:01:8e:38:f2:5d:63:8e:a2:dd:08:80:87:c7:98:df:50:3f:
33:a6:45:9e:18:bb:8e:96:63:08:9f:37:19:67:e8:11:83:f4:
c2:fa:67:63:e7:bb:c9:80:64:3d:61:1c:eb:75:bb:c9:cf:ca:
9f:4f:da:a2:e8:62:ee:54:0b:00:d2:d1:78:4d:10:df:b1:4a:
7f:c9:96:e1:82:49:e5:a3:af:87:fb:45:00:68:de:77:8d:3d:
ac:16:f6:c5:59:8e:1c:8b:77:93:ca:1e:df:c8:d9:89:01:76:
9d:74:69:11:2c:d2:bd:db:f7:dd:59:e1:31:eb:a8:e9:94:d9:
76:b3:df:df:18:77:3e:34:cb:cc:92:a1:98:0e:b0:0b:9d:44:
87:c4:6d:5a:4e:d5:01:e3:1d:78:bb:ec:09:91:da:ff:b8:63:
40:29:26:0d:e7:bb:60:10:29:d0:59:05:6b:6e:69:b5:91:54:
5e:b9:84:d2:98:17:c1:36:86:a1:79:db:34:d8:39:7c:84:27:
30:93:22:a0:23:eb:da:b8:fe:f4:a0:b7:36:33:ff:b6:ba:7d:
d9:98:2d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org