Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/RG-S-JWjB6bRFdDrsQqNAmfORRE.roa
File: RG-S-JWjB6bRFdDrsQqNAmfORRE.roa (raw, json)
Hash identifier: 2WiXROB/ePaLgWBqbqFFcsZLAVdHaLBKQxxuOwtuvHM=
Subject key identifier: 44:6F:92:F8:95:A3:07:A6:D1:15:D0:EB:B1:0A:8D:02:67:CE:45:11
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 01886D67796AD66D447B78B5624B836978C5
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/RG-S-JWjB6bRFdDrsQqNAmfORRE.roa
Signing time: Tue 30 May 2023 16:04:37 +0000
ROA not before: Tue 30 May 2023 16:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202364
IP address blocks: 185.119.108.0/24 maxlen: 24
185.119.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6d:67:79:6a:d6:6d:44:7b:78:b5:62:4b:83:69:78:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: May 30 16:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=446f92f895a307a6d115d0ebb10a8d0267ce4511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:92:b3:34:70:a3:ba:9d:5a:a6:2f:e9:4e:12:
63:c4:57:e1:58:3c:f6:cd:00:a4:f2:69:1a:73:89:
a3:c3:10:41:79:8b:f9:e4:6d:25:e4:1d:56:44:6b:
c6:63:8c:fd:de:b6:59:fe:f9:da:59:8e:97:c8:68:
bc:44:89:48:4d:10:58:c0:a2:90:a0:ef:9d:87:bf:
72:15:2e:af:a8:c1:6d:46:23:13:0d:44:25:bc:90:
19:f2:d2:6f:e9:c4:2b:17:08:9a:9b:44:90:59:2f:
82:78:2f:87:a6:57:c1:a6:34:b8:ff:1a:f6:91:c4:
74:4b:82:7f:ea:c8:0c:46:8b:2b:11:07:01:7b:44:
d8:af:f9:6b:c9:c6:63:74:d5:c3:50:d5:eb:5b:2b:
45:e3:df:e7:ba:05:35:36:db:b6:1d:f6:92:70:9e:
2e:37:89:38:54:c2:60:9c:49:40:f8:35:5a:e5:e0:
45:d2:a2:81:f1:22:99:7d:8c:d6:e3:b8:7e:a8:4e:
2f:ad:c5:90:47:61:2e:04:eb:ff:a4:f0:a9:f3:a7:
a0:07:a7:e3:f2:d3:09:c6:0a:7f:7f:f4:47:7c:16:
b7:6b:b3:11:2e:83:18:e9:f4:e8:3b:b6:a3:6a:e0:
cd:01:2d:ae:a3:47:2c:a0:13:d3:d6:0c:2e:78:95:
f8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6F:92:F8:95:A3:07:A6:D1:15:D0:EB:B1:0A:8D:02:67:CE:45:11
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/RG-S-JWjB6bRFdDrsQqNAmfORRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.108.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:b8:14:b9:00:3e:ac:f9:12:5c:ca:c9:1b:71:c5:45:6a:ac:
bb:8f:12:ea:ba:f2:8b:7e:8b:0d:62:47:a4:44:3a:58:99:be:
8b:58:13:c8:c2:86:04:92:1c:29:f7:d0:7d:e8:3a:5e:6b:99:
a2:76:c0:73:0f:68:05:d5:cb:6d:92:d7:7a:c9:7b:35:f7:c7:
55:ad:5e:2c:ef:11:b7:b7:85:a7:46:b7:62:9e:40:73:cc:3f:
64:ad:25:8f:04:dc:51:c9:ec:46:ea:f9:36:5d:24:43:57:2d:
e4:d7:58:d2:28:8a:39:a1:ee:95:0f:19:69:ac:69:c2:5a:51:
5c:c0:eb:c0:10:00:80:4f:c7:99:9d:48:44:88:ad:33:35:e9:
a3:db:03:26:79:fe:e9:3c:22:c3:3e:c8:54:9b:56:2f:5a:14:
46:f6:1a:9c:2e:9f:48:cc:6e:d6:00:71:27:cf:cc:72:71:dc:
bc:83:64:4c:fd:9d:fc:08:4d:85:ee:67:d7:4a:04:0e:97:a3:
71:00:26:8e:c7:fe:10:92:22:a6:cb:65:10:93:5e:1f:36:ad:
75:16:97:99:3c:df:83:b7:09:0e:c8:d0:8f:5d:c6:10:f1:bb:
45:70:48:13:72:78:3f:b1:b3:9c:4e:e2:8c:03:3b:46:87:54:
90:71:a0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:45 2024 by rpki-client on console-fra.rpki-client.org