Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/JXaM6yYWES0YZVoyhCulmQLgdRs.roa
File: JXaM6yYWES0YZVoyhCulmQLgdRs.roa (raw, json)
Hash identifier: Va9P9BEZxpPnrQ1TOizNrcpUSlpXQnR536rT0CRdH5Y=
Subject key identifier: 25:76:8C:EB:26:16:11:2D:18:65:5A:32:84:2B:A5:99:02:E0:75:1B
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018C6E1B36630DF034BB3711FB2E512CC8FE
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/JXaM6yYWES0YZVoyhCulmQLgdRs.roa
Signing time: Fri 15 Dec 2023 15:32:06 +0000
ROA not before: Fri 15 Dec 2023 15:32:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 213.209.143.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.159.0/24 maxlen: 24
77.90.138.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6e:1b:36:63:0d:f0:34:bb:37:11:fb:2e:51:2c:c8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Dec 15 15:32:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25768ceb2616112d18655a32842ba59902e0751b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:77:a4:6c:18:2b:10:f0:e2:78:0f:94:10:0d:
e2:19:23:52:53:10:8f:a1:04:b9:73:21:13:4a:a9:
8c:e9:c6:50:12:f9:ac:d9:bb:17:55:0d:1b:3d:24:
d7:e9:08:00:1a:76:62:53:8f:cc:1e:04:43:ed:9f:
41:18:3e:04:0d:15:85:55:b8:a2:d0:8e:b8:1e:de:
a3:60:b7:9d:74:01:8f:8f:a2:54:93:3b:ab:86:ba:
44:72:5c:d7:35:39:fd:6a:9b:93:4a:cb:2d:38:c1:
dc:b6:b0:d2:06:64:87:fe:c3:7c:6b:19:55:94:12:
72:43:2c:df:7f:ec:8c:10:7d:9a:e1:1a:ea:9b:24:
ce:7d:3c:de:ff:e2:06:c0:53:be:4a:02:d7:b2:b3:
3b:9f:52:ac:81:f0:dd:f1:95:79:a6:44:fb:07:35:
50:24:04:9e:a6:c4:15:63:af:a2:ce:4c:1e:95:6c:
d2:a1:51:ba:36:43:33:b6:33:7e:e9:0a:f1:d0:26:
14:e6:6c:5b:35:23:fe:a9:73:5a:62:78:ea:16:5d:
f1:c8:af:75:5b:a8:df:71:95:9e:98:0a:80:a6:b0:
ab:f1:5a:42:31:fb:86:8c:c4:d8:bc:fe:a1:c3:ce:
ff:23:a1:0d:95:fc:8a:47:59:dd:81:89:11:6b:f1:
77:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:76:8C:EB:26:16:11:2D:18:65:5A:32:84:2B:A5:99:02:E0:75:1B
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/JXaM6yYWES0YZVoyhCulmQLgdRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.138.0/24
213.209.143.0/24
213.209.146.0/24
213.209.159.0/24
Signature Algorithm: sha256WithRSAEncryption
54:91:2f:53:28:80:bc:94:51:3b:89:76:7c:06:4b:4b:ed:53:
16:db:96:44:32:e3:60:fc:bf:8f:8a:a6:75:c0:51:17:58:b5:
c9:df:bf:40:45:a2:65:5c:ea:1b:10:c4:e3:3f:f6:e3:4c:35:
3c:d4:af:2a:97:06:d6:f6:44:9f:ec:14:3d:4b:50:a0:9d:b3:
08:a3:4a:3e:af:f7:cd:65:0c:2e:a9:58:5f:52:bd:0b:56:67:
5b:cf:53:50:91:b6:fa:ff:0f:0b:df:8f:5b:00:64:8c:70:cb:
c5:c6:7f:4b:7a:3f:d4:85:35:c1:88:a9:d6:c8:eb:e8:c5:67:
ce:99:1a:e4:ec:f4:63:e2:9d:29:15:9b:7e:72:75:b2:e4:b1:
62:41:da:96:c7:64:9d:10:e5:bd:50:3e:c5:6b:60:65:75:1d:
f9:ea:b5:36:07:db:1f:36:98:2f:6b:fa:42:40:6e:40:44:16:
f6:18:48:19:22:60:81:08:f7:84:c9:d5:44:72:01:ef:bc:b8:
12:e0:e8:35:ce:52:7c:7b:71:ca:9b:2e:56:eb:35:2d:8f:8b:
f4:03:d9:4e:58:78:4c:26:bd:f3:87:b4:fb:1a:7a:2f:73:df:
9a:1a:3c:31:57:9f:ca:40:e2:fb:97:13:6c:9d:6f:46:da:3c:
a7:a3:88:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 17:38:29 2023 by rpki-client on console-fra.rpki-client.org