Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JSgpZeZfFJoAktMysjAbMzYkjec.roa
File: JSgpZeZfFJoAktMysjAbMzYkjec.roa (raw, json)
Hash identifier: QEZt7+rd8G1Cuh8b1KSmgIktZ0Mr0b2Yz9Cr7yM2knM=
Subject key identifier: 25:28:29:65:E6:5F:14:9A:00:92:D3:32:B2:30:1B:33:36:24:8D:E7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018EE04D50ABFFF17074BA378AB0F505AF5F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JSgpZeZfFJoAktMysjAbMzYkjec.roa
Signing time: Mon 15 Apr 2024 05:49:07 +0000
ROA not before: Mon 15 Apr 2024 05:49:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
87.121.60.0/24 maxlen: 24
93.123.74.0/23 maxlen: 23
93.123.74.0/24 maxlen: 24
93.123.75.0/24 maxlen: 24
93.123.80.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
193.148.253.0/24 maxlen: 24
212.87.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 11:21:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e0:4d:50:ab:ff:f1:70:74:ba:37:8a:b0:f5:05:af:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 15 05:49:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25282965e65f149a0092d332b2301b3336248de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1d:0c:fe:e1:40:48:75:9a:16:b3:db:61:f0:
6f:55:40:30:a9:8c:86:cc:a0:e1:30:4a:f6:aa:09:
9d:3a:42:bd:d1:a2:4e:fc:08:dd:fc:d0:f7:a0:ba:
55:d6:90:d1:81:bc:5f:4f:4a:88:0d:96:51:e7:90:
ec:c0:a4:e3:ef:70:80:80:c2:2a:7a:c3:e5:7e:ed:
41:05:9c:25:a8:44:47:2d:14:56:6a:84:ba:10:d2:
54:1f:50:ac:65:56:48:a9:6a:7d:60:c4:39:09:89:
ab:34:3a:e2:c4:d7:cd:3e:48:28:e5:03:17:af:67:
ac:1d:f4:ca:38:ea:b7:e6:28:5b:8a:a2:fe:6c:43:
ad:bd:8a:db:1a:27:86:93:e5:46:67:d4:a3:60:54:
9d:d0:54:9f:cd:07:c3:9f:f4:41:d6:34:b2:9c:95:
a5:d7:23:69:ec:5d:f5:42:37:9f:ec:7b:12:51:4a:
2b:31:49:7a:61:7c:be:34:aa:7d:61:ce:f2:66:13:
0f:ee:3d:4f:01:5e:90:bd:4c:d1:50:39:8f:d1:55:
63:f7:de:c7:1f:b0:99:f7:e9:9b:df:ce:9e:1e:f3:
35:6d:6b:38:5d:9f:9c:46:1c:fb:1f:76:ae:0d:0c:
2a:18:28:0a:ca:e5:39:8e:58:72:69:2d:79:cd:e1:
75:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:28:29:65:E6:5F:14:9A:00:92:D3:32:B2:30:1B:33:36:24:8D:E7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JSgpZeZfFJoAktMysjAbMzYkjec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
87.121.60.0/24
93.123.74.0/23
93.123.80.0/24
185.252.160.0/23
193.148.253.0/24
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:36:72:1f:f0:f3:ee:76:8a:84:b6:0a:0f:0c:e5:95:19:44:
6e:f4:f0:ae:64:f1:df:0f:9d:f3:8c:db:cf:13:74:08:1c:66:
0f:18:7e:3d:5b:20:de:4c:5d:84:a4:5d:41:0f:df:12:3b:d1:
bc:15:7a:c2:6c:69:ab:a5:a9:be:d6:8d:83:0f:30:a7:5b:32:
d8:60:3e:6c:33:7e:b6:b2:b5:53:76:6b:92:26:6d:45:70:ec:
3e:4b:78:8d:ec:83:c8:c6:ce:76:29:c8:c5:e3:d2:04:ad:25:
b2:11:5f:9c:66:dc:3d:76:8a:27:89:f5:39:29:90:fa:05:0e:
63:f2:58:2e:f4:2c:6d:d5:95:1e:43:c3:b9:b5:c8:c6:35:62:
76:3f:a4:75:72:ef:f0:c6:9c:0c:af:da:85:69:4e:fd:69:ce:
fa:aa:b0:6c:c9:5c:15:a6:68:30:96:c0:5a:3f:e1:1f:fc:c0:
90:fb:04:7f:a1:f7:ad:ed:3e:9c:2b:0d:94:aa:df:30:4d:1c:
1e:24:47:42:ce:82:c4:71:c5:17:a8:af:8f:ca:de:9e:1b:92:
49:58:92:6d:26:54:10:96:3d:5b:25:16:c9:be:59:4f:e0:e4:
66:08:0d:65:2d:81:30:fb:15:8b:ec:a7:a8:a9:ff:06:54:81:
d6:f2:88:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:30 2024 by rpki-client on console-ams.rpki-client.org