Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/JxkhBjNeT5EQBYOCAr8ZU7xlm34.roa
File: JxkhBjNeT5EQBYOCAr8ZU7xlm34.roa (raw, json)
Hash identifier: Y+6tqoKpPCJvq61cTT99nvbXVRdjN0qJWtLMF4CLmxA=
Subject key identifier: 27:19:21:06:33:5E:4F:91:10:05:83:82:02:BF:19:53:BC:65:9B:7E
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 018AB105ECE930F1C24711BD55516CF247F4
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/JxkhBjNeT5EQBYOCAr8ZU7xlm34.roa
Signing time: Wed 20 Sep 2023 05:17:50 +0000
ROA not before: Wed 20 Sep 2023 05:17:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24877
IP address blocks: 88.223.100.0/22 maxlen: 22
84.55.0.0/20 maxlen: 20
84.55.16.0/21 maxlen: 21
88.223.132.0/22 maxlen: 22
84.55.24.0/21 maxlen: 21
88.223.139.0/24 maxlen: 24
88.223.136.0/23 maxlen: 23
88.223.136.0/24 maxlen: 24
88.223.140.0/22 maxlen: 22
217.147.42.0/23 maxlen: 23
217.147.39.0/24 maxlen: 24
88.222.248.0/22 maxlen: 22
84.55.44.0/23 maxlen: 23
84.55.40.0/22 maxlen: 22
84.55.38.0/23 maxlen: 23
88.223.156.0/22 maxlen: 22
84.55.46.0/23 maxlen: 23
88.222.216.0/24 maxlen: 24
217.147.33.0/24 maxlen: 24
217.147.32.0/24 maxlen: 24
2a01:7c80:8000::/33 maxlen: 33
Validation: Failed, certificate revoked on Mon 16 Oct 2023 20:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b1:05:ec:e9:30:f1:c2:47:11:bd:55:51:6c:f2:47:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Sep 20 05:17:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27192106335e4f911005838202bf1953bc659b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1f:42:31:b5:ad:17:a6:d8:e3:a8:d8:a9:31:
c7:83:6d:93:5a:6f:bf:65:35:a2:46:32:52:39:61:
42:00:d4:81:c3:38:90:17:de:ac:0e:9a:0c:f6:ed:
f7:34:9a:88:06:44:28:81:ed:7b:f3:61:bf:3d:83:
cf:d9:3e:f3:64:22:55:dc:c0:59:99:23:30:16:22:
c7:03:f9:43:fb:3b:3a:4e:d9:18:a1:be:1a:f4:ee:
0a:2c:86:4e:29:e5:37:e1:49:4d:0d:b2:70:be:ab:
be:ae:05:2b:22:98:39:c7:42:67:28:a9:e6:6c:6b:
f4:f7:5a:af:e8:b3:90:26:fd:47:11:60:23:f0:af:
39:07:a5:b5:2c:f4:29:4a:59:7b:19:e0:bf:7c:c4:
5d:2a:1b:38:49:93:95:8d:f9:d5:54:0d:ba:c7:34:
be:3d:34:2d:54:a0:9e:cd:91:ec:c0:a1:d2:c5:43:
05:e3:7c:30:9a:7e:cb:94:f2:89:30:5b:bc:d6:56:
b5:cb:06:47:0e:7e:3b:09:ed:1d:91:d7:df:76:e7:
6e:3b:48:d7:c7:1d:5d:aa:ac:0c:f5:d0:25:aa:f4:
56:88:70:5c:07:8d:19:95:60:e8:da:54:ac:9a:e3:
30:f3:00:e4:03:99:c3:2a:b8:51:c8:fd:5d:ff:9b:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:19:21:06:33:5E:4F:91:10:05:83:82:02:BF:19:53:BC:65:9B:7E
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/JxkhBjNeT5EQBYOCAr8ZU7xlm34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.0.0/19
84.55.38.0-84.55.47.255
88.222.216.0/24
88.222.248.0/22
88.223.100.0/22
88.223.132.0-88.223.137.255
88.223.139.0-88.223.143.255
88.223.156.0/22
217.147.32.0/23
217.147.39.0/24
217.147.42.0/23
IPv6:
2a01:7c80:8000::/33
Signature Algorithm: sha256WithRSAEncryption
39:e3:a6:10:72:b3:ec:ae:64:10:09:b5:15:77:bd:98:44:df:
46:ce:be:1a:0b:fb:c2:21:d6:8f:c7:f1:4d:d7:5e:5a:4a:d6:
70:c8:ff:bf:20:e0:9d:15:9c:31:a9:ca:38:ab:c2:20:77:95:
c7:e5:f8:94:b2:b8:7d:64:b0:35:e1:3c:f6:c0:f7:44:b7:bb:
9f:a2:ec:0a:1f:27:e0:e2:35:7a:91:19:42:77:2a:e9:6f:3e:
83:1d:23:4e:55:03:5d:0c:be:52:25:14:43:0b:9f:a2:2c:c4:
c1:84:8a:a6:ed:93:cb:cf:73:9c:45:79:ab:52:76:b4:d5:c1:
e8:95:c2:80:ca:3f:cd:99:c7:32:3e:6b:c4:e2:76:f0:61:c0:
79:17:60:14:bc:18:79:1b:a3:73:28:ec:df:0e:5b:7c:c7:24:
c0:a3:36:3d:6a:46:c4:0e:e1:69:d4:2e:19:07:c2:d0:8b:99:
fa:36:93:ee:4b:64:1c:57:ff:4d:c2:ac:b2:15:16:8a:cc:29:
c3:ad:f5:c7:72:be:10:9c:35:a7:99:1b:a2:71:54:3c:fb:5e:
d4:7f:13:64:12:c7:e9:07:9b:54:86:98:88:b7:8f:5a:e6:51:
0f:11:b0:23:d2:76:13:30:65:c8:99:b1:82:b4:f8:93:80:8d:
5b:f2:85:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:40 2024 by rpki-client on console-ams.rpki-client.org