Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jSSZEr_6jZT0gtjL-ZG6WZZhRbE.roa
File: jSSZEr_6jZT0gtjL-ZG6WZZhRbE.roa (raw, json)
Hash identifier: o6qqhHMUGzovu4wxX4PRBa6RA2MJffzeeZIsA5Nv3SY=
Subject key identifier: 8D:24:99:12:BF:FA:8D:94:F4:82:D8:CB:F9:91:BA:59:96:61:45:B1
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0185A10EE275E7B544DBB97546B4DCEC7FC6
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jSSZEr_6jZT0gtjL-ZG6WZZhRbE.roa
Signing time: Wed 11 Jan 2023 13:39:45 +0000
ROA not before: Wed 11 Jan 2023 13:39:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5606
IP address blocks: 217.156.46.0/24 maxlen: 24
217.156.47.0/24 maxlen: 24
85.120.19.0/24 maxlen: 24
85.120.18.0/24 maxlen: 24
193.226.71.0/24 maxlen: 24
193.226.69.0/24 maxlen: 24
193.226.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a1:0e:e2:75:e7:b5:44:db:b9:75:46:b4:dc:ec:7f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 11 13:39:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d249912bffa8d94f482d8cbf991ba59966145b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3c:57:7a:70:44:be:83:16:c0:47:c2:89:e9:
b8:66:67:07:31:9a:33:40:be:d3:ad:27:53:1f:8a:
4f:ed:cf:6d:3c:6d:0b:0f:22:b1:f7:3d:03:c2:57:
a3:5d:17:aa:57:69:9f:a7:4e:0d:ec:39:0a:30:de:
cc:74:a0:f6:db:94:f6:4f:cf:50:6d:e0:2b:84:7f:
2d:05:57:e4:ba:78:08:f1:da:c2:51:03:3c:ae:d6:
f5:32:88:b0:b9:23:ca:da:e0:b3:18:fc:dd:81:cf:
7d:bb:81:a4:6c:76:57:74:2e:f5:ab:34:50:3e:a2:
b5:e9:cd:aa:cd:0a:d3:15:03:ff:24:95:15:4b:23:
71:ae:58:c3:c1:95:85:49:4d:0c:2a:39:a9:ef:45:
f3:b6:4e:d6:55:0e:1a:09:00:fd:dd:97:48:b7:26:
24:58:d0:01:4c:88:bc:91:49:a9:5e:13:32:86:ee:
b1:0c:18:c2:6b:00:d8:ca:f5:2c:de:11:43:3e:af:
72:f9:0f:81:f3:35:9c:43:9e:e1:52:a5:08:ef:99:
48:1d:db:96:cc:ac:c8:b8:54:1e:c4:ac:4b:e3:56:
8e:9b:29:8e:1e:c1:36:c8:b7:00:e8:f3:1b:31:c1:
31:0b:19:a0:d7:94:8f:5f:a8:85:27:19:11:0b:04:
c2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:24:99:12:BF:FA:8D:94:F4:82:D8:CB:F9:91:BA:59:96:61:45:B1
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jSSZEr_6jZT0gtjL-ZG6WZZhRbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.18.0/23
193.226.69.0-193.226.71.255
217.156.46.0/23
Signature Algorithm: sha256WithRSAEncryption
30:62:83:04:8c:b6:2a:2a:bc:75:16:67:7f:4d:1c:25:bb:fa:
8f:19:76:4b:b3:92:3f:a7:9c:81:f4:32:df:90:5f:d4:e5:0c:
d8:5a:9e:4e:49:15:d6:d1:67:e8:5c:4e:64:43:8f:22:a0:09:
6f:70:48:5e:61:90:cb:7f:29:56:df:86:66:02:ed:94:38:cc:
ec:6a:79:d9:62:0c:36:2f:84:70:e4:12:bd:0a:6c:a2:88:96:
f9:3c:9f:7f:c0:fb:aa:e2:5e:49:f4:2c:62:14:e8:a1:b4:38:
67:44:bb:12:4d:bb:1d:04:8d:3c:98:16:75:6e:dd:af:8a:78:
2c:87:76:19:fd:e5:54:24:65:16:99:ab:0b:d1:84:e5:ae:88:
4c:84:3b:16:cb:8f:24:e0:d4:13:6b:b0:94:d2:d5:15:4a:fb:
b2:a1:14:88:e4:24:74:49:05:53:65:ab:8b:06:a1:d5:fe:29:
ea:ac:b9:63:a6:b0:42:ba:3a:17:f3:7c:27:f7:66:8c:a0:1a:
e1:27:fb:df:5a:65:14:ba:10:97:5b:c7:dc:3d:00:6e:3f:86:
b9:51:87:ed:19:d5:1d:29:00:91:56:cf:d6:5d:bd:82:f7:97:
89:69:9e:5d:b9:b9:c1:1c:84:2e:2c:62:3f:ac:de:14:8c:6c:
e7:c0:24:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:17 2023 by rpki-client on console-ams.rpki-client.org