Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/cjrNTGQs85FwUpDx7B-uETHqfU4.roa
File: cjrNTGQs85FwUpDx7B-uETHqfU4.roa (raw, json)
Hash identifier: THnCyoNegjA51xh2t8QwcTkipKHgLjHoP7ii8ORgYV0=
Subject key identifier: 72:3A:CD:4C:64:2C:F3:91:70:52:90:F1:EC:1F:AE:11:31:EA:7D:4E
Certificate issuer: /CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Certificate serial: 018A6FBFC856824A74DAFA15C0084D083CEF
Authority key identifier: 6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/cjrNTGQs85FwUpDx7B-uETHqfU4.roa
Signing time: Thu 07 Sep 2023 13:05:54 +0000
ROA not before: Thu 07 Sep 2023 13:05:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198004
IP address blocks: 88.135.180.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:bf:c8:56:82:4a:74:da:fa:15:c0:08:4d:08:3c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Validity
Not Before: Sep 7 13:05:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=723acd4c642cf391705290f1ec1fae1131ea7d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:a2:95:f1:b8:9d:3a:12:52:d4:80:97:74:
5d:26:36:65:a3:6f:2f:8a:30:db:e5:da:4f:0b:34:
25:fe:2d:61:b7:93:4b:df:58:cb:e2:02:8c:3a:e6:
d0:ee:01:d6:d9:20:68:2f:e7:4a:bd:cb:21:b0:2c:
47:e3:f7:c0:0b:cb:f9:a5:fb:90:ae:6d:1d:69:8c:
62:78:f4:ff:03:7d:d9:f6:d7:a2:f7:75:32:64:8b:
5d:7a:c4:5a:fe:a9:37:50:23:06:21:28:ab:b2:01:
03:30:c8:05:c8:aa:92:d4:54:5a:52:0e:8f:ab:bd:
22:85:c5:b9:5c:97:80:b4:5e:bf:b7:8e:92:7c:6e:
9b:9b:25:16:57:8e:ee:3c:e4:07:23:79:a9:5d:ff:
5b:9d:f3:c7:8e:d0:05:c2:60:46:b8:75:6f:6e:5c:
65:2d:80:b6:3c:6c:74:da:a9:2d:e7:18:68:8a:98:
b3:e8:35:1a:31:84:0e:88:06:7a:41:97:a3:71:aa:
24:93:7a:52:c9:c1:93:68:bf:62:8f:c3:32:5b:d1:
81:e0:db:ef:f3:7b:35:7b:e2:18:b1:d1:35:cc:87:
8c:47:b9:64:a2:49:0a:1d:05:29:c4:e9:97:c8:ea:
3e:e7:40:16:ad:19:a8:fd:2f:bf:4f:8d:65:fa:55:
36:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3A:CD:4C:64:2C:F3:91:70:52:90:F1:EC:1F:AE:11:31:EA:7D:4E
X509v3 Authority Key Identifier:
keyid:6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/cjrNTGQs85FwUpDx7B-uETHqfU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.180.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:bb:fa:86:49:af:a0:67:8e:fe:1e:e4:c7:75:94:f2:d3:de:
7c:e7:16:e9:fc:49:96:91:d9:54:5f:09:d4:03:fd:00:98:cf:
14:bf:9d:87:81:02:b5:1f:a7:1e:9a:05:46:50:ec:65:30:e2:
6c:dc:46:c1:e0:30:1d:52:3e:5c:a2:ea:36:38:34:89:29:4d:
4d:b7:63:05:83:d4:30:6c:17:1d:76:41:59:24:f7:3e:86:ed:
45:df:30:7d:bc:a7:d6:89:2f:f5:78:b9:54:da:77:1d:65:74:
91:5b:99:b9:a3:bb:f9:a2:79:f0:e7:df:87:45:0e:9e:c5:37:
58:86:96:a3:77:12:a2:4b:fe:00:ab:6f:2d:41:6d:36:bc:55:
17:d1:25:16:22:8e:41:44:0b:52:0f:10:72:38:a6:e2:d6:25:
f5:ef:a3:8a:1e:ce:36:62:14:a0:6f:97:9c:55:46:65:b3:dd:
7c:59:a8:a2:7f:5e:46:54:1f:9d:09:5f:34:ce:dd:61:8d:ee:
10:59:e5:19:5f:41:27:71:69:94:58:71:e7:19:de:9c:0d:04:
a9:66:a8:3c:b3:a0:9f:75:a1:84:32:16:cd:b8:89:73:90:bd:
fd:a4:de:26:e2:e7:93:7b:8f:51:23:87:78:67:df:5c:f3:0b:
bc:cb:33:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:31:02 2024 by rpki-client on console.sobornost.net