Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/JIck2VboRuxk7DR6ULgPCJYJWvA.roa
File: JIck2VboRuxk7DR6ULgPCJYJWvA.roa (raw, json)
Hash identifier: dvNMGiTIHAfeChS2Ys3I5HL1ncKCtspgQXlEiERN2dE=
Subject key identifier: 24:87:24:D9:56:E8:46:EC:64:EC:34:7A:50:B8:0F:08:96:09:5A:F0
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01858675224E12EBEF438B5C7658B081531D
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/JIck2VboRuxk7DR6ULgPCJYJWvA.roa
Signing time: Fri 06 Jan 2023 09:41:41 +0000
ROA not before: Fri 06 Jan 2023 09:41:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34549
IP address blocks: 85.254.178.0/23 maxlen: 23
85.254.180.0/23 maxlen: 23
85.254.76.0/22 maxlen: 22
85.254.80.0/22 maxlen: 22
85.254.104.0/21 maxlen: 21
85.254.112.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:75:22:4e:12:eb:ef:43:8b:5c:76:58:b0:81:53:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 6 09:41:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=248724d956e846ec64ec347a50b80f0896095af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fe:57:51:24:88:4b:2c:74:80:38:21:29:b3:
77:d2:db:30:36:bc:ab:c7:55:f5:5f:74:af:8d:89:
88:49:5c:ca:29:d3:0b:c2:b6:58:e8:68:c9:20:7f:
88:a7:72:d7:af:97:03:4d:20:e0:89:7b:a5:3e:be:
08:db:b1:d6:7a:88:be:cb:b3:99:44:95:b0:19:3c:
63:15:92:46:a7:99:74:4c:5d:f3:9b:93:3b:54:64:
f9:95:6d:07:35:26:5d:a0:46:26:cc:37:c3:64:18:
bb:f7:bb:f0:e1:3c:b8:98:fe:0b:85:01:31:d9:c1:
70:d0:64:94:f9:8d:54:50:47:37:da:0e:63:3e:21:
00:57:fe:fa:65:0b:fe:be:47:35:a3:f4:a3:e4:66:
f3:a1:70:d8:b1:d6:16:70:66:e8:8d:47:36:31:e0:
93:6c:92:0e:94:4c:f4:55:aa:a4:bf:51:d2:56:fe:
3d:eb:c6:1f:fc:f7:f1:0f:ce:1a:50:a7:21:2d:a9:
60:0c:3e:34:df:a0:6d:8c:c4:90:6d:82:bc:97:38:
fb:e2:18:bc:d2:6b:fc:8c:c3:0d:95:2c:47:5e:f8:
0f:2a:57:0c:51:20:63:80:38:eb:37:e3:ad:b0:a9:
a3:20:d5:2f:a8:b6:59:21:f6:f3:e2:8e:42:e9:b8:
18:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:87:24:D9:56:E8:46:EC:64:EC:34:7A:50:B8:0F:08:96:09:5A:F0
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/JIck2VboRuxk7DR6ULgPCJYJWvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.76.0-85.254.83.255
85.254.104.0-85.254.119.255
85.254.178.0-85.254.181.255
Signature Algorithm: sha256WithRSAEncryption
aa:16:2e:19:4a:a8:5d:23:41:65:d9:14:99:d1:0c:93:83:09:
ea:12:aa:5c:76:30:36:53:c0:1d:d7:21:59:98:02:64:38:b7:
1d:47:93:c7:ea:86:7e:99:77:ce:7f:b4:17:16:d9:0b:8d:24:
77:64:9c:b2:4c:2b:44:37:2e:df:d5:58:35:e6:e8:c3:52:ed:
7a:d0:2f:87:16:00:00:81:2c:8e:27:1e:31:35:ac:70:4c:15:
1a:e7:f7:bb:f7:c6:43:c5:4c:b8:e2:ec:ee:7e:2c:fe:14:4a:
78:23:20:e3:ba:9d:ec:9e:6a:13:5a:d1:fa:26:5d:de:ff:1a:
af:e1:30:e1:0d:1a:0a:44:36:2c:a4:d2:96:82:ce:db:03:ec:
4b:7a:a5:7a:69:2b:e4:a4:23:e7:cd:7c:05:52:ad:f2:86:8b:
dc:08:cf:2f:f4:97:46:ee:10:da:06:d4:55:9e:3b:b2:9b:fb:
98:2f:88:85:73:3f:f5:c8:75:92:d8:b6:49:bf:ae:b2:d8:78:
bb:ae:d8:b1:d8:f6:50:cf:ad:5f:96:2f:5a:3b:df:e5:38:43:
b3:52:e7:16:de:fd:00:1a:2d:94:d5:7d:43:7e:dc:97:25:10:
63:0f:41:d7:89:48:e4:68:ea:c1:7c:4d:67:de:af:42:74:68:
10:da:7e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:48 2024 by rpki-client on console-ams.rpki-client.org