Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/j_TKYlgGMNhh_SX5Hf5mU2WWfRE.roa
File: j_TKYlgGMNhh_SX5Hf5mU2WWfRE.roa (raw, json)
Hash identifier: vtcIOtKuko+XNguei/5YY73qlCufd5qiWDXvQTCS/IA=
Subject key identifier: 8F:F4:CA:62:58:06:30:D8:61:FD:25:F9:1D:FE:66:53:65:96:7D:11
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018572BA7936D7A79FC093C75B57AEBA4FD7
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/j_TKYlgGMNhh_SX5Hf5mU2WWfRE.roa
Signing time: Mon 02 Jan 2023 13:45:01 +0000
ROA not before: Mon 02 Jan 2023 13:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34342
IP address blocks: 77.79.225.0/25 maxlen: 25
185.2.112.0/22 maxlen: 22
195.167.156.0/24 maxlen: 24
195.167.157.0/24 maxlen: 24
85.232.248.0/24 maxlen: 24
2001:1a68:19:400::/54 maxlen: 54
Validation: Failed, certificate revoked on Mon 20 Nov 2023 10:40:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:79:36:d7:a7:9f:c0:93:c7:5b:57:ae:ba:4f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 13:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ff4ca62580630d861fd25f91dfe665365967d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cb:0c:3c:f8:36:3a:77:91:4e:61:a0:b7:5b:
62:b1:2b:ad:f0:51:a4:f1:ac:ea:37:4f:2c:4a:22:
8e:bd:78:34:43:65:5b:e8:f4:63:fe:3f:5b:54:bc:
8c:21:2e:7d:07:cc:9b:65:c5:fc:ce:f2:21:28:92:
77:46:d1:6e:dc:61:77:44:16:75:f1:81:52:f7:ce:
2a:ef:d5:8a:75:12:60:b6:eb:a9:13:96:30:7f:1a:
d5:a6:10:0d:ad:bf:8c:7f:93:5a:be:52:b9:3d:4e:
2c:cc:cc:5c:98:e7:9b:4e:6d:b9:ab:ca:af:bf:76:
2f:6e:1a:ab:de:c0:f8:91:d0:51:33:92:47:f6:16:
29:1d:50:7f:43:9d:a8:4c:49:e0:3a:85:79:21:a2:
6c:89:1c:d6:fe:de:1b:84:82:11:59:dd:3b:fd:2d:
66:ed:00:eb:c8:47:75:c8:4c:d7:03:41:12:a3:4d:
a7:18:21:1b:6f:d5:62:6a:a6:31:be:ec:7d:bc:b1:
63:e5:35:10:25:fd:5d:39:c6:66:e2:8f:e4:15:c1:
a2:8c:f0:36:2c:dd:91:7d:c8:1b:06:2d:c7:50:7e:
15:9e:da:cd:25:6c:cb:f6:ea:ff:81:66:eb:50:80:
d9:75:f7:11:b6:41:8a:49:d5:29:d0:94:08:06:5b:
1e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F4:CA:62:58:06:30:D8:61:FD:25:F9:1D:FE:66:53:65:96:7D:11
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/j_TKYlgGMNhh_SX5Hf5mU2WWfRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.79.225.0/25
85.232.248.0/24
185.2.112.0/22
195.167.156.0/23
IPv6:
2001:1a68:19:400::/54
Signature Algorithm: sha256WithRSAEncryption
6f:76:80:11:d2:3f:38:03:34:bb:5c:4a:84:a6:3a:e0:35:12:
e4:27:8f:b6:a7:2f:65:f3:fb:d6:13:dc:f4:79:84:07:5a:0c:
a4:f2:80:2a:bc:73:e9:75:61:46:6f:9f:44:c7:e6:4e:62:c1:
88:b2:ba:a4:a2:d5:e0:a9:ff:41:a0:7b:6e:90:f2:89:e2:ca:
ec:36:4b:aa:20:0f:6c:30:7d:5a:21:fc:5a:10:b0:45:fb:c9:
05:75:07:35:eb:56:be:24:6b:51:02:6e:d6:68:bb:9b:1a:72:
a8:96:26:3b:aa:71:27:df:de:b7:b6:36:a0:b1:af:c6:08:b5:
d4:e8:ad:f6:86:b2:ee:8a:e5:dc:61:46:8f:c8:52:f6:36:83:
6c:93:ad:c9:87:3a:9a:3a:e3:dc:90:5f:51:d7:a6:46:7c:c5:
da:97:2c:34:05:b3:98:04:ec:30:37:e1:a0:43:5c:41:d9:54:
15:b0:55:ac:c9:3c:e0:ed:31:21:9b:19:7d:0d:9e:c0:9a:91:
77:0a:86:82:10:b3:2b:b4:9a:8d:ca:16:f6:6c:82:2e:e2:d4:
27:84:d0:b7:d6:ce:cd:c0:73:31:c0:2c:7d:ca:82:c0:79:85:
1d:38:61:60:17:87:db:c8:30:86:66:4d:c2:58:d5:cd:90:8c:
c9:9c:96:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:57 2024 by rpki-client on console-fra.rpki-client.org