Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/JjPv26Bpddsp2VzfggwNHDnkkBg.roa
File: JjPv26Bpddsp2VzfggwNHDnkkBg.roa (raw, json)
Hash identifier: LVL/qEyDTe/8Y2LgalEEBqJhPu4IIW9ZRb0gj434uqY=
Subject key identifier: 26:33:EF:DB:A0:69:75:DB:29:D9:5C:DF:82:0C:0D:1C:39:E4:90:18
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0188B9390B25CAEF0ED61B3E4FA291042464
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/JjPv26Bpddsp2VzfggwNHDnkkBg.roa
Signing time: Wed 14 Jun 2023 09:25:03 +0000
ROA not before: Wed 14 Jun 2023 09:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.199.212.0/24 maxlen: 24
194.146.93.0/24 maxlen: 24
45.157.208.0/24 maxlen: 24
79.98.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Jun 2023 10:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:39:0b:25:ca:ef:0e:d6:1b:3e:4f:a2:91:04:24:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 14 09:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2633efdba06975db29d95cdf820c0d1c39e49018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:43:8f:af:20:e6:d4:de:02:4a:2a:c4:64:9e:
23:ab:8f:c2:5d:6f:93:ae:c0:0f:19:89:19:31:2e:
19:99:57:22:6a:77:5f:f1:c9:2f:2a:7f:22:43:e7:
9e:2d:1e:67:86:c7:05:88:0b:38:36:fd:97:2e:4b:
d8:12:b9:fe:1e:02:c5:86:9b:67:75:a6:91:ae:3e:
cc:4a:9e:d1:03:e0:56:bc:24:90:f7:fe:ff:ad:8c:
83:e7:14:73:0f:fc:20:a6:cb:22:c2:5e:cc:2d:f8:
28:df:7e:4b:bc:2c:d2:ef:75:eb:c5:ad:c9:38:ba:
55:ad:3a:e9:86:dd:87:a6:5a:0d:6a:9a:e4:59:7d:
38:2a:d6:48:5a:c0:0b:86:32:de:72:8b:aa:21:2d:
af:08:82:a1:12:05:04:ff:e1:3d:f2:a8:9c:eb:12:
fe:b1:4e:65:23:3e:ff:61:cc:14:24:a1:7f:93:96:
38:25:fd:d0:6b:61:52:90:f0:c5:21:73:24:a1:27:
d5:29:17:93:63:2b:e5:db:85:43:01:12:74:74:65:
a3:d7:07:fa:f4:fd:95:e7:2b:67:8f:f2:14:b9:0f:
42:eb:ca:a8:49:08:8d:f0:2e:b5:bc:20:78:1e:48:
69:3e:16:a1:33:68:3e:96:56:16:26:f4:22:26:60:
f0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:33:EF:DB:A0:69:75:DB:29:D9:5C:DF:82:0C:0D:1C:39:E4:90:18
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/JjPv26Bpddsp2VzfggwNHDnkkBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.208.0/24
79.98.247.0/24
185.199.212.0/24
194.146.93.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:36:0c:58:f1:5f:56:83:df:5d:10:ef:aa:94:66:7a:8e:1d:
4a:51:6a:8a:a8:4d:e6:10:04:7a:58:79:13:93:b9:25:93:6c:
85:77:1b:9c:3b:ee:8e:d1:24:d1:39:68:4f:e6:8c:fa:30:4d:
06:71:2e:e6:21:a6:55:22:d2:20:96:5b:66:a6:b7:0b:0b:f8:
f0:90:48:dd:59:e3:33:19:d5:b9:ca:eb:ca:b7:c1:26:1c:54:
2d:8d:5f:a6:04:0a:30:bf:a0:65:93:b0:6f:e2:45:39:dc:b9:
ae:6f:f6:7b:bf:73:30:d1:06:05:14:3b:9c:78:6f:26:a3:3a:
40:0c:76:12:07:30:ec:54:40:40:55:39:fd:02:e9:e1:5a:30:
47:8b:ed:7d:64:9c:ad:a2:de:37:e0:c9:95:be:06:e2:5b:e3:
97:04:97:fc:b5:a4:87:ae:b9:5a:00:ab:8c:a8:c6:ed:55:fa:
75:15:dc:76:12:24:c6:f3:f3:7f:a8:3e:d4:d1:c1:db:f1:16:
1e:93:30:a2:28:1e:b2:d6:38:22:3d:b5:83:7b:82:80:a2:0d:
1e:02:1f:1d:f5:c5:6d:b1:83:96:18:b4:5c:4a:aa:06:cd:9a:
7f:31:21:be:85:bf:50:88:06:70:e4:9d:8a:7f:e4:65:c3:72:
ef:0d:80:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org