Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/jICTarV5wPzkONO0LDyrwkhuG2Y.roa
File: jICTarV5wPzkONO0LDyrwkhuG2Y.roa (raw, json)
Hash identifier: Ozc3Lx5hYudkuyEKUErcLFOIIduvWwDZXy60WF+rUk8=
Subject key identifier: 8C:80:93:6A:B5:79:C0:FC:E4:38:D3:B4:2C:3C:AB:C2:48:6E:1B:66
Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Certificate serial: 01856C5CA530CDC99FEA10C4784F10705202
Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/jICTarV5wPzkONO0LDyrwkhuG2Y.roa
Signing time: Sun 01 Jan 2023 08:04:49 +0000
ROA not before: Sun 01 Jan 2023 08:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33915
IP address blocks: 193.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:a5:30:cd:c9:9f:ea:10:c4:78:4f:10:70:52:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a
Validity
Not Before: Jan 1 08:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c80936ab579c0fce438d3b42c3cabc2486e1b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:6d:a7:42:6b:ab:a2:28:c2:4d:81:55:b8:
96:ca:a9:87:e7:61:1a:0b:14:bf:9e:bb:b6:cd:f3:
e2:7a:59:8e:18:24:1b:00:46:30:91:8d:ce:2a:36:
56:84:98:d6:0f:d5:36:aa:9a:17:67:20:91:0e:b1:
b9:69:ba:c7:30:01:13:be:17:4b:64:66:a2:cf:8e:
d1:84:e0:ad:dc:a5:f1:b4:15:d5:2a:8a:74:71:5c:
16:9f:0f:a6:ed:d6:0f:0e:b3:d4:28:dd:0a:a1:65:
a0:62:11:3d:c7:33:2d:90:c6:06:2c:e2:82:a1:7f:
43:2a:46:e3:79:ed:35:44:8d:0f:1d:59:ed:58:82:
9e:36:00:fc:f5:54:4b:45:07:00:a1:8a:70:64:c7:
53:bb:0a:b0:45:db:aa:ad:6b:4e:10:fa:48:40:20:
43:59:c9:55:cb:a5:f6:1d:b7:ec:42:ff:14:09:fc:
7a:35:90:99:1d:b1:59:17:d3:c5:83:6e:56:1d:b9:
cc:02:77:2e:10:ef:fb:3c:78:b4:ca:4f:97:4a:bb:
86:3f:06:c7:46:62:ac:bd:2f:34:8e:fb:21:6a:67:
9e:ee:52:60:d8:1f:6d:77:69:7a:7b:e8:5a:13:e8:
2b:1d:89:a4:f3:26:03:ec:63:a1:24:bf:ed:68:e7:
b8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:80:93:6A:B5:79:C0:FC:E4:38:D3:B4:2C:3C:AB:C2:48:6E:1B:66
X509v3 Authority Key Identifier:
keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/jICTarV5wPzkONO0LDyrwkhuG2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:19:36:72:4a:87:e9:94:4f:69:d4:35:31:b2:39:b2:a7:da:
1c:00:7a:3f:b5:07:81:11:b9:87:ae:a6:9b:b4:d5:bb:db:db:
d4:4d:0a:67:9e:ba:20:91:a7:1d:6f:cc:4a:c1:f9:a6:0c:a9:
36:05:50:a6:bf:1d:92:2a:43:b0:da:8c:e9:7e:5b:bf:70:52:
96:d1:80:b5:2e:d3:8b:a3:00:86:8e:28:09:5a:46:a4:52:50:
f2:3e:c3:f9:08:e1:85:90:ba:e7:10:15:6a:35:29:e6:3a:f1:
05:f5:8a:41:b2:66:18:c3:e5:84:7f:94:b8:26:9a:1a:b5:0a:
44:cd:f1:8e:93:80:eb:c0:92:2f:cf:e1:f1:e4:25:51:4a:6a:
8e:6e:43:23:25:5b:e0:a2:4a:39:20:50:3e:3e:7a:13:22:de:
76:0f:45:83:85:24:e0:6d:33:02:40:03:c8:74:ca:5c:b8:e4:
00:72:81:b8:8a:dc:6d:85:f6:c9:ad:36:83:0e:07:8c:d1:2a:
4a:a3:ba:a7:82:2b:c1:3b:40:04:fa:2f:41:7f:9b:02:d6:4d:
49:b5:cd:10:3e:43:77:6c:c4:a0:13:b2:d8:af:c2:6d:09:59:
cb:2f:fb:ed:09:f2:92:88:1b:54:b8:38:f5:23:18:b2:de:b3:
ff:82:b4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:47 2024 by rpki-client on console.sobornost.net