Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/o58Jldas9tB26lEIGixWFJPvRas.roa
File: o58Jldas9tB26lEIGixWFJPvRas.roa (raw, json)
Hash identifier: RD4AVdTv46bgFwaVrFLniODkcEGwzor2Mbgcq3S62Dc=
Subject key identifier: A3:9F:09:95:D6:AC:F6:D0:76:EA:51:08:1A:2C:56:14:93:EF:45:AB
Certificate issuer: /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial: 01856F700A5879F5D86E33927FF0878E8398
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/o58Jldas9tB26lEIGixWFJPvRas.roa
Signing time: Sun 01 Jan 2023 22:24:51 +0000
ROA not before: Sun 01 Jan 2023 22:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8893
IP address blocks: 212.72.160.0/19 maxlen: 24
212.48.96.0/19 maxlen: 24
212.53.128.0/17 maxlen: 24
80.252.96.0/20 maxlen: 24
2a00:1f78::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:70:0a:58:79:f5:d8:6e:33:92:7f:f0:87:8e:83:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
Validity
Not Before: Jan 1 22:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a39f0995d6acf6d076ea51081a2c561493ef45ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:da:c3:3b:55:46:18:22:6a:2a:26:56:ff:cf:
5d:89:8d:ba:05:89:7e:8b:c3:12:84:de:4a:1d:26:
33:3c:6f:04:98:46:94:66:fb:45:00:39:6d:dd:08:
13:b9:c7:ea:7f:5e:97:47:ec:85:bb:99:70:a9:35:
ba:dc:5e:ab:a8:1d:e0:e1:cf:b9:6d:69:dd:e2:1d:
7c:8a:37:ce:c8:94:0a:1f:99:cb:7a:25:51:d5:d9:
96:d9:b6:1c:4f:55:d9:f0:21:ba:0d:21:5a:d7:03:
98:8b:bc:98:28:1f:51:1c:93:93:37:67:c7:98:ad:
c0:dd:7f:12:fd:cd:08:5f:f8:a0:10:03:fe:87:49:
47:11:d6:a4:e3:63:27:06:a6:66:68:88:b6:34:9b:
86:38:11:91:5b:0c:30:d3:26:82:47:76:b2:6e:ce:
fb:7e:d0:31:00:76:d4:f9:7d:8a:ec:c1:55:44:26:
3d:af:95:a7:29:d5:c4:90:d2:ee:7a:64:9b:5a:a4:
a5:83:37:94:0f:67:a0:3e:2a:27:f9:bd:ae:c1:28:
b3:b9:4e:90:46:1e:75:14:f6:8a:a8:5f:45:9d:1f:
d7:ae:22:16:cf:f8:eb:5c:82:67:5d:b0:2e:5d:06:
f9:89:f9:1f:d7:3e:d8:0e:f5:ab:30:b0:c1:3f:b4:
73:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9F:09:95:D6:AC:F6:D0:76:EA:51:08:1A:2C:56:14:93:EF:45:AB
X509v3 Authority Key Identifier:
keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/o58Jldas9tB26lEIGixWFJPvRas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.252.96.0/20
212.48.96.0/19
212.53.128.0/17
212.72.160.0/19
IPv6:
2a00:1f78::/29
Signature Algorithm: sha256WithRSAEncryption
63:66:50:8c:07:2f:1a:f7:03:bc:f0:88:1b:00:f0:4f:e0:df:
8b:a5:d5:53:56:e2:21:5f:9b:1f:b9:80:1b:27:00:b1:5b:31:
94:94:32:dd:5c:dd:48:b2:ce:42:cb:a9:b8:51:dd:d1:9d:e2:
40:d0:20:a9:f1:68:40:56:c3:d1:ab:6f:6a:eb:54:71:bc:20:
49:78:82:e2:14:8d:52:43:a6:7c:a9:3c:34:a5:bf:b5:a3:9a:
eb:0f:27:2e:0f:ac:7a:51:b7:58:3b:9b:13:a3:24:7a:28:f3:
de:62:f9:27:2e:49:68:38:c6:1e:98:7c:ac:0d:79:e1:84:82:
ad:d0:d8:7a:2e:d1:98:9a:82:a0:34:d1:d2:fc:96:b2:40:2d:
ae:e1:ba:3a:71:33:ba:08:bc:15:d6:5b:e4:b7:a1:60:ce:93:
e5:7f:7a:1e:b6:21:c4:5f:aa:5a:c4:c0:5e:68:5c:20:7b:bd:
db:a7:23:7f:69:4f:d6:a5:79:28:89:8d:ee:ed:58:44:56:5b:
75:b6:ec:13:75:3e:bd:97:3e:72:a1:a3:cd:7a:91:59:84:84:
90:09:8f:56:af:d7:51:80:1f:d3:20:63:18:8e:68:8b:27:09:
26:16:15:3e:9e:d5:a4:9b:cd:89:71:07:20:a3:ee:34:45:e7:
7e:6d:ca:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:30 2024 by rpki-client on console-ams.rpki-client.org