Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/Jlav0nSM_GKlEcZI8aP5fQBoQ50.roa
File: Jlav0nSM_GKlEcZI8aP5fQBoQ50.roa (raw, json)
Hash identifier: Q2e0+BKcYCMhgNYLM43GXNRnzSzCBF/iKHMFwQvEiXc=
Subject key identifier: 26:56:AF:D2:74:8C:FC:62:A5:11:C6:48:F1:A3:F9:7D:00:68:43:9D
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 0185724C5F2DEB0540C83A174A78EE29916C
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/Jlav0nSM_GKlEcZI8aP5fQBoQ50.roa
Signing time: Mon 02 Jan 2023 11:44:45 +0000
ROA not before: Mon 02 Jan 2023 11:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210236
IP address blocks: 194.110.160.0/22 maxlen: 24
2a05:3a40::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:5f:2d:eb:05:40:c8:3a:17:4a:78:ee:29:91:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: Jan 2 11:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2656afd2748cfc62a511c648f1a3f97d0068439d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:62:5b:5a:e2:7f:04:2f:70:28:47:67:c8:f4:
fe:1c:30:b5:58:bd:4e:5b:4c:50:c6:11:79:29:36:
ed:e9:c4:aa:ad:8a:ab:5d:dd:e1:ad:81:54:30:4e:
4a:1d:d5:ba:26:57:cf:fe:bb:6b:53:a1:31:26:df:
70:15:39:15:e3:14:d8:df:e6:25:97:db:c8:31:7b:
f9:5b:82:16:9c:ab:1a:3b:a9:42:fa:75:fd:09:69:
8d:c1:db:f0:1a:a0:a9:50:26:f2:8e:e6:ac:15:5a:
23:70:5c:58:a4:30:5b:49:9f:47:8f:c8:54:4e:53:
b8:bc:57:73:af:b0:34:bc:4f:d1:97:b0:04:3f:2b:
be:c6:8a:f0:22:44:3c:65:90:36:79:d3:0e:7c:fe:
30:5f:7f:b8:c4:b2:c7:84:2e:b5:dd:93:bf:9f:8e:
1e:f4:55:fb:f7:6d:6b:ba:c9:62:51:55:d3:93:02:
77:0d:f6:14:43:fc:c4:21:3e:4f:43:c7:03:ae:36:
b8:08:a0:69:c0:47:28:a4:74:dc:34:14:9a:fd:6c:
80:0f:62:21:34:19:dd:16:28:67:a2:a5:ca:f8:2b:
1c:d9:d5:03:e5:7a:c2:e6:7c:16:5e:3e:cb:0b:92:
36:df:b0:0c:f4:c9:60:9a:e9:bd:ff:5a:99:cf:56:
30:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:56:AF:D2:74:8C:FC:62:A5:11:C6:48:F1:A3:F9:7D:00:68:43:9D
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/Jlav0nSM_GKlEcZI8aP5fQBoQ50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.160.0/22
IPv6:
2a05:3a40::/32
Signature Algorithm: sha256WithRSAEncryption
c3:4a:83:1a:91:f7:40:93:e6:10:5c:26:cc:44:a6:81:31:62:
11:70:4d:d2:79:08:41:2c:00:93:c2:80:70:37:f2:7d:98:ea:
5c:a8:8e:80:b3:3a:44:a4:72:6f:0b:a0:fa:3b:9f:74:ea:03:
1d:4e:76:4f:fa:e1:0a:91:77:7c:e2:39:b6:99:91:c3:68:92:
cf:0b:bf:0d:f8:79:52:67:84:06:26:63:30:a0:e0:1a:91:be:
9d:94:68:cd:1e:dd:99:c6:a2:70:e2:2d:54:c1:e9:7f:da:dc:
96:e7:12:2e:c3:19:f7:9c:16:32:24:c6:38:80:87:96:3e:ec:
31:04:35:df:59:a0:d4:95:97:dc:94:51:92:ab:b4:2d:8e:bf:
83:5d:60:8a:97:0a:d2:80:50:9a:58:4d:a3:77:7a:68:04:7e:
ca:c2:dd:cb:9b:09:05:2b:3e:34:92:0f:f0:35:39:97:2e:63:
03:86:47:18:f2:f4:81:6d:c9:ee:74:cb:29:4c:16:ec:3c:42:
5e:c5:7a:f3:97:9c:79:7a:63:de:17:38:1c:d9:01:b0:46:40:
52:ff:33:16:67:98:42:02:ea:a5:95:7a:3a:3e:4c:f2:11:6e:
9f:bb:d1:1c:65:9e:d6:e9:1f:5e:ae:0d:dc:f6:42:57:ad:d6:
45:e2:cc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:13 2024 by rpki-client on console-fra.rpki-client.org