Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/JcmZwUd0VN5cccd1k37t5AUF_mY.roa
File: JcmZwUd0VN5cccd1k37t5AUF_mY.roa (raw, json)
Hash identifier: UeLJsFdoBjVN/xp8p23JGAraHiRfnVjf863Xbfqm7Gg=
Subject key identifier: 25:C9:99:C1:47:74:54:DE:5C:71:C7:75:93:7E:ED:E4:05:05:FE:66
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAFFC23D74CA9C2518648B0C60543E
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/JcmZwUd0VN5cccd1k37t5AUF_mY.roa
Signing time: Sun 01 Jan 2023 10:05:21 +0000
ROA not before: Sun 01 Jan 2023 10:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199150
IP address blocks: 193.180.242.0/24 maxlen: 24
194.71.236.0/22 maxlen: 22
2a01:280:108::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:ff:c2:3d:74:ca:9c:25:18:64:8b:0c:60:54:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25c999c1477454de5c71c775937eede40505fe66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6f:de:31:8c:76:06:ae:31:02:ac:aa:c7:a8:
b9:d0:be:1b:8e:e5:36:ba:df:3c:46:2a:ae:d1:e7:
b7:48:b1:4b:5b:4c:e7:f0:93:40:ca:79:f4:4a:0a:
d9:dc:b3:49:99:cf:1d:3e:18:f6:a8:60:df:7b:c7:
e9:8a:c0:85:2f:b0:cf:82:61:4d:45:96:00:91:eb:
1d:1f:cd:37:ad:d3:fe:4e:18:f1:f2:c4:78:73:cc:
a7:3c:2d:29:ff:e1:b0:81:06:4e:76:7c:33:13:fe:
e3:5f:a2:1b:d4:0e:c0:93:23:a2:02:32:30:99:d3:
29:37:6a:fb:56:44:ca:a9:c2:df:95:58:14:9a:58:
7e:e3:ef:21:74:e3:b6:a7:5f:43:b3:46:ec:5e:37:
75:2d:4a:28:d6:50:ea:cc:0d:0e:70:1d:c1:a6:72:
ae:d0:bc:33:4a:12:64:f3:f1:7f:ef:15:ce:a8:1f:
c3:5c:68:f0:13:35:83:b2:99:f3:d1:08:32:41:db:
1b:f4:1c:33:61:18:a9:f5:21:ba:83:10:c2:3f:1c:
bd:b6:22:2f:f1:b9:a4:4c:b5:6a:bc:b2:46:8f:e9:
68:45:27:c5:c3:c9:98:8a:94:6f:59:ac:6e:96:ce:
00:89:fc:4e:b4:c2:6c:da:d5:28:d2:08:5d:15:76:
e9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C9:99:C1:47:74:54:DE:5C:71:C7:75:93:7E:ED:E4:05:05:FE:66
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/JcmZwUd0VN5cccd1k37t5AUF_mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.242.0/24
194.71.236.0/22
IPv6:
2a01:280:108::/48
Signature Algorithm: sha256WithRSAEncryption
6e:c1:c8:15:44:de:5e:3a:cf:64:a2:b1:8d:6d:1e:44:50:cf:
94:21:a7:1f:4f:cd:c6:ec:dc:25:d3:d8:71:94:53:68:3f:2a:
70:5c:15:d5:d6:37:ec:84:7b:a9:3a:b0:b7:3d:9f:a8:2e:67:
73:75:54:42:1f:5f:fe:29:ff:90:1d:69:df:28:99:7e:91:63:
12:fe:f9:51:cc:fd:dc:b4:b6:e5:55:5e:96:fd:84:27:52:67:
29:52:9b:c0:4b:92:a8:64:b9:f3:8c:2c:f0:30:df:aa:fc:3e:
15:04:b5:d2:08:3a:79:db:07:d5:30:5d:ef:bb:d5:d2:bc:dd:
ee:26:1d:fe:d6:85:9b:38:8f:bb:92:d7:57:ea:51:40:61:58:
e4:ab:09:f3:04:cb:7e:24:71:e4:3e:d8:2d:b6:17:f4:ad:38:
f9:25:17:de:08:06:67:1d:86:f8:55:f5:cf:73:1a:98:53:18:
b8:d7:96:48:aa:a5:45:a8:5b:24:8a:31:50:ef:5f:26:da:51:
ff:1f:b9:92:23:c5:e7:54:30:68:70:13:31:ed:4d:4f:4b:15:
74:c0:c8:a5:f0:12:63:c5:38:1f:be:52:57:f7:31:8e:36:29:
21:0a:3a:8d:36:c6:db:9a:45:fa:38:4c:29:ed:6f:12:a4:eb:
5d:6a:83:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:53 2024 by rpki-client on console-fra.rpki-client.org