Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/jlGxh4T1Om-s9s7FqwqGZ9zQ3FM.roa
File: jlGxh4T1Om-s9s7FqwqGZ9zQ3FM.roa (raw, json)
Hash identifier: Z4s5MjWFLsaP6FtbvN2q3kdWYVd7QatOEjvwxK+zrOM=
Subject key identifier: 8E:51:B1:87:84:F5:3A:6F:AC:F6:CE:C5:AB:0A:86:67:DC:D0:DC:53
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 01856E0B12206C2B64D2F403C09A19EBA7A2
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/jlGxh4T1Om-s9s7FqwqGZ9zQ3FM.roa
Signing time: Sun 01 Jan 2023 15:54:57 +0000
ROA not before: Sun 01 Jan 2023 15:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28944
IP address blocks: 147.185.246.0/23 maxlen: 24
147.185.254.0/23 maxlen: 24
80.231.248.0/24 maxlen: 24
195.219.123.0/24 maxlen: 24
80.231.174.0/24 maxlen: 24
2a01:3e7::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 27 Jun 2023 11:53:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0b:12:20:6c:2b:64:d2:f4:03:c0:9a:19:eb:a7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: Jan 1 15:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e51b18784f53a6facf6cec5ab0a8667dcd0dc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:51:27:39:72:48:f5:0f:a0:63:1d:33:b3:54:
1f:0f:05:00:bc:23:bc:f5:46:19:01:84:ca:48:14:
8b:67:23:d2:64:aa:9c:0b:80:41:db:c1:6d:51:26:
f5:99:a0:98:04:ba:53:c4:51:e0:f0:a3:ec:06:3f:
bb:cb:cb:0f:9b:19:90:3f:f6:df:44:00:c5:fe:ed:
1f:c5:9f:97:8f:54:a7:9b:19:8a:d6:f0:93:b6:49:
67:38:7d:61:35:b0:c4:6d:ac:51:7c:39:76:83:f3:
82:c0:e3:ae:1b:a7:82:d0:90:dd:35:3c:97:16:e7:
e9:59:33:fb:0d:13:9d:db:ea:7a:2e:a8:d6:73:33:
87:00:f5:c3:db:7b:04:9c:8f:9b:0e:f4:e5:22:1d:
a9:87:8e:6f:6a:a3:39:07:94:07:5a:52:90:5f:1d:
aa:b6:0b:d4:71:33:05:23:c8:3a:17:ce:25:0e:81:
45:9f:51:04:d9:de:9e:15:d4:2f:9f:5d:f5:eb:46:
8e:7c:2c:b1:f7:34:c0:54:01:6c:30:f4:59:30:1e:
61:7d:58:a4:53:dc:eb:52:b7:1f:1b:1f:3b:63:e6:
9c:4b:e7:99:f0:d6:6c:4c:08:4c:21:6b:ab:e4:8a:
8c:9d:99:35:e0:8d:cb:85:54:ba:fc:40:07:18:de:
bd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:51:B1:87:84:F5:3A:6F:AC:F6:CE:C5:AB:0A:86:67:DC:D0:DC:53
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/jlGxh4T1Om-s9s7FqwqGZ9zQ3FM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.231.174.0/24
80.231.248.0/24
147.185.246.0/23
147.185.254.0/23
195.219.123.0/24
IPv6:
2a01:3e7::/32
Signature Algorithm: sha256WithRSAEncryption
16:d7:c1:bc:7c:de:ef:bd:31:c2:01:0a:b2:54:7c:0f:8e:02:
c5:66:b0:81:8a:5f:ae:96:75:0b:0d:3a:93:62:25:c7:0a:57:
d6:62:11:23:66:bf:c4:c7:ab:0b:b2:74:36:51:6d:5c:71:b1:
1b:1a:fb:0c:23:1c:d4:f4:61:a4:31:22:b7:45:62:35:c3:e4:
7a:bc:49:b6:1b:0d:88:f0:d8:25:e5:6e:8f:a1:00:01:56:e8:
3d:67:64:a2:38:b4:00:ac:16:6c:d5:08:c9:c7:2a:69:8b:f4:
9a:a4:8e:dc:66:54:2e:ea:6b:5a:e7:13:52:ae:58:09:c9:e9:
b9:2e:d6:2d:39:0a:2d:f3:56:d9:6b:20:c3:13:91:2a:58:30:
db:da:18:41:c4:98:bb:99:03:3e:7a:a3:5c:76:72:97:ec:68:
6b:3f:3d:92:d1:2e:dd:b6:ea:22:e0:16:0e:e0:2f:7d:62:c3:
89:5d:24:fb:d6:01:98:04:a3:70:a9:88:f1:44:cc:19:5d:3c:
50:fd:c3:ff:5a:f6:d8:ec:40:0d:b2:fa:b0:0d:a6:04:88:18:
11:0f:3b:b3:8f:de:ec:7e:85:99:d9:06:f4:48:ad:0d:99:69:
dc:e2:09:c8:16:b5:f3:f4:2a:9a:bc:5e:a2:53:05:ed:d0:79:
04:5a:5e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:30 2024 by rpki-client on console-fra.rpki-client.org