Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Jj9-86NO90Ab6kgT60dN2EuIwyc.roa
File: Jj9-86NO90Ab6kgT60dN2EuIwyc.roa (raw, json)
Hash identifier: YMTHiGYpImDn8tuEsiNBg2MCMs8X46iVv/BNSiQg56U=
Subject key identifier: 26:3F:7E:F3:A3:4E:F7:40:1B:EA:48:13:EB:47:4D:D8:4B:88:C3:27
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018AA86D0047B816690F1FD0162223E29B0B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Jj9-86NO90Ab6kgT60dN2EuIwyc.roa
Signing time: Mon 18 Sep 2023 13:13:50 +0000
ROA not before: Mon 18 Sep 2023 13:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49217
IP address blocks: 212.115.41.0/24 maxlen: 24
45.84.222.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
45.88.89.0/24 maxlen: 24
178.215.237.0/24 maxlen: 24
94.156.176.0/24 maxlen: 24
87.120.33.0/24 maxlen: 24
185.226.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a8:6d:00:47:b8:16:69:0f:1f:d0:16:22:23:e2:9b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 18 13:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=263f7ef3a34ef7401bea4813eb474dd84b88c327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:3e:00:f5:6a:91:73:29:4e:f8:c1:98:34:
82:60:72:5b:bb:c5:1c:14:2d:44:9c:57:8a:31:ef:
55:89:5d:3b:6e:20:8f:f9:62:1c:44:31:6c:6e:ea:
68:ea:cf:9a:08:b6:83:bc:44:53:90:3d:40:ec:dd:
58:7d:b8:42:e5:7e:d3:1e:5b:4e:ef:e1:79:b5:61:
ef:55:6f:c1:14:35:08:f2:77:03:81:d1:af:a0:9d:
95:7f:8f:44:c7:a0:05:f7:53:04:9a:ec:ac:34:80:
8a:4d:97:03:08:58:34:6b:3a:0c:75:c3:2f:4f:8c:
d8:ec:14:fb:f8:fd:f0:4b:76:d6:7b:a1:fd:93:99:
f6:2e:aa:5c:d7:2a:4f:79:81:f7:e1:86:44:c6:e8:
a4:1b:56:7d:10:01:47:91:96:53:4d:6f:78:b5:e5:
09:3a:6d:a0:3f:63:7c:0c:85:39:68:0c:31:87:a1:
46:94:00:d9:d9:8d:0b:6a:af:5e:3e:42:a3:a0:13:
32:00:ad:a1:2c:04:04:95:d4:08:16:50:c2:d9:b9:
47:43:5e:89:20:98:6b:a8:ec:c5:c7:1e:55:a7:ff:
18:8f:57:74:9f:3f:68:e1:62:13:d1:77:c5:e2:76:
d1:9e:9e:19:2b:0e:e2:e4:ec:a0:68:a0:58:91:0e:
ee:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3F:7E:F3:A3:4E:F7:40:1B:EA:48:13:EB:47:4D:D8:4B:88:C3:27
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Jj9-86NO90Ab6kgT60dN2EuIwyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.222.0/24
45.88.89.0/24
79.110.50.0/24
87.120.33.0/24
94.156.176.0/24
178.215.237.0/24
185.226.173.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
19:a6:fb:39:e3:63:5f:06:d6:a2:eb:29:53:e9:4e:03:07:90:
ee:e3:8a:e0:d4:47:2c:00:f2:81:74:f3:64:e5:95:8f:f5:f7:
0d:45:a2:06:11:53:a6:ad:81:db:5d:20:90:20:61:5d:e0:92:
a4:23:01:a3:63:c1:36:d1:54:a0:5b:92:b1:d8:b8:2c:2e:4b:
bd:83:50:9a:f0:1e:ad:d2:20:87:35:af:a8:ad:0a:ef:4f:ac:
fa:ad:ea:a1:fd:c4:ca:93:3e:90:0f:4d:55:21:3d:26:ec:34:
e4:ff:b8:ee:13:6e:eb:0b:df:f2:7f:cd:17:1d:79:e5:c0:c4:
dd:a0:48:9f:cf:c0:89:50:7e:8e:58:b9:7f:72:4c:81:66:48:
97:4a:0f:61:42:8a:d6:a4:57:8e:c9:89:3b:6c:b5:2e:9f:9f:
b4:4b:68:c5:02:57:46:c7:65:db:71:87:a4:9c:e1:19:d2:2c:
18:c7:66:1d:17:13:9b:01:e2:91:8f:08:c3:a7:2f:47:4e:7c:
0d:d6:d4:27:64:46:0b:cb:fb:81:37:9b:84:7c:e3:0c:0c:94:
ec:b0:f6:6a:95:ad:c7:31:b3:e9:6e:d4:95:6a:79:69:74:7c:
71:a0:62:43:ff:b9:2f:a3:2d:98:d2:8d:b4:4d:e3:3c:97:58:
ce:d7:32:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 14:05:04 2023 by rpki-client on console-fra.rpki-client.org