Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jcijnf29Ch4vQk6bC-FPt1nYH40.roa
File: jcijnf29Ch4vQk6bC-FPt1nYH40.roa (raw, json)
Hash identifier: rBXIzcRS/DmHOQ6s6VVUECv2XLRie4Rwr5AdIo+0CJw=
Subject key identifier: 8D:C8:A3:9D:FD:BD:0A:1E:2F:42:4E:9B:0B:E1:4F:B7:59:D8:1F:8D
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0190DDE08C220006BB505F20869E45B0516E
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jcijnf29Ch4vQk6bC-FPt1nYH40.roa
Signing time: Tue 23 Jul 2024 04:36:39 +0000
ROA not before: Tue 23 Jul 2024 04:36:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 80.96.44.0/23 maxlen: 24
80.96.54.0/23 maxlen: 24
80.96.102.0/23 maxlen: 24
80.96.156.0/22 maxlen: 24
80.97.40.0/21 maxlen: 24
80.97.96.0/23 maxlen: 24
81.180.98.0/23 maxlen: 24
81.180.174.0/23 maxlen: 24
81.180.228.0/23 maxlen: 24
81.180.254.0/23 maxlen: 24
81.181.14.0/23 maxlen: 24
81.181.26.0/23 maxlen: 24
81.181.68.0/23 maxlen: 24
81.181.72.0/23 maxlen: 24
81.181.104.0/21 maxlen: 24
85.120.84.0/23 maxlen: 24
85.120.224.0/21 maxlen: 24
85.121.48.0/21 maxlen: 24
85.121.168.0/22 maxlen: 24
85.121.208.0/21 maxlen: 24
85.121.232.0/21 maxlen: 24
85.122.120.0/22 maxlen: 22
85.122.124.0/22 maxlen: 24
85.122.231.0/24 maxlen: 24
193.226.76.0/22 maxlen: 24
194.102.36.0/22 maxlen: 24
194.102.148.0/23 maxlen: 24
194.102.160.0/23 maxlen: 24
194.102.174.0/23 maxlen: 24
194.102.180.0/22 maxlen: 24
194.102.224.0/22 maxlen: 24
194.105.12.0/22 maxlen: 24
194.153.225.0/24 maxlen: 24
194.153.230.0/23 maxlen: 24
194.153.244.0/23 maxlen: 24
217.156.16.0/23 maxlen: 24
217.156.26.0/24 maxlen: 24
217.156.48.0/22 maxlen: 24
217.156.94.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 06:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:dd:e0:8c:22:00:06:bb:50:5f:20:86:9e:45:b0:51:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jul 23 04:36:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8dc8a39dfdbd0a1e2f424e9b0be14fb759d81f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8b:0e:9c:44:ca:d0:b1:82:85:67:cd:9f:0b:
93:8c:19:c5:ce:da:d0:56:d3:ac:0c:29:b2:2e:9b:
6b:19:e0:d4:17:6d:b1:84:3f:b2:41:bf:18:d0:bd:
01:2c:56:92:80:68:04:a4:9d:27:6e:d8:6b:3a:73:
1d:20:d4:7b:97:5a:0d:ed:1f:c4:ee:3b:e6:a8:78:
3b:14:ac:ca:66:36:b2:3e:4e:b3:91:87:64:20:4c:
32:9b:b5:e4:70:f0:6d:20:6b:4e:0f:92:c4:1f:b0:
b5:e4:72:7c:42:29:eb:fd:7f:f3:c8:c3:be:e8:63:
67:8c:6c:86:6f:0b:19:c3:c3:00:2b:93:17:46:6a:
ae:cc:b2:a6:c2:7f:5d:cb:9b:ff:c3:54:a4:06:45:
e9:96:9a:15:13:d3:4d:36:7b:7f:60:d6:00:76:e9:
83:5a:26:3e:f6:06:4f:29:5f:9b:27:72:d6:fb:b9:
f4:0f:d5:23:38:98:d7:55:bc:a9:3c:5b:15:b8:47:
51:38:6d:c6:ff:aa:e4:ab:6f:34:ca:76:46:3b:9a:
7b:30:04:a4:8d:02:61:e8:91:99:a5:cd:69:80:8e:
2d:a3:07:57:07:5c:2e:55:10:61:95:4b:ee:3e:a3:
48:c0:16:10:d6:91:25:43:09:6b:e6:b0:df:0c:1b:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C8:A3:9D:FD:BD:0A:1E:2F:42:4E:9B:0B:E1:4F:B7:59:D8:1F:8D
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jcijnf29Ch4vQk6bC-FPt1nYH40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.44.0/23
80.96.54.0/23
80.96.102.0/23
80.96.156.0/22
80.97.40.0/21
80.97.96.0/23
81.180.98.0/23
81.180.174.0/23
81.180.228.0/23
81.180.254.0/23
81.181.14.0/23
81.181.26.0/23
81.181.68.0/23
81.181.72.0/23
81.181.104.0/21
85.120.84.0/23
85.120.224.0/21
85.121.48.0/21
85.121.168.0/22
85.121.208.0/21
85.121.232.0/21
85.122.120.0/21
85.122.231.0/24
193.226.76.0/22
194.102.36.0/22
194.102.148.0/23
194.102.160.0/23
194.102.174.0/23
194.102.180.0/22
194.102.224.0/22
194.105.12.0/22
194.153.225.0/24
194.153.230.0/23
194.153.244.0/23
217.156.16.0/23
217.156.26.0/24
217.156.48.0/22
217.156.94.0/23
Signature Algorithm: sha256WithRSAEncryption
77:f1:21:ae:19:ed:94:76:84:41:c7:05:b3:c4:ec:cc:57:94:
09:df:0c:95:54:45:57:97:ef:56:fb:ba:1b:b6:b7:fb:48:7b:
a1:fe:47:3d:d8:a4:b3:78:50:91:67:fb:86:5c:d7:4d:91:f3:
87:61:b3:0c:cc:d8:d5:e2:92:14:28:46:6e:f7:c5:bd:37:a3:
d9:39:f0:23:6b:36:b6:8c:1c:a2:c7:e0:b5:24:bc:2b:dc:49:
8e:00:67:7c:16:38:f9:2f:66:ac:43:13:7e:e9:78:64:b0:af:
52:1c:9a:06:29:81:64:fb:9d:fa:96:91:d0:f4:74:13:2d:02:
a7:e3:b3:d4:b0:af:10:fe:86:b4:5b:2e:ca:9b:fa:17:85:b3:
c1:c2:ae:0b:78:96:6b:18:2c:48:94:ef:81:25:68:ea:e0:3a:
17:6a:01:2f:45:70:a2:2f:bc:48:d3:e6:8a:3e:a3:1f:8c:c4:
93:85:44:43:cb:8d:b3:f7:6e:05:2e:2c:dc:b7:8e:9d:35:a0:
67:35:e3:4c:e0:47:73:4d:24:0d:c7:91:5d:ca:bf:1e:8c:6b:
1f:39:c4:f7:36:c0:bb:96:e5:97:81:21:50:99:83:ca:d2:86:
5b:eb:de:8a:8a:d6:48:8c:c4:b7:50:12:6a:0a:45:7b:8c:aa:
b8:79:e6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 08:01:28 2024 by rpki-client on console-fra.rpki-client.org