Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/JMxfP_V6XDFSph_fgdS5kgNFCOg.roa
File: JMxfP_V6XDFSph_fgdS5kgNFCOg.roa (raw, json)
Hash identifier: MwMQGs0gOvsao9/6SSYVzvS1+pfZLCXstk39pLQFK8I=
Subject key identifier: 24:CC:5F:3F:F5:7A:5C:31:52:A6:1F:DF:81:D4:B9:92:03:45:08:E8
Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial: 018926456A014F05A10250C479A8F25E94C4
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/JMxfP_V6XDFSph_fgdS5kgNFCOg.roa
Signing time: Wed 05 Jul 2023 13:37:10 +0000
ROA not before: Wed 05 Jul 2023 13:37:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50313
IP address blocks: 185.33.172.0/22 maxlen: 22
212.42.32.0/19 maxlen: 19
2a0d:9480::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:26:45:6a:01:4f:05:a1:02:50:c4:79:a8:f2:5e:94:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Validity
Not Before: Jul 5 13:37:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24cc5f3ff57a5c3152a61fdf81d4b992034508e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:01:c7:84:c6:4c:b1:eb:a2:8d:38:74:4a:c1:
9c:e2:ac:8d:63:ca:84:85:91:d7:fd:fe:b1:ca:42:
ce:17:aa:de:bd:55:46:b0:4a:b7:6d:23:26:9a:68:
6d:c1:53:29:14:c2:38:22:e1:cb:00:a6:9f:fa:e1:
34:59:ca:45:8d:37:fe:66:90:96:0e:64:9a:08:dd:
bb:2d:7b:84:07:f5:c7:64:bd:3e:12:eb:af:e8:34:
5f:4f:64:33:01:9a:e7:3c:29:c6:a6:4c:65:7c:a3:
7f:b1:d5:6d:e8:ae:27:58:a4:cb:a0:ac:b1:ae:46:
9d:d6:8b:13:0f:89:61:5b:06:45:0e:08:b9:68:21:
b4:25:09:73:57:6e:c9:d0:11:32:c9:ed:99:82:e4:
2b:69:22:40:c5:50:e4:6c:45:40:4a:99:5e:7e:ed:
e9:c0:f1:87:1b:3e:5e:72:48:1b:90:21:5b:e5:18:
31:d7:59:79:63:6a:38:eb:57:05:9d:08:8c:85:3d:
30:1c:13:4a:ff:11:58:0a:65:b6:42:a9:db:e6:83:
b1:fc:90:6f:dd:35:8f:d9:46:2e:f2:59:25:17:63:
d7:4e:35:a4:31:bc:56:7e:5c:c4:ad:75:4c:a7:16:
25:84:ed:eb:50:f8:e1:84:2d:87:3d:39:e7:b4:53:
6c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CC:5F:3F:F5:7A:5C:31:52:A6:1F:DF:81:D4:B9:92:03:45:08:E8
X509v3 Authority Key Identifier:
keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/JMxfP_V6XDFSph_fgdS5kgNFCOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.172.0/22
212.42.32.0/19
IPv6:
2a0d:9480::/29
Signature Algorithm: sha256WithRSAEncryption
81:99:74:7b:29:ca:08:43:6b:c4:08:df:bf:1b:c0:bf:d3:b1:
8f:13:fc:f2:20:9f:7e:c6:d0:f3:22:45:48:8f:5a:2b:67:b4:
bb:34:ad:3e:53:3c:fb:86:08:db:0d:43:f4:08:00:2b:fc:63:
63:ac:77:37:4b:d3:7e:ba:c3:11:8b:98:4a:07:a6:c5:a9:1e:
0e:21:9d:f5:c2:81:a4:5e:d5:cf:b7:bb:f8:05:8e:5e:22:a0:
6c:9a:63:90:c6:ed:81:3f:53:28:6a:5d:5f:da:f3:71:32:f3:
a3:f1:a1:67:72:67:80:7a:92:58:e3:52:18:fb:f1:53:6f:91:
46:fc:b6:32:96:74:b1:4c:bd:ce:31:2d:5a:74:62:85:6d:80:
f3:94:19:32:b4:ab:fa:da:6a:bc:a3:fe:1c:34:eb:52:73:2c:
08:de:39:7b:5b:d0:ca:5f:05:af:f4:a9:04:26:31:83:63:ce:
47:c4:86:89:cd:90:d2:29:6c:60:27:c1:9e:fc:99:77:d6:d3:
be:4c:9a:2e:82:9d:83:19:c8:d7:42:69:8c:3c:5e:bd:5b:2b:
ca:57:29:28:88:0b:65:9c:9b:a8:20:ed:d1:67:fc:ad:7f:61:
01:d8:05:53:2d:8e:37:2d:45:3f:dd:94:12:7c:d8:25:a1:3c:
38:af:2f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:48 2024 by rpki-client on console-ams.rpki-client.org