Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/JcSvXoGFHrNJrdkk1kPkaQyPvAQ.roa
File: JcSvXoGFHrNJrdkk1kPkaQyPvAQ.roa (raw, json)
Hash identifier: eywRDmcDzQSaF1EaTWQDDn0rQWK8bqu843+yZ6z5PiU=
Subject key identifier: 25:C4:AF:5E:81:85:1E:B3:49:AD:D9:24:D6:43:E4:69:0C:8F:BC:04
Certificate issuer: /CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Certificate serial: 01856F2FF4E8A2C70E4762D5AF638CE7C519
Authority key identifier: F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/JcSvXoGFHrNJrdkk1kPkaQyPvAQ.roa
Signing time: Sun 01 Jan 2023 21:14:51 +0000
ROA not before: Sun 01 Jan 2023 21:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39647
IP address blocks: 194.30.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:f4:e8:a2:c7:0e:47:62:d5:af:63:8c:e7:c5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Validity
Not Before: Jan 1 21:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25c4af5e81851eb349add924d643e4690c8fbc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9c:ac:27:40:2c:70:c8:04:38:58:01:c8:31:
12:cf:cf:ac:58:80:28:35:dd:9a:e8:4b:c6:31:55:
63:1e:1d:04:32:f1:dc:f4:c2:37:5c:a5:0b:97:8f:
4e:4b:f9:d5:1b:6f:5c:a8:66:8a:5c:b1:85:c0:a5:
a9:eb:f8:09:08:82:de:9d:c5:4a:42:0c:a8:6d:9e:
4d:9e:b4:98:fd:1e:0f:4b:aa:6c:5d:3f:5a:71:76:
71:e8:61:9d:a8:f1:c1:f6:c4:95:9d:7c:93:e4:80:
4e:da:fd:24:d5:61:09:02:1e:e3:b6:39:13:08:f2:
05:c6:a8:5a:45:1c:f7:12:69:49:b2:fd:3c:0e:9a:
ce:3a:e3:2e:76:f4:35:e9:5b:38:13:1e:42:50:bb:
36:6a:c8:92:ec:3d:30:0a:9b:84:f1:eb:29:a5:b0:
54:71:98:f6:b2:32:bc:58:f5:c8:cf:c2:5a:b5:86:
45:b5:48:e6:ec:63:16:73:08:62:7e:41:59:25:71:
44:c4:68:8d:e7:8e:ac:31:e4:a9:13:ea:73:33:e9:
77:f9:9f:96:dc:97:49:46:c7:cb:2a:7a:79:48:f7:
78:e7:29:a7:60:92:f4:1c:20:bf:7c:2e:46:de:f3:
de:eb:cd:04:e8:b2:7b:b7:ad:0d:2e:42:76:3a:ea:
88:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C4:AF:5E:81:85:1E:B3:49:AD:D9:24:D6:43:E4:69:0C:8F:BC:04
X509v3 Authority Key Identifier:
keyid:F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/JcSvXoGFHrNJrdkk1kPkaQyPvAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.175.0/24
Signature Algorithm: sha256WithRSAEncryption
31:0c:6b:6c:7c:93:ed:8e:4f:d7:4c:ea:2a:91:6f:3f:7f:a9:
3e:1f:e6:c1:f1:f0:d8:3f:27:09:29:98:c1:f3:bf:57:40:09:
41:94:61:0c:74:07:1e:9d:98:17:bf:91:82:17:01:96:fa:73:
a3:0d:3c:d8:bd:74:94:48:db:6d:b3:e7:9c:33:be:6d:5d:21:
75:ef:36:eb:6e:9f:9a:03:e5:e1:44:14:73:45:7c:ce:c8:84:
a9:a5:d1:c5:85:99:2c:52:7d:06:3b:71:4d:e5:82:2f:c3:89:
e7:3b:89:6c:73:84:92:89:69:c5:4a:19:f8:07:17:be:cc:e2:
07:5f:bf:97:7e:4d:4d:93:28:1a:47:7f:b8:e5:cd:8a:fb:5b:
22:ef:6e:d2:c2:9f:34:7d:0e:e0:cf:27:9c:46:db:8d:e0:5c:
b0:8a:4f:2f:e7:00:34:48:3e:63:de:d6:ea:6d:16:a8:47:8a:
5c:30:bc:da:28:c4:c7:d7:b3:0b:68:44:34:3e:40:ea:2c:d1:
f7:75:26:8e:2d:e0:66:94:f2:f5:fa:6c:e9:6f:de:11:9a:43:
06:3b:d2:51:1a:ba:0b:11:e4:60:f1:71:1e:e8:f6:1d:bf:5b:
f0:e1:e7:5e:7e:35:49:a0:47:1d:cd:91:a0:4b:c8:79:f4:3b:
df:cc:1f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:34 2024 by rpki-client on console-ams.rpki-client.org