Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/JspgXQos_s7FOk9BHK4rEehXnUk.roa
File: JspgXQos_s7FOk9BHK4rEehXnUk.roa (raw, json)
Hash identifier: rfxh3o49orJaTGlkWftRQvGlw1C6St3Q4L7L7WE62As=
Subject key identifier: 26:CA:60:5D:0A:2C:FE:CE:C5:3A:4F:41:1C:AE:2B:11:E8:57:9D:49
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0186D01FD910546FD70B000720E435F1ED26
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/JspgXQos_s7FOk9BHK4rEehXnUk.roa
Signing time: Sat 11 Mar 2023 10:03:13 +0000
ROA not before: Sat 11 Mar 2023 10:03:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 185.199.214.0/23 maxlen: 23
45.157.211.0/24 maxlen: 24
185.225.168.0/24 maxlen: 24
185.225.169.0/24 maxlen: 24
79.98.244.0/23 maxlen: 23
185.221.24.0/23 maxlen: 23
185.221.26.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 12 Mar 2023 11:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d0:1f:d9:10:54:6f:d7:0b:00:07:20:e4:35:f1:ed:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Mar 11 10:03:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26ca605d0a2cfecec53a4f411cae2b11e8579d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:94:7b:d5:e5:e7:e5:9b:d3:47:1f:50:50:9a:
34:2d:f9:37:a6:a3:d8:4b:d9:51:ee:12:d8:55:fe:
73:f5:b9:0d:23:d2:1d:79:e0:1f:f6:77:63:4c:fb:
ca:fe:8f:7c:8a:fc:bb:85:de:98:9d:ba:61:1e:27:
54:c8:1c:29:7a:c1:83:c2:12:7e:c6:64:b7:4c:5e:
14:32:06:86:ee:be:66:e0:5c:9b:47:d1:d8:3d:68:
db:68:0e:bb:2a:84:f2:36:08:9a:c9:75:ce:d4:8e:
06:9f:e0:6e:53:cd:40:22:cc:91:20:ee:0a:55:38:
05:5a:4c:8b:45:b5:5e:6a:85:13:b2:1f:3a:01:69:
1c:df:82:3b:8d:6a:86:07:79:a7:2e:68:02:4e:16:
a2:74:5b:b6:af:89:b1:d8:5b:9c:6c:bb:16:ff:11:
a8:cf:19:05:df:af:ce:a2:32:92:b9:62:f4:61:53:
51:c1:51:5b:03:7e:b3:3b:12:2f:ee:a4:ee:df:9e:
10:50:59:26:5e:6f:e2:95:84:ce:5c:96:40:f1:e6:
d3:e4:97:ee:21:96:78:2c:1d:f9:3d:45:17:fe:f6:
2e:34:8f:ec:4e:84:0a:e0:eb:a3:72:b6:47:90:c3:
48:ec:fe:d9:4d:68:11:44:75:cc:d9:41:96:38:c5:
20:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CA:60:5D:0A:2C:FE:CE:C5:3A:4F:41:1C:AE:2B:11:E8:57:9D:49
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/JspgXQos_s7FOk9BHK4rEehXnUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.211.0/24
79.98.244.0/23
185.199.214.0/23
185.221.24.0/22
185.225.168.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:f0:25:c5:1a:61:e2:e9:be:8f:1e:02:37:f5:f5:ac:6f:c8:
30:56:ef:87:d3:fd:d3:a4:69:f2:2c:4e:48:e4:2e:ea:8b:2d:
84:09:a6:6f:91:88:3b:6e:9e:a6:7c:d0:be:78:75:f4:02:34:
94:d7:c9:05:08:5c:f3:19:c4:9e:f5:64:48:c9:ad:e3:de:f4:
d4:b5:7f:c8:42:49:3f:6a:58:d4:c1:ed:58:0e:a3:6f:c2:83:
7d:98:6e:74:d2:de:60:01:27:6b:01:f2:be:5c:4e:2b:28:45:
f3:53:92:4c:2d:b4:b9:de:67:f2:23:b5:26:ee:10:54:e6:e9:
60:32:b7:09:19:67:09:f4:c9:73:d8:f0:a1:99:3a:85:0f:6c:
1b:4b:74:32:01:fb:f2:3e:de:bb:6e:af:6e:f1:54:be:82:82:
17:b1:6f:74:f0:26:8b:de:9f:7a:9d:95:66:17:c8:98:d7:dc:
51:fd:14:0e:9a:69:86:8c:c4:cc:f6:3c:4a:a2:12:57:c8:e9:
f7:6e:da:14:f6:bc:22:aa:c4:17:73:61:b6:5e:b4:35:aa:d5:
bf:8f:c4:95:bc:41:b8:b3:12:e6:89:48:25:34:00:f6:64:55:
a6:70:d2:69:0c:34:2d:62:84:97:ea:da:05:86:95:a7:5e:87:
11:8e:b4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org