Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jVHxVayycpp-xVSUsl-3QRhcXhA.roa
File: jVHxVayycpp-xVSUsl-3QRhcXhA.roa (raw, json)
Hash identifier: 1bHJHRdglyufcth0EidUggNtPniupDDvz2/7lqFX+0M=
Subject key identifier: 8D:51:F1:55:AC:B2:72:9A:7E:C5:54:94:B2:5F:B7:41:18:5C:5E:10
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018770C2D2ECAEAA2E9A3D8EE8AAB8DFC5D3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jVHxVayycpp-xVSUsl-3QRhcXhA.roa
Signing time: Tue 11 Apr 2023 14:40:28 +0000
ROA not before: Tue 11 Apr 2023 14:40:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50738
IP address blocks: 81.161.239.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 May 2023 07:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:c2:d2:ec:ae:aa:2e:9a:3d:8e:e8:aa:b8:df:c5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 11 14:40:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d51f155acb2729a7ec55494b25fb741185c5e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:34:e1:57:9c:24:d8:e9:72:99:b6:c3:7e:
bb:b7:8c:06:d2:23:87:a5:ad:b4:8b:05:e3:a8:4b:
8b:68:3e:90:e0:b1:99:a6:a7:81:bc:07:02:ac:7b:
a7:46:1c:d7:f1:05:5e:d4:91:20:c4:ff:6c:4c:b3:
18:95:10:c1:34:f6:09:ea:94:c0:40:49:0f:b0:aa:
a8:3a:1f:e5:b0:06:0e:b7:c4:84:5a:7e:aa:0d:bc:
fb:64:a6:2a:39:69:53:cd:0b:1f:2e:fe:e2:84:e6:
5b:65:60:09:c1:8f:58:08:a6:94:4e:ae:5b:ab:1a:
1d:8c:8e:5e:d0:5a:30:e7:6b:f9:53:5f:cc:0c:0a:
8a:89:a8:ac:4e:be:c6:15:2a:27:09:94:9e:23:33:
92:d8:2a:34:88:ba:80:1b:99:5b:db:bc:d4:24:eb:
98:1b:10:0b:19:f8:61:d0:5c:ca:77:cf:d9:8b:ef:
c2:a3:95:a0:10:35:da:32:24:e6:44:25:ee:19:4f:
47:60:48:1c:78:47:d1:3d:34:c5:3c:65:96:04:10:
e8:0d:71:ec:a9:29:cf:93:ea:b9:46:f4:27:1a:6d:
8f:88:a1:61:2e:0f:d8:31:47:67:aa:0d:24:35:c5:
54:1e:0b:13:13:c9:5f:ec:dd:2f:7b:1a:d1:f2:a1:
28:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:51:F1:55:AC:B2:72:9A:7E:C5:54:94:B2:5F:B7:41:18:5C:5E:10
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jVHxVayycpp-xVSUsl-3QRhcXhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.158.0/24
81.161.239.0/24
83.219.97.0/24
171.22.17.0-171.22.18.255
194.180.39.0/24
Signature Algorithm: sha256WithRSAEncryption
37:84:3d:bd:2c:ff:c3:95:2e:81:c2:89:79:46:60:70:4a:49:
4a:f4:fe:0d:3d:57:1a:d7:e4:68:23:9f:3e:81:55:54:ec:20:
fe:24:40:b4:2b:e1:a7:ad:a4:52:37:b7:e6:cb:08:55:7e:69:
b3:2f:76:43:88:e0:bf:19:c1:55:2d:3c:3c:d0:3d:99:b9:94:
35:98:9b:6b:c1:26:ab:46:9f:b0:3d:69:3b:52:e5:99:7a:c7:
25:54:be:40:5a:dc:c6:63:d7:6f:3b:3e:a5:c3:ed:9d:8d:1a:
c2:75:da:52:f1:97:b9:03:b8:01:e6:16:f6:df:b5:84:f3:7d:
62:d2:b1:d4:5b:25:aa:1f:64:10:6f:bb:3b:c4:ce:78:63:bb:
e7:7b:2a:2b:28:52:9a:96:53:70:ce:e3:b4:9f:2e:1b:82:46:
13:9b:3d:93:15:2c:ad:53:ea:c2:4d:48:b9:5f:de:6c:be:0e:
8f:1e:6c:6f:67:ce:fd:17:98:ce:c1:d4:3c:45:93:93:0f:66:
93:ba:3c:08:37:a2:12:60:62:b6:cd:b6:ab:7d:bc:96:68:86:
01:9d:f5:4e:86:e6:d9:ba:13:7d:fa:43:98:18:fc:98:7d:43:
eb:88:52:5a:71:0b:55:ea:b0:4c:42:d3:40:59:1d:de:d6:cf:
ee:98:e9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:41 2024 by rpki-client on console-ams.rpki-client.org