Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/JoeDDdw9JiP1-O0yh-Pi93b42sw.roa
File: JoeDDdw9JiP1-O0yh-Pi93b42sw.roa (raw, json)
Hash identifier: tXgdCfa4H9qUAtKWRpHzD+dP4y24Z/sQ8K33aowa6qs=
Subject key identifier: 26:87:83:0D:DC:3D:26:23:F5:F8:ED:32:87:E3:E2:F7:76:F8:DA:CC
Certificate issuer: /CN=a585e5e15aa34287cae4368cb58e7227fd87ecba
Certificate serial: 018B665D0DE47CDFE82032A81D865574AB53
Authority key identifier: A5:85:E5:E1:5A:A3:42:87:CA:E4:36:8C:B5:8E:72:27:FD:87:EC:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/JoeDDdw9JiP1-O0yh-Pi93b42sw.roa
Signing time: Wed 25 Oct 2023 10:24:16 +0000
ROA not before: Wed 25 Oct 2023 10:24:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41966
IP address blocks: 194.153.119.0/24 maxlen: 24
109.206.192.0/19 maxlen: 19
185.20.172.0/22 maxlen: 22
194.11.24.0/24 maxlen: 24
2a00:54c0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:66:5d:0d:e4:7c:df:e8:20:32:a8:1d:86:55:74:ab:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a585e5e15aa34287cae4368cb58e7227fd87ecba
Validity
Not Before: Oct 25 10:24:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2687830ddc3d2623f5f8ed3287e3e2f776f8dacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:75:93:1d:e0:0e:d1:eb:23:d3:b2:5d:22:
ab:26:b4:b2:19:5c:b2:41:2e:e1:39:8b:4d:2a:3d:
d8:29:5c:a9:aa:21:59:ea:dc:6c:2c:8d:1f:02:f5:
1a:1d:2c:af:d8:0c:9e:7b:4d:fe:42:db:6c:9d:49:
70:7c:e0:b6:d9:b3:87:0a:04:12:2b:d0:0c:ac:6c:
7a:87:f2:0f:40:e6:28:e3:18:67:57:9d:bb:f8:58:
fa:0d:2a:57:b5:3c:a7:7f:89:4d:11:51:d5:05:2b:
15:c0:30:67:c1:0b:88:aa:94:57:90:64:f5:80:14:
cd:52:4b:47:3d:28:f6:92:1f:49:fd:47:71:ae:a5:
d5:1a:e3:37:ad:9e:9f:13:88:c9:71:ba:3a:c9:4f:
7f:ba:fe:5f:fb:b2:a9:19:9d:fe:64:ce:ef:65:62:
a1:36:49:37:7f:1d:ee:5e:83:43:26:ce:6a:e7:fa:
42:c4:a0:96:3d:fb:dd:c1:e2:29:7b:9b:03:74:e6:
a4:21:a1:dd:f5:d5:76:4e:02:d2:ee:11:b5:ff:ed:
da:7c:be:c8:7e:45:65:6e:e4:a3:5b:45:58:5e:a5:
c4:ac:42:c3:59:5a:ad:da:17:0a:a5:1a:1b:fa:ad:
48:33:eb:f0:8e:52:18:40:ae:3f:90:f8:ae:9b:c1:
02:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:87:83:0D:DC:3D:26:23:F5:F8:ED:32:87:E3:E2:F7:76:F8:DA:CC
X509v3 Authority Key Identifier:
keyid:A5:85:E5:E1:5A:A3:42:87:CA:E4:36:8C:B5:8E:72:27:FD:87:EC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/JoeDDdw9JiP1-O0yh-Pi93b42sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.206.192.0/19
185.20.172.0/22
194.11.24.0/24
194.153.119.0/24
IPv6:
2a00:54c0::/32
Signature Algorithm: sha256WithRSAEncryption
6c:4b:95:c3:01:61:f4:d1:3a:a2:b1:c4:0b:b4:07:07:60:47:
3d:a1:66:9e:37:4e:b0:dc:7a:3a:20:e8:93:c2:fb:6a:cf:df:
76:16:8b:c8:f1:b7:02:f9:0f:53:65:b5:66:67:6e:24:9b:bf:
26:9d:b1:81:32:f4:19:03:8d:c8:78:ae:cb:ee:f8:f3:2a:d9:
86:ee:8c:5e:83:03:c8:b6:d0:38:76:43:cc:08:b3:0e:35:b8:
9b:c8:e2:30:dd:4e:f8:a8:1b:d9:60:07:3d:1b:90:b7:33:2c:
ce:f7:e7:9f:34:ba:22:8e:de:7f:bc:c3:b9:af:c2:48:a8:24:
60:98:6f:26:b3:76:41:b9:59:21:4b:cf:a8:7c:97:b6:eb:c1:
07:26:93:c7:66:7d:b0:77:88:b8:2e:0b:50:b1:2b:d5:76:5d:
33:e5:7d:4c:99:33:2b:80:54:96:69:1b:0f:5f:c7:fd:3c:0c:
22:dc:b1:ff:16:06:4e:af:ae:98:fe:06:22:20:ed:cd:e9:95:
d0:b8:a3:45:23:f3:7a:bd:2f:f1:06:de:ed:39:26:bf:62:e1:
87:30:ab:c7:b3:c2:f5:99:9e:6d:75:d9:f8:c2:d2:6e:7d:29:
6c:e8:4e:09:f7:95:54:05:3b:d5:0f:e2:8c:f3:bb:2f:a0:2a:
98:97:a9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:56 2024 by rpki-client on console-fra.rpki-client.org