Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/J-Gie_8oSdKDYBcDK841T72YXz8.roa
File: J-Gie_8oSdKDYBcDK841T72YXz8.roa (raw, json)
Hash identifier: 8NYpKvYkdjJoJP5S0FAqBgM2uUcXQXiKbfgzUwVLP5g=
Subject key identifier: 27:E1:A2:7B:FF:28:49:D2:83:60:17:03:2B:CE:35:4F:BD:98:5F:3F
Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial: 01856C812C16D1FCD0E89A311D08EFF3627E
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/J-Gie_8oSdKDYBcDK841T72YXz8.roa
Signing time: Sun 01 Jan 2023 08:44:42 +0000
ROA not before: Sun 01 Jan 2023 08:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.155.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:2c:16:d1:fc:d0:e8:9a:31:1d:08:ef:f3:62:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Validity
Not Before: Jan 1 08:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27e1a27bff2849d2836017032bce354fbd985f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:4c:f7:90:af:c5:87:6c:c3:00:0a:de:f8:
1c:55:e2:c2:89:bf:9f:5b:aa:a6:cd:45:a0:86:7e:
90:e8:e6:f4:2e:98:a3:b6:94:a3:05:5e:27:67:9a:
bc:bf:59:ea:92:73:a9:cb:54:b9:e8:46:9d:57:c6:
bf:cf:6e:12:40:ff:33:00:5d:98:4a:41:26:85:d0:
f6:82:20:0e:5c:89:c7:8a:2b:48:ff:2f:ff:45:c1:
3a:52:84:7a:8b:31:96:bc:71:8c:26:cb:33:a2:f8:
20:3e:1c:90:94:91:a8:e9:f9:24:26:8a:f3:8f:3d:
c1:49:19:39:95:76:38:2e:b6:9b:43:8a:ec:22:52:
47:2e:7c:4f:a4:db:ad:ac:9e:60:3b:87:dc:40:17:
2c:fe:7e:83:4d:97:05:28:35:60:4f:91:c1:ef:e8:
56:78:36:54:4f:c8:dd:4a:0a:b6:3e:c5:d2:74:47:
cf:ae:13:37:96:ff:d0:a6:8a:a3:6d:21:23:ed:f9:
eb:0e:34:db:da:54:f6:66:13:c1:4c:fb:3c:46:97:
18:2f:31:02:40:f7:d4:15:21:68:84:8a:c2:14:ab:
98:02:0f:a2:b7:87:0b:41:b5:01:49:d5:06:b9:98:
d6:34:46:85:0f:bf:c2:3d:15:12:ba:b9:a7:b5:59:
9e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E1:A2:7B:FF:28:49:D2:83:60:17:03:2B:CE:35:4F:BD:98:5F:3F
X509v3 Authority Key Identifier:
keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/J-Gie_8oSdKDYBcDK841T72YXz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.233.0/24
Signature Algorithm: sha256WithRSAEncryption
82:5e:76:59:65:be:c0:e8:ec:07:ea:28:13:f5:af:cf:ab:56:
15:e0:e7:26:3b:44:7b:0e:08:c9:5d:be:f9:4f:0a:b4:88:32:
5d:25:79:57:6b:7f:ca:5d:b0:0d:39:a5:d3:65:b4:f4:3f:f4:
de:40:65:a6:e1:ac:ea:bd:da:68:12:f4:02:c8:f2:fb:3d:45:
6e:39:92:db:1a:63:c6:eb:32:1d:6e:94:6e:1c:57:66:c5:2b:
50:16:5c:e7:a8:75:ad:9b:40:64:da:0f:88:8a:6d:0f:11:0f:
4d:98:5f:31:f6:38:de:73:6e:89:c8:34:b7:fe:b4:e5:56:fb:
e2:ca:93:78:1c:4a:44:b3:02:eb:dc:ae:6b:4b:4b:b2:ca:2f:
a7:cb:65:b9:e8:d2:76:7e:d1:cb:02:a1:c0:f0:2e:f5:c9:26:
6e:0e:dc:e1:14:fc:34:ff:78:d0:e5:d7:41:c0:09:4e:30:ce:
5c:71:ce:4e:af:19:6d:b6:ee:d1:41:74:80:54:cb:6a:e4:0b:
6e:a9:b1:0f:cd:4b:f7:59:7a:13:97:79:2b:65:f0:e4:f9:d4:
d2:04:96:85:ba:eb:6f:a9:cc:f8:cc:2d:8f:a6:f2:ec:f8:aa:
c8:27:4c:a0:13:4a:8a:80:ab:e3:ed:61:fa:46:20:2b:ff:21:
49:ee:d8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:02 2024 by rpki-client on console-ams.rpki-client.org