Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/Jvk_w__jsC-bP80dGp6TQL62zWk.roa
File: Jvk_w__jsC-bP80dGp6TQL62zWk.roa (raw, json)
Hash identifier: ApEmNb6NVdb94/vuJ4nclTTzKkDfoLWiUMhQ7Wc1F1E=
Subject key identifier: 26:F9:3F:C3:FF:E3:B0:2F:9B:3F:CD:1D:1A:9E:93:40:BE:B6:CD:69
Certificate issuer: /CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Certificate serial: 01856F9DD7B154DAAF0F7AE5476D6DE1C496
Authority key identifier: C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/Jvk_w__jsC-bP80dGp6TQL62zWk.roa
Signing time: Sun 01 Jan 2023 23:14:53 +0000
ROA not before: Sun 01 Jan 2023 23:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35518
IP address blocks: 87.245.64.0/18 maxlen: 18
46.245.184.0/21 maxlen: 21
88.151.144.0/21 maxlen: 21
185.43.200.0/22 maxlen: 22
91.102.192.0/21 maxlen: 21
88.213.128.0/18 maxlen: 18
193.134.4.0/22 maxlen: 22
2a00:d80::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:d7:b1:54:da:af:0f:7a:e5:47:6d:6d:e1:c4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Validity
Not Before: Jan 1 23:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26f93fc3ffe3b02f9b3fcd1d1a9e9340beb6cd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:99:86:f5:50:7b:27:cc:39:3e:57:e8:65:50:
89:e8:e9:a7:5c:97:7e:bb:5d:59:f6:7e:ab:9c:24:
b3:c0:f2:1f:84:47:43:25:a5:bc:a6:b9:9f:b8:0e:
39:2a:3e:3c:04:c7:6a:85:9f:01:33:70:bb:2d:51:
de:fe:d0:68:dd:43:bb:48:e6:cc:e4:5e:fb:dc:28:
0f:51:bb:77:5c:a8:65:4c:1b:41:6b:47:18:24:6e:
16:61:6d:24:eb:21:2e:52:00:99:0d:b7:31:1e:a6:
32:ee:ae:20:51:cd:68:c3:ee:ed:cf:4f:72:0c:f9:
45:3a:6c:3e:0f:96:60:2c:ea:0f:64:55:99:42:a3:
c2:49:57:21:a0:3d:d8:88:7e:d7:19:e7:d7:9f:d6:
1e:f2:37:1d:70:c1:fd:2a:ac:4d:80:2c:f3:e0:6d:
e9:21:de:61:1e:70:e9:68:a5:37:a0:3f:de:67:0a:
e0:f3:10:ff:89:df:59:e1:80:89:bb:24:bc:d4:1e:
05:a1:a6:50:52:ec:95:64:16:97:22:e8:0d:0f:88:
a5:d3:a3:29:e7:7a:21:2f:d5:a6:98:a3:7d:cb:ae:
b0:fd:0b:80:ea:d8:60:35:e2:d6:fa:ae:0f:ef:16:
13:1b:b7:f7:2a:de:5f:a9:b8:3b:9d:5b:a2:c8:12:
53:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F9:3F:C3:FF:E3:B0:2F:9B:3F:CD:1D:1A:9E:93:40:BE:B6:CD:69
X509v3 Authority Key Identifier:
keyid:C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/Jvk_w__jsC-bP80dGp6TQL62zWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.184.0/21
87.245.64.0/18
88.151.144.0/21
88.213.128.0/18
91.102.192.0/21
185.43.200.0/22
193.134.4.0/22
IPv6:
2a00:d80::/29
Signature Algorithm: sha256WithRSAEncryption
77:ef:73:4f:22:d3:d9:b4:e9:8e:59:6b:e2:e6:fb:c5:19:20:
d3:c6:aa:5c:14:57:16:8f:66:7f:45:33:66:d9:e5:e5:86:09:
3d:b1:e1:02:57:c5:37:9e:3c:30:ce:ea:bc:a4:c6:7a:f9:64:
ff:00:0e:72:57:e3:cf:0d:a1:c9:83:79:fa:cd:65:a5:b9:46:
80:75:da:55:c7:ba:f8:8b:42:66:5c:a0:9c:b4:48:cc:95:4a:
a1:97:9a:02:f3:3e:98:35:be:fe:6a:db:6b:93:ed:91:d7:21:
7b:72:dd:2d:d8:59:2a:c1:99:f7:38:70:22:0c:37:8d:c9:64:
9f:e2:21:b6:c2:8a:52:e6:b4:68:a1:d6:65:ff:50:95:b7:09:
ce:45:0f:e5:ae:a7:e6:6b:c8:29:7d:99:07:3c:ee:dc:89:8c:
f3:cc:07:50:f8:12:1b:cb:7c:33:bf:8b:88:c0:a1:bd:02:ff:
68:d3:21:29:8e:cf:2e:cc:87:05:58:a7:39:f2:4d:99:fc:b9:
51:7f:45:a7:65:49:73:de:33:ea:a2:7c:17:5a:93:42:1a:33:
0c:00:60:8b:0b:d9:0a:0b:61:e4:bc:fb:a5:67:d3:8a:1a:50:
87:9e:31:26:31:6e:49:69:4b:b1:67:ae:f9:2c:7f:46:e4:e2:
2b:17:c9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:55 2024 by rpki-client on console-ams.rpki-client.org