Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jkZrD9dp9tUgVa0iw-9oHJEAK80.roa
File: jkZrD9dp9tUgVa0iw-9oHJEAK80.roa (raw, json)
Hash identifier: EH/c1vbQDIQfG4b+lOQh3EDqwofMhOVyNQsBJ2yu7Lw=
Subject key identifier: 8E:46:6B:0F:D7:69:F6:D5:20:55:AD:22:C3:EF:68:1C:91:00:2B:CD
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018E642F9A6F4537C6C39DCB053E09B85542
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jkZrD9dp9tUgVa0iw-9oHJEAK80.roa
Signing time: Fri 22 Mar 2024 03:23:45 +0000
ROA not before: Fri 22 Mar 2024 03:23:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
146.19.125.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Mar 2024 07:55:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:64:2f:9a:6f:45:37:c6:c3:9d:cb:05:3e:09:b8:55:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 22 03:23:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e466b0fd769f6d52055ad22c3ef681c91002bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:de:2b:01:45:ab:c1:2b:a9:f4:d1:3f:f6:
67:ba:54:b2:98:55:58:6d:70:87:aa:31:c0:ac:b3:
86:4b:cf:da:90:57:69:35:05:fd:ee:d0:eb:b2:e1:
72:b6:e1:1a:70:43:41:0a:59:13:58:26:8c:a1:ef:
47:43:1f:f1:a0:0d:ad:4f:b4:ef:62:c0:fc:82:ef:
f1:df:1f:64:eb:b9:a2:e8:13:79:23:66:cb:f8:a9:
30:4c:74:e2:38:1b:71:e5:65:54:45:a5:aa:0e:eb:
76:af:79:a9:c5:fa:26:ac:df:c3:fb:1f:4a:57:b6:
0e:ed:34:fa:6e:9c:88:16:d4:f2:6d:f9:1a:97:f0:
3b:24:98:6e:ff:5b:d5:25:43:bc:1e:70:20:54:89:
01:db:4a:1b:38:12:44:dd:fe:ab:35:9d:aa:ee:ec:
73:49:67:1a:48:5b:26:64:a7:ce:ee:08:0b:b3:73:
e0:fc:a7:bf:00:2e:90:25:ea:6f:14:2d:8f:98:53:
63:e6:37:09:0d:8e:37:f9:52:8c:35:ed:c6:bf:59:
c7:4e:7c:c3:ef:00:1f:7a:c8:1b:c1:a1:6c:14:0d:
00:94:ed:b8:47:25:90:3b:66:25:02:ec:12:23:a0:
0f:91:71:a1:bf:6c:4b:8a:94:09:fd:05:6d:b8:aa:
3c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:46:6B:0F:D7:69:F6:D5:20:55:AD:22:C3:EF:68:1C:91:00:2B:CD
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jkZrD9dp9tUgVa0iw-9oHJEAK80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
5.181.87.0/24
45.88.139.0/24
45.94.170.0/23
45.132.181.0/24
85.209.120.0/23
146.19.125.0/24
193.30.241.0/24
193.57.41.0/24
195.177.93.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
58:25:5b:00:40:0b:56:76:e9:34:fa:08:fa:7c:32:60:a7:bb:
cc:ba:f2:c2:d3:53:ee:9c:a7:40:67:e8:d6:6d:68:68:87:e9:
ef:27:f5:86:54:75:29:82:77:b8:a6:f0:a6:99:d4:37:ad:28:
a3:bb:88:b9:db:3d:0c:ef:09:9c:4a:9a:1a:3f:6e:87:9f:1a:
98:2f:15:b9:8b:5c:b0:4e:1e:ce:16:24:1f:0d:a1:53:c1:08:
e7:0c:a1:4f:43:05:ac:2f:43:71:74:87:c5:1a:5f:d9:de:47:
53:93:62:08:70:50:cc:2d:33:38:8f:b3:85:38:b4:bc:af:00:
71:af:1f:65:00:f4:29:80:b0:99:c0:62:33:c8:82:2c:8b:36:
4c:2d:97:1f:98:1c:6c:36:39:9d:46:45:57:d6:7c:85:18:9c:
3d:a3:04:19:80:e7:4e:fa:fb:38:df:2c:c1:91:5b:e0:74:02:
aa:f5:78:aa:38:65:97:68:a4:0d:c7:fa:8a:de:ed:92:02:07:
3c:51:df:46:e6:c6:17:31:dc:63:d1:5c:15:50:a8:42:81:f6:
ff:6a:9d:14:7f:f1:d9:36:10:79:78:26:fc:0c:75:e7:55:4f:
61:00:13:39:9e:28:a1:08:a3:19:c7:87:7e:7e:32:73:b5:52:
a9:0d:bc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 23 09:19:03 2024 by rpki-client on console-ams.rpki-client.org