Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JVSOZbE1M1RS7R35UH_7_xTL_q4.roa
File: JVSOZbE1M1RS7R35UH_7_xTL_q4.roa (raw, json)
Hash identifier: 3En4i/lNvnGv+dm0nJHi3eRxb8zujMeATVv2EtkpOYQ=
Subject key identifier: 25:54:8E:65:B1:35:33:54:52:ED:1D:F9:50:7F:FB:FF:14:CB:FE:AE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F8B96B76A1D52A2E340FD40F53E58E884
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JVSOZbE1M1RS7R35UH_7_xTL_q4.roa
Signing time: Sat 18 May 2024 12:04:21 +0000
ROA not before: Sat 18 May 2024 12:04:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51396
IP address blocks: 2.58.95.0/24 maxlen: 24
45.128.232.0/24 maxlen: 24
84.54.51.0/24 maxlen: 24
87.121.58.0/24 maxlen: 24
87.121.69.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
94.103.124.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 May 2024 13:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8b:96:b7:6a:1d:52:a2:e3:40:fd:40:f5:3e:58:e8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 18 12:04:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25548e65b135335452ed1df9507ffbff14cbfeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:2f:93:7a:ad:13:41:2e:6f:26:e0:57:de:
c2:2a:39:8b:c3:c6:bf:0c:65:44:b1:b0:ec:4b:e0:
43:64:1b:cc:d9:5b:40:82:cd:04:31:62:5e:2c:6b:
c9:8c:e6:b3:aa:e9:fc:f2:3e:c7:e0:2e:70:ef:dc:
43:a6:36:3f:da:64:e3:24:0f:90:08:ba:c4:1d:10:
74:68:d2:d6:fd:a6:a6:41:ba:43:28:fe:08:37:21:
e3:38:4a:b6:4f:54:a5:11:f3:10:34:00:56:92:3e:
56:c8:04:f0:f7:a5:1a:51:ab:c9:13:49:f8:ec:55:
32:73:2f:dd:1a:4d:f9:5f:59:ed:44:3d:bf:da:40:
d5:f9:d3:48:ed:d9:c5:57:36:63:f1:d6:22:5f:46:
97:52:30:f2:ef:bd:94:76:66:33:21:ee:b4:89:11:
54:e1:45:58:c3:4e:14:e8:49:90:d2:5e:50:38:aa:
11:f1:0d:16:09:97:1a:a6:b4:33:e5:05:7c:71:ac:
e8:f4:69:a4:70:02:ee:1b:f6:ab:75:06:26:42:8b:
00:88:1f:3d:b8:74:83:ff:fa:e2:f2:a7:21:cb:f8:
b5:02:fc:1f:f5:5b:ff:d5:2b:f5:8e:42:23:72:6f:
86:8f:7d:3f:bd:39:54:96:18:56:22:2c:49:0c:6d:
12:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:54:8E:65:B1:35:33:54:52:ED:1D:F9:50:7F:FB:FF:14:CB:FE:AE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JVSOZbE1M1RS7R35UH_7_xTL_q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.95.0/24
45.128.232.0/24
84.54.51.0/24
87.121.58.0/24
87.121.69.0/24
87.121.105.0/24
94.103.124.0/23
141.98.4.0/24
147.78.102.0/24
193.35.18.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:67:e5:46:62:3e:5a:b1:37:a1:b8:a1:72:e4:d5:0d:52:26:
c2:de:ed:0a:c5:9b:17:cc:39:6b:9f:0d:08:6c:57:26:e7:fb:
91:c0:9e:d3:52:24:1c:6e:01:e0:8b:8e:6d:9d:d4:94:58:bd:
bd:27:ec:0d:1e:b9:da:ba:b1:9e:f9:e3:e2:99:a6:a7:bd:34:
a6:0f:72:96:d6:39:39:66:b9:c8:da:8a:24:4f:f7:f3:15:d9:
2d:6e:9c:38:88:1a:a6:f4:ce:73:dd:cd:e1:b5:f4:0c:4d:bb:
3c:af:2c:ad:30:68:fd:7d:d6:56:8a:fc:ea:6e:ed:43:b3:76:
0e:78:d7:cf:57:e1:8a:c9:7f:64:9a:b1:73:9c:0e:81:e0:cd:
bb:ca:b3:45:fb:3f:67:4b:a3:81:04:70:37:77:f4:b6:09:bf:
d3:f9:09:84:1b:93:71:f6:c4:fa:9d:2b:72:4d:63:2a:60:f0:
be:fa:65:ae:05:7f:bc:23:44:2e:14:c0:46:cd:ae:83:6d:f0:
ca:ee:50:8d:73:2e:44:87:fe:63:04:53:e4:0d:8f:28:25:29:
f9:f4:9f:1f:8e:d4:03:78:ea:aa:31:3e:76:c9:c1:81:39:d1:
0a:ca:4e:33:71:10:e2:85:2e:cb:57:b4:77:80:13:ec:ce:83:
20:15:c0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:30 2024 by rpki-client on console-ams.rpki-client.org