Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/jJvbJCvfrYqPdjW4CrgTTrfqSZQ.roa
File: jJvbJCvfrYqPdjW4CrgTTrfqSZQ.roa (raw, json)
Hash identifier: +NLTXxE9yM4qbrpaEh8zzp3RRGBBT+OSYgrzG5vR9qU=
Subject key identifier: 8C:9B:DB:24:2B:DF:AD:8A:8F:76:35:B8:0A:B8:13:4E:B7:EA:49:94
Certificate issuer: /CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
Certificate serial: 01856C6F096F492CCD8229961BD2A246AA66
Authority key identifier: 59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/jJvbJCvfrYqPdjW4CrgTTrfqSZQ.roa
Signing time: Sun 01 Jan 2023 08:24:54 +0000
ROA not before: Sun 01 Jan 2023 08:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201874
IP address blocks: 194.104.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:09:6f:49:2c:cd:82:29:96:1b:d2:a2:46:aa:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
Validity
Not Before: Jan 1 08:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c9bdb242bdfad8a8f7635b80ab8134eb7ea4994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f7:34:a5:66:21:5f:fc:a4:b4:a9:f9:6f:7b:
e6:6b:60:4e:1a:4f:b1:9e:07:32:d2:ac:31:60:7e:
be:df:a0:b5:df:f3:35:c3:db:6b:78:18:71:06:f1:
17:14:f7:cf:70:6a:eb:b2:2e:fa:18:ee:17:c2:b0:
3a:14:52:59:75:5c:11:f6:7b:09:f8:e5:f8:c3:c2:
d3:b1:87:c5:d2:d0:f6:15:cc:cc:b7:92:20:71:a2:
13:b9:e6:53:d2:78:fc:cc:9c:29:eb:ad:02:da:0d:
29:a5:6a:68:85:43:8d:a0:e6:30:05:3e:a6:18:60:
ae:09:6c:48:52:6c:19:3f:a1:9f:df:e5:2c:8a:24:
9d:4a:4a:c8:10:fa:13:f8:8a:8c:5a:a3:ae:8f:1d:
6a:d3:d3:a7:20:c8:e3:dd:22:4d:02:c8:0e:2e:77:
e4:de:c2:c6:25:d0:7c:d3:70:a5:f5:34:11:dd:c5:
e9:7b:e6:ce:80:b6:19:0a:a5:aa:38:5a:64:78:47:
b1:99:38:cd:2f:d4:69:db:71:e3:8d:7c:7d:80:c9:
70:2e:e2:99:36:bd:1e:61:dc:36:1c:f7:46:c6:7d:
5e:d2:8a:2e:74:68:d9:14:a1:95:e1:46:47:10:4a:
ed:b5:1c:2e:da:65:17:56:36:ec:8c:14:c0:f3:1c:
ab:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9B:DB:24:2B:DF:AD:8A:8F:76:35:B8:0A:B8:13:4E:B7:EA:49:94
X509v3 Authority Key Identifier:
keyid:59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/jJvbJCvfrYqPdjW4CrgTTrfqSZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.191.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:d3:a8:40:a8:9d:14:ab:dd:5f:dc:f5:2c:59:15:0a:c4:c3:
28:34:50:5e:18:81:98:b4:a3:f3:2e:1f:ce:e7:43:c9:33:5c:
2d:f7:18:f9:a4:ae:75:1c:30:d7:eb:e1:90:b1:91:85:19:00:
d4:08:be:1e:18:94:85:8e:7d:d9:6e:c8:f2:43:89:af:2a:0e:
26:52:aa:14:81:18:6a:ed:23:f5:aa:a2:72:84:e1:30:2a:4b:
4b:b8:c8:35:ef:fe:a9:3d:08:73:de:dc:7e:eb:ee:c4:5c:13:
a6:ed:b8:0c:da:92:55:fb:25:a0:47:5a:1b:9d:25:f4:15:96:
bb:97:83:a7:d1:01:4b:7a:82:09:38:f9:3d:d2:a7:5a:4e:7b:
79:8e:ff:80:19:8b:8c:17:6a:0f:5c:8b:9e:31:25:76:f3:77:
b3:8a:1f:79:6a:be:c1:85:8c:5b:a1:bd:58:19:fd:c6:a0:c1:
52:c8:e6:11:9d:7c:f4:34:30:2f:6d:75:a7:8f:73:94:a2:cc:
9b:03:e4:6d:61:d0:5e:71:d0:6a:a7:b8:be:64:40:b5:e6:8b:
36:e8:8d:bd:14:ab:a9:b9:99:45:05:3d:02:a1:8e:7d:ba:e0:
41:8d:12:98:04:e5:d9:02:b3:93:ea:3b:96:30:2f:b8:39:5c:
3b:05:27:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:19 2024 by rpki-client on console-ams.rpki-client.org