Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/Jp-X6WTK6FTw0l0kYwLsj4CCtUs.roa
File: Jp-X6WTK6FTw0l0kYwLsj4CCtUs.roa (raw, json)
Hash identifier: YAg0fTMWk+CHkxmbPbJuISUPOoR+kdXGpCElCsiDSY8=
Subject key identifier: 26:9F:97:E9:64:CA:E8:54:F0:D2:5D:24:63:02:EC:8F:80:82:B5:4B
Certificate issuer: /CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Certificate serial: 018CC26CFBE2A78BEFBE1F2B6EC377F2BF77
Authority key identifier: FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/Jp-X6WTK6FTw0l0kYwLsj4CCtUs.roa
Signing time: Mon 01 Jan 2024 00:29:31 +0000
ROA not before: Mon 01 Jan 2024 00:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16010
IP address blocks: 80.241.240.0/22 maxlen: 22
212.58.96.0/19 maxlen: 20
213.157.192.0/19 maxlen: 19
80.241.253.0/24 maxlen: 24
80.241.248.0/22 maxlen: 22
80.241.254.0/23 maxlen: 23
94.137.160.0/19 maxlen: 19
82.211.128.0/18 maxlen: 19
188.129.128.0/17 maxlen: 18
94.240.192.0/18 maxlen: 19
5.178.128.0/17 maxlen: 18
95.104.0.0/17 maxlen: 18
213.200.0.0/19 maxlen: 19
134.19.224.0/19 maxlen: 19
89.232.32.0/19 maxlen: 19
62.168.160.0/19 maxlen: 19
85.114.224.0/19 maxlen: 19
77.74.40.0/21 maxlen: 21
212.72.128.0/23 maxlen: 23
212.72.132.0/22 maxlen: 22
212.72.131.0/24 maxlen: 24
212.72.136.0/21 maxlen: 21
212.72.144.0/21 maxlen: 21
212.72.152.0/23 maxlen: 23
46.49.0.0/17 maxlen: 18
212.72.156.0/22 maxlen: 22
212.72.154.0/24 maxlen: 24
93.177.128.0/18 maxlen: 19
109.172.128.0/17 maxlen: 18
185.115.4.0/22 maxlen: 22
188.121.192.0/19 maxlen: 19
185.115.4.0/24 maxlen: 24
2a0b:6200::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 01 Feb 2024 05:34:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:fb:e2:a7:8b:ef:be:1f:2b:6e:c3:77:f2:bf:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Validity
Not Before: Jan 1 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=269f97e964cae854f0d25d246302ec8f8082b54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:13:6b:94:ca:25:c2:47:84:97:7a:4d:2b:
2a:78:d2:b6:ae:5b:14:7d:e0:46:6d:5e:bc:e8:92:
cb:2d:1c:e6:a7:8f:86:7e:e5:36:a0:70:d9:95:d2:
5c:5e:c1:17:93:b4:aa:cb:2a:d7:90:e2:0e:50:2f:
5f:16:a4:92:f3:fe:fd:58:67:87:df:e0:b6:e5:48:
db:0a:e3:8b:e2:f7:58:75:8f:b3:88:75:de:01:29:
74:21:5b:ec:16:92:fc:4b:ee:f8:24:8b:cc:fa:9d:
a6:7f:db:3f:b4:a0:a4:e2:5e:68:6d:3c:20:00:5b:
e8:92:2a:db:88:cd:29:c6:da:bc:b9:75:ec:fb:1b:
93:29:c4:09:ed:19:57:7d:2b:a7:bb:1f:18:c0:04:
d2:ec:b3:50:b1:11:54:37:d9:fe:4d:6f:26:e9:45:
69:31:d7:fd:74:ae:46:98:f4:bd:3c:e2:7c:6c:ec:
09:86:91:86:f8:c5:a3:07:8a:aa:32:fc:21:3e:43:
83:94:2e:cf:c8:5a:fc:f8:92:11:cd:14:d2:1a:17:
ba:99:85:df:71:9e:52:ae:61:82:b8:ea:e5:78:25:
5f:c5:75:b9:a3:9e:2a:ec:17:52:12:e1:b9:3f:1f:
07:25:17:e9:b4:2c:67:2f:80:61:c6:1a:a2:24:4c:
cc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9F:97:E9:64:CA:E8:54:F0:D2:5D:24:63:02:EC:8F:80:82:B5:4B
X509v3 Authority Key Identifier:
keyid:FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/Jp-X6WTK6FTw0l0kYwLsj4CCtUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.128.0/17
46.49.0.0/17
62.168.160.0/19
77.74.40.0/21
80.241.240.0/22
80.241.248.0/22
80.241.253.0-80.241.255.255
82.211.128.0/18
85.114.224.0/19
89.232.32.0/19
93.177.128.0/18
94.137.160.0/19
94.240.192.0/18
95.104.0.0/17
109.172.128.0/17
134.19.224.0/19
185.115.4.0/22
188.121.192.0/19
188.129.128.0/17
212.58.96.0/19
212.72.128.0/23
212.72.131.0-212.72.154.255
212.72.156.0/22
213.157.192.0/19
213.200.0.0/19
IPv6:
2a0b:6200::/29
Signature Algorithm: sha256WithRSAEncryption
3b:25:4e:f0:ee:20:c5:26:c9:44:92:f7:a0:37:04:74:cd:36:
ae:b5:27:e2:fb:ce:1e:d9:3f:80:e0:81:38:c8:5e:07:2c:54:
89:a8:d2:79:d1:ca:48:29:76:02:04:0b:8c:b9:93:b6:58:e5:
de:65:cd:4c:a6:e8:57:b3:cc:12:66:58:17:47:c3:bf:3a:c1:
12:f0:b1:4a:82:1a:78:55:c8:8b:9c:28:90:c7:6e:9d:bf:34:
05:95:1b:a4:94:e0:0b:ac:97:03:08:ae:30:04:94:08:c2:2b:
e9:af:d1:62:5e:95:df:d4:30:3b:64:09:51:0a:0b:db:74:ca:
d4:54:61:37:05:5a:49:9f:84:c9:64:b9:58:3e:93:49:83:ab:
f6:7f:d6:af:d6:a9:32:95:f0:8f:ec:fc:26:88:e7:18:6d:ac:
ce:ea:54:34:cd:e9:4a:7d:8f:1f:0c:04:0f:25:9d:99:c5:15:
96:8a:a7:07:a0:57:c4:01:56:5f:dc:49:af:7b:e7:15:02:ab:
eb:ba:4b:a5:8a:4e:d7:fc:3c:a0:11:ea:81:7c:22:e3:a1:30:
09:79:23:5a:49:76:7a:9b:49:be:b0:70:28:a0:a2:80:74:ec:
26:07:41:81:c5:38:56:a1:42:ea:1a:03:76:66:cd:34:b6:fc:
c9:64:29:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:53 2024 by rpki-client on console-ams.rpki-client.org