Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/jqU0oKOWLC3briUanSD_aF8O0r8.roa
File: jqU0oKOWLC3briUanSD_aF8O0r8.roa (raw, json)
Hash identifier: L+v/valuU0k2J4UKeJ+dGkbvYzlqBoNI4xVw4/e2wmo=
Subject key identifier: 8E:A5:34:A0:A3:96:2C:2D:DB:AE:25:1A:9D:20:FF:68:5F:0E:D2:BF
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018BFEE0B7C87B3E3C6ED550AD721C99BEA8
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/jqU0oKOWLC3briUanSD_aF8O0r8.roa
Signing time: Fri 24 Nov 2023 01:10:21 +0000
ROA not before: Fri 24 Nov 2023 01:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12668
IP address blocks: 90.157.68.0/23 maxlen: 23
188.18.112.0/24 maxlen: 24
188.18.116.0/24 maxlen: 24
188.18.113.0/24 maxlen: 24
94.31.250.0/24 maxlen: 24
188.17.116.0/23 maxlen: 23
94.31.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Dec 2023 10:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fe:e0:b7:c8:7b:3e:3c:6e:d5:50:ad:72:1c:99:be:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Nov 24 01:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ea534a0a3962c2ddbae251a9d20ff685f0ed2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:9a:41:71:f9:2f:cf:6f:89:32:f7:86:cd:
4e:e4:1a:44:b0:0a:c2:02:06:2d:f4:fb:0b:b6:1a:
82:83:01:a4:2d:38:76:1a:44:4a:52:0d:5f:7a:a1:
16:be:ac:dc:d6:c5:74:fd:87:3e:79:34:e1:b5:b7:
91:23:a7:d5:e1:f2:ff:5c:45:00:5b:95:ed:14:f2:
95:df:56:6a:29:f9:1c:ec:65:e0:62:d5:c2:8e:37:
6a:b0:2d:43:6b:ba:01:f7:02:49:28:5d:ad:7a:5a:
99:17:94:72:82:1e:09:51:dc:c7:65:ef:f7:b4:7e:
d5:09:cb:5c:cf:31:99:36:2f:5b:d1:f4:c0:9d:02:
49:f6:84:14:91:90:2d:b1:69:ef:74:76:62:ac:22:
ba:06:67:9e:79:f4:2e:81:4d:a4:28:a9:a0:e8:2c:
3f:17:d6:11:29:58:40:72:88:05:dc:11:9f:2d:94:
7a:27:f3:ce:cf:71:b8:c5:20:95:d2:17:2b:35:ee:
a5:db:0e:6b:6f:c1:cd:1e:2c:66:4a:53:9b:46:00:
f0:e2:57:4e:0b:e9:21:67:82:5d:59:8a:3f:2a:f3:
3b:b5:19:b7:96:1d:6b:b1:12:77:7c:74:64:37:be:
c2:b8:c4:1c:d6:04:91:04:a2:b0:e5:d1:39:4a:35:
4e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A5:34:A0:A3:96:2C:2D:DB:AE:25:1A:9D:20:FF:68:5F:0E:D2:BF
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/jqU0oKOWLC3briUanSD_aF8O0r8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.157.68.0/23
94.31.195.0/24
94.31.250.0/24
188.17.116.0/23
188.18.112.0/23
188.18.116.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:17:0d:77:2d:59:6f:36:b9:00:e3:39:b8:c0:ee:87:e4:c3:
35:5f:25:c1:90:d2:49:b7:94:b1:b2:7b:16:44:a8:c0:dd:55:
b6:10:ce:81:10:8c:4b:1f:6d:dc:93:fe:96:4d:b5:09:b5:af:
83:e9:80:86:54:3f:98:3f:02:26:81:16:cc:cb:0a:bf:98:13:
e6:dc:c1:eb:97:7f:63:8d:f4:a8:31:df:2d:36:36:9d:95:9e:
14:73:6d:56:d5:ca:2d:b8:75:9c:39:a6:17:80:91:c7:75:6f:
72:1c:39:a8:6b:4e:1f:f4:a7:ee:45:38:db:82:df:01:c0:14:
3f:c4:75:e1:5b:94:aa:9b:75:d9:f5:a2:7f:3c:06:a1:40:b7:
1d:5a:9f:56:76:3d:9a:1b:b5:f9:92:d6:a3:f3:1c:df:88:19:
e9:75:fb:ae:59:85:99:3a:ac:f5:c9:61:bc:48:af:86:da:39:
e3:cf:ee:33:01:4c:ec:e2:23:aa:da:96:39:73:ab:c3:22:30:
8c:34:a1:68:3f:0e:4a:43:76:a1:a4:ae:a5:dd:89:38:f8:10:
4d:21:7e:fc:bc:54:50:76:00:a4:fe:2a:dd:79:0b:dd:2e:ae:
be:7a:35:6d:13:24:18:f9:de:02:67:f1:68:68:c4:23:02:ea:
1a:aa:ba:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:26 2024 by rpki-client on console-ams.rpki-client.org