Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/J9CJTL6vaCMyqFLD5MTyWIW6DE4.roa
File: J9CJTL6vaCMyqFLD5MTyWIW6DE4.roa (raw, json)
Hash identifier: fy8CoyvSP/gGSzGNs2ovLgyZzksSMO2KWvR6tzuYDHg=
Subject key identifier: 27:D0:89:4C:BE:AF:68:23:32:A8:52:C3:E4:C4:F2:58:85:BA:0C:4E
Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Certificate serial: 01856F1DB38B3E809835F2499CAE91BF189F
Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/J9CJTL6vaCMyqFLD5MTyWIW6DE4.roa
Signing time: Sun 01 Jan 2023 20:54:55 +0000
ROA not before: Sun 01 Jan 2023 20:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49490
IP address blocks: 194.145.64.0/19 maxlen: 25
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:b3:8b:3e:80:98:35:f2:49:9c:ae:91:bf:18:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Validity
Not Before: Jan 1 20:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27d0894cbeaf682332a852c3e4c4f25885ba0c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:99:98:30:43:69:f0:a6:26:f5:51:df:4b:
32:a4:36:bb:5e:a4:66:f3:26:e0:0e:e2:50:34:cd:
b8:81:d5:e0:42:84:49:21:29:ce:03:b5:18:ee:af:
bf:84:7b:94:65:94:58:99:4a:55:e5:33:91:9f:96:
7a:18:50:7a:54:60:f6:66:96:ca:94:ee:e3:51:e9:
3e:d7:53:2e:bb:e0:00:49:29:8a:c6:0a:12:73:45:
d7:02:58:6f:ca:aa:1e:da:0b:ec:ea:2a:8c:f8:31:
00:0a:a6:25:d2:b0:8c:cc:e8:24:cd:4f:5f:45:b2:
c1:91:94:e9:1b:bd:21:c9:c5:dd:b2:53:9b:01:cb:
a4:0c:90:0b:a4:71:30:87:6d:bd:28:fb:62:b7:0f:
a2:fc:87:07:48:20:6f:cb:49:24:3a:28:89:9e:94:
de:7e:12:ce:6d:98:df:97:1e:c8:ee:c8:59:f7:be:
3f:6d:5c:b8:56:d9:56:a7:61:5c:6e:aa:dd:25:3a:
d6:9a:3c:24:3b:a0:1e:ff:e3:df:7e:0f:b3:fd:c2:
90:33:31:7f:33:95:d5:dc:29:d6:18:2d:2d:c0:25:
04:51:27:ff:b2:17:9b:7f:5c:10:75:0a:b8:55:b5:
ac:bc:80:d9:3d:2c:85:ef:72:c9:78:36:7d:17:68:
d9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D0:89:4C:BE:AF:68:23:32:A8:52:C3:E4:C4:F2:58:85:BA:0C:4E
X509v3 Authority Key Identifier:
keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/J9CJTL6vaCMyqFLD5MTyWIW6DE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.64.0/19
Signature Algorithm: sha256WithRSAEncryption
77:cb:ca:40:c4:a7:36:21:7e:3d:69:76:57:78:ae:85:65:5e:
12:dc:04:67:27:e0:ab:f1:2c:07:b0:8d:7e:fb:f6:40:04:ee:
d6:0e:f7:61:5e:f2:11:84:dc:ff:c5:7b:ba:61:93:01:a1:12:
b5:b8:b6:27:b0:81:1f:96:e2:dc:91:68:9a:86:ce:d4:97:95:
26:72:57:ed:f1:43:6a:89:69:4c:19:3d:f7:fd:6c:97:a4:3b:
55:c9:18:2d:e0:29:27:2b:7e:bf:6c:47:1d:4e:ce:13:dd:8b:
55:a0:72:b4:8d:64:b5:59:5b:0c:5a:3f:ac:b3:a5:f3:cd:6f:
9e:a9:a3:42:11:0c:c3:18:23:53:c9:53:b8:9f:a3:90:46:82:
51:ca:a6:ee:39:f6:e9:85:b1:b6:25:02:48:30:82:a7:ae:1e:
22:bc:e0:f6:e8:fc:80:8b:aa:26:79:ba:b2:ff:a6:6a:99:a2:
29:8c:4a:1e:8a:b9:46:a3:ab:75:75:ce:c1:a2:e9:cf:c9:99:
dd:0e:a2:6f:95:e2:ff:54:c6:6e:45:3c:cb:55:31:4a:cc:83:
64:fe:ae:cf:b6:35:9b:9e:c8:ef:6d:7b:31:70:65:8b:3f:c3:
3e:18:1b:3e:88:ce:77:17:9b:59:0d:04:cf:8b:c1:a5:60:51:
19:7f:14:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:15:06 2024 by rpki-client on console.sobornost.net