Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/Jj-aA8v_EX1mizvtJIAjPg7V1gQ.roa
File: Jj-aA8v_EX1mizvtJIAjPg7V1gQ.roa (raw, json)
Hash identifier: xQWTPjcR9QJD6Ld75SLL/mAZq/Q8QRvTAKs3a+JQXww=
Subject key identifier: 26:3F:9A:03:CB:FF:11:7D:66:8B:3B:ED:24:80:23:3E:0E:D5:D6:04
Certificate issuer: /CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859
Certificate serial: 018570D515B5A224EAC7E2FDC2260C1D3FA2
Authority key identifier: 9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/Jj-aA8v_EX1mizvtJIAjPg7V1gQ.roa
Signing time: Mon 02 Jan 2023 04:54:50 +0000
ROA not before: Mon 02 Jan 2023 04:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44951
IP address blocks: 195.230.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:15:b5:a2:24:ea:c7:e2:fd:c2:26:0c:1d:3f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859
Validity
Not Before: Jan 2 04:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=263f9a03cbff117d668b3bed2480233e0ed5d604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:40:8b:08:68:dd:ec:92:66:75:93:5e:91:5f:
a4:23:44:da:20:f0:7b:dc:ca:e5:ae:7d:6d:e0:40:
ae:6d:96:4c:93:24:f1:99:14:b0:f4:f5:a8:ee:a4:
28:79:dd:e2:5f:42:73:c7:82:7b:b3:5c:df:98:cf:
0c:fe:0e:c9:fe:37:40:43:20:3d:5c:18:2f:49:1a:
4d:a1:3f:75:c4:3e:9c:d7:fb:de:13:90:8c:51:c0:
2f:ad:a0:87:ee:b6:63:01:b0:57:17:06:5b:4f:6a:
a4:d8:a0:d7:4b:8a:13:94:de:2e:a4:5d:c2:d7:ca:
32:e1:b9:97:b7:20:86:3c:49:05:b5:8b:45:ac:99:
1d:fc:11:42:ef:ce:33:53:21:67:75:c0:25:d8:b2:
1e:42:8e:ec:70:b5:c3:b7:ad:25:4b:71:53:b1:a9:
c0:ca:da:61:ee:bb:21:ee:4b:fa:1e:1d:41:ac:fb:
77:83:34:9f:ad:29:20:22:01:8a:a0:7a:ef:92:83:
27:ef:aa:ca:ac:88:20:13:3c:be:45:28:4c:42:90:
81:b8:db:a6:df:1b:06:b3:88:97:9d:52:45:37:29:
86:eb:b9:2f:41:a4:de:9f:2e:a1:a9:35:3e:bd:41:
3c:d8:5d:2b:9e:47:dd:32:3e:d9:e5:d6:5f:1f:33:
ab:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3F:9A:03:CB:FF:11:7D:66:8B:3B:ED:24:80:23:3E:0E:D5:D6:04
X509v3 Authority Key Identifier:
keyid:9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/Jj-aA8v_EX1mizvtJIAjPg7V1gQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.114.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:3a:2c:d8:e3:09:fc:a2:ea:b9:33:b6:d5:97:7c:2f:b4:c2:
98:fa:b2:c8:20:48:5b:63:a8:fb:4d:2c:ea:8a:1b:87:93:12:
96:9e:fc:06:ac:bf:98:b4:90:ea:9d:f4:8a:7c:86:ba:7f:b8:
5b:8f:49:83:32:6e:59:bc:89:e1:63:49:3b:e2:0f:55:24:9d:
55:6b:34:b9:b8:85:f4:23:ba:77:a3:15:f2:0c:41:ea:fe:1c:
67:ac:1a:26:4e:7b:b1:32:92:04:67:4c:ba:70:33:41:a9:8f:
b8:36:7f:f6:0c:29:4d:90:f3:f6:c2:1f:43:fa:13:59:da:b0:
82:1d:1b:33:85:03:96:50:e6:2a:07:30:13:65:d3:a7:17:72:
07:ef:9b:f9:64:a9:48:e8:93:d5:b4:0d:c2:ef:87:10:ff:3d:
9d:af:c9:ea:03:57:65:09:ff:1f:74:44:fd:25:b1:8b:8d:8c:
3e:7b:e9:3d:36:d3:81:e2:de:8b:1f:36:e2:c8:83:80:3b:c0:
de:50:24:a8:46:46:4e:e3:3f:5f:d2:c8:86:0d:5e:e3:c2:95:
5a:83:a9:82:f2:a0:95:0e:53:6d:0f:ba:c0:41:cc:8c:36:1e:
31:20:56:67:f0:2c:69:11:2d:cc:c3:58:1a:c3:5e:4f:db:7e:
c4:52:5c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:16:12 2024 by rpki-client on console.sobornost.net