Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/NJarJdU01Xysp6bjDPd3u-luxLI.roa
File: NJarJdU01Xysp6bjDPd3u-luxLI.roa (raw, json)
Hash identifier: ozFRqvM3HtPS37mL2XgGmPP3UutplzIQKKAj20OXCng=
Subject key identifier: 34:96:AB:25:D5:34:D5:7C:AC:A7:A6:E3:0C:F7:77:BB:E9:6E:C4:B2
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649D59B6FE4AA8EB46FAA7AD50CE2F4
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/NJarJdU01Xysp6bjDPd3u-luxLI.roa
Signing time: Mon 01 Jan 2024 18:29:36 +0000
ROA not before: Mon 01 Jan 2024 18:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24964
IP address blocks: 82.103.126.0/24 maxlen: 24
212.91.186.0/24 maxlen: 24
212.91.184.0/24 maxlen: 24
82.103.127.0/24 maxlen: 24
212.91.185.0/24 maxlen: 24
195.34.123.0/24 maxlen: 24
212.91.187.0/24 maxlen: 24
88.203.132.0/24 maxlen: 24
89.253.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 12:39:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:d5:9b:6f:e4:aa:8e:b4:6f:aa:7a:d5:0c:e2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3496ab25d534d57caca7a6e30cf777bbe96ec4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8a:51:16:6e:e6:68:fb:1d:fd:62:0b:b1:90:
5a:63:f1:74:a8:a9:72:f1:f5:b3:35:3d:03:36:d6:
ec:6b:f8:3a:33:46:1a:f6:ef:f3:93:d4:08:97:96:
27:f5:09:35:04:e5:ff:a9:cb:dc:7a:f5:e3:c6:c2:
65:81:2c:e0:d7:5b:80:3c:df:26:56:a1:7d:4a:86:
7e:8d:36:cf:0e:fa:11:4e:86:36:ef:1f:26:9c:ff:
99:da:26:6b:d4:1a:64:44:f1:59:ed:85:12:58:72:
a3:97:ea:53:0a:fa:68:ef:08:d3:b8:02:d4:81:52:
61:04:63:64:8b:1b:4d:01:ec:ba:ce:2c:28:32:a5:
33:58:bc:e7:97:ee:6a:88:bf:4c:16:a2:45:ee:24:
f1:af:51:7a:bc:cb:43:27:88:88:db:16:68:5f:ca:
96:1f:ed:48:80:b7:ce:c3:96:e7:08:09:a4:65:1a:
a1:79:5d:19:da:cb:6a:76:e0:1c:cf:24:b4:aa:21:
34:55:12:15:91:50:bc:96:ae:1c:1c:98:6e:4b:1e:
bc:11:28:38:a3:88:be:27:8a:ef:0d:f7:47:35:45:
a9:8e:4f:e6:bb:47:03:08:62:f5:36:60:3e:18:39:
3a:ed:92:a5:82:11:2e:92:5d:1a:dc:ed:a6:37:58:
2e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:96:AB:25:D5:34:D5:7C:AC:A7:A6:E3:0C:F7:77:BB:E9:6E:C4:B2
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/NJarJdU01Xysp6bjDPd3u-luxLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.103.126.0/23
88.203.132.0/24
89.253.163.0/24
195.34.123.0/24
212.91.184.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:7e:e7:30:b6:18:2c:cd:b5:6f:0b:bb:66:42:38:08:ec:e3:
c0:af:de:ea:66:00:db:6d:79:03:b5:ac:2d:e9:e0:bc:64:8c:
e6:b0:8c:4d:42:8f:d9:68:b1:a8:59:a4:f4:c6:96:f7:24:60:
f8:ff:d4:52:52:9e:74:ee:2b:b2:37:f4:12:53:57:85:92:91:
7a:3a:c1:60:f8:31:2c:87:2a:14:4a:75:5d:32:de:5b:39:be:
ad:0b:ce:74:4b:cf:4a:33:9e:e3:25:0c:b9:7d:1d:7c:e2:55:
2c:d1:2b:8f:f6:e6:ac:1e:f8:b9:ef:47:a9:20:0e:8a:d4:e7:
65:04:7f:f5:72:04:ac:42:a1:a0:0e:52:0f:0f:b4:e1:77:c2:
df:22:c9:8f:b0:cb:d3:8c:92:e1:7f:09:f6:6e:a2:3e:29:fd:
17:00:cc:ff:b2:84:39:d7:aa:67:a3:2a:82:30:57:50:02:2e:
9a:79:82:8e:73:5f:4e:5e:79:a9:6d:e7:f3:3d:2e:8f:28:10:
e9:ca:e6:44:11:01:3b:96:11:5a:5d:e9:7f:c3:f5:d0:e1:cc:
3c:e1:00:47:31:56:57:aa:8a:42:38:88:13:e4:ef:b4:c8:46:
0f:45:c6:f2:78:9f:90:7b:52:4c:b5:e6:26:e4:b3:d7:88:ea:
0d:04:3a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 15:35:10 2024 by rpki-client on console-fra.rpki-client.org