Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JurIyDKIWR7NJ7tp2qWK4huIYTY.roa
File: JurIyDKIWR7NJ7tp2qWK4huIYTY.roa (raw, json)
Hash identifier: 5n/ESNu/kr5upuQuJae2zV7um5Siy2hvShv1XYgyoFM=
Subject key identifier: 26:EA:C8:C8:32:88:59:1E:CD:27:BB:69:DA:A5:8A:E2:1B:88:61:36
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018DCA00B42350579286DE6EB51DEE3E9E62
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JurIyDKIWR7NJ7tp2qWK4huIYTY.roa
Signing time: Wed 21 Feb 2024 04:51:00 +0000
ROA not before: Wed 21 Feb 2024 04:51:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15731
IP address blocks: 192.124.178.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.114.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.179.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
195.133.0.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
212.192.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 09:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ca:00:b4:23:50:57:92:86:de:6e:b5:1d:ee:3e:9e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 21 04:51:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26eac8c83288591ecd27bb69daa58ae21b886136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8d:c0:fa:63:a0:81:47:05:5a:c4:d6:86:c7:
5a:62:60:4d:8c:84:b4:83:d4:0b:03:54:70:7b:b2:
c0:80:76:78:4c:d0:48:e4:fc:a2:93:48:b8:14:75:
ef:1e:f7:a4:27:c5:78:f1:d0:93:cd:f8:1f:30:56:
6a:89:ca:f9:bd:f7:46:f8:ec:18:d1:8e:cb:cf:93:
6f:e3:62:4a:27:1f:e9:06:61:ae:05:19:6c:38:26:
80:26:a4:cf:99:f4:c0:ff:d2:53:98:84:cf:c8:bc:
84:26:1e:53:79:48:26:8d:e8:b4:f1:44:77:a0:71:
13:a6:cf:ce:f3:ae:61:77:c6:90:40:48:e1:24:e3:
96:85:9c:22:e5:2e:95:42:3d:03:e5:b6:55:f9:89:
d3:78:b3:c0:20:d2:46:9b:36:f1:c8:a0:df:c0:82:
e8:a9:0a:36:28:52:9a:47:b0:e4:44:83:e3:e1:39:
34:fe:36:ce:e5:41:56:8a:32:26:21:ec:2b:b5:9d:
d0:78:16:a5:54:1d:8c:5c:08:65:f1:ce:79:f6:e1:
a7:95:52:69:eb:50:ce:45:74:26:a7:8f:ab:83:01:
db:54:c8:98:fc:0e:99:bc:c3:e3:6d:29:ff:71:ee:
3b:76:78:6c:38:dd:ef:c0:b5:11:8e:30:c3:17:4d:
db:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EA:C8:C8:32:88:59:1E:CD:27:BB:69:DA:A5:8A:E2:1B:88:61:36
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JurIyDKIWR7NJ7tp2qWK4huIYTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.189.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
194.58.47.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.30.0/24
194.87.56.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.134.0/23
194.87.179.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.84.0/23
212.192.222.0/24
Signature Algorithm: sha256WithRSAEncryption
69:fa:48:76:47:e1:9a:08:3c:06:e7:e0:6c:95:f4:14:84:5e:
32:c7:c3:3f:73:68:c9:8f:47:3a:1b:19:be:f9:64:c5:ca:76:
9d:94:a2:47:d9:6b:b9:8c:ce:56:64:79:e8:3b:84:e3:3c:22:
45:b2:56:3f:fc:78:26:b1:9d:f1:c4:25:11:d0:57:ff:89:e9:
75:d0:98:70:45:d4:6b:cf:7e:5f:d4:06:06:30:5e:86:89:a9:
18:05:05:0c:7c:ac:95:aa:d1:86:ff:d8:6a:f9:ef:3a:7f:2c:
ce:f3:40:a0:73:e4:83:62:aa:68:26:6e:54:9e:ed:02:2f:59:
a3:ca:6c:1f:bb:b7:8c:11:19:66:a5:28:e2:5f:2e:47:8a:5d:
42:57:b2:cd:48:97:15:1d:8a:9d:77:88:27:9b:a6:4e:93:93:
43:c1:60:b8:33:7d:ca:52:6b:8c:d7:45:f6:21:31:de:37:72:
d6:70:f3:64:8e:67:29:2b:26:29:2e:2e:25:a0:7b:b2:9f:8e:
ae:87:65:3c:41:d3:4d:83:6b:43:65:ae:b2:72:e7:57:56:ba:
bd:dd:7d:ba:10:bb:58:ec:83:ef:48:c6:bf:a0:a1:44:f5:66:
fa:7f:fa:42:df:6a:29:49:75:f9:ac:8b:3a:30:7b:78:d2:4a:
31:ad:e7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 14:29:31 2024 by rpki-client on console-fra.rpki-client.org