Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/JBmCgRB83ER9nhibu62JCby93Jc.roa
File: JBmCgRB83ER9nhibu62JCby93Jc.roa (raw, json)
Hash identifier: vB33ysVm28aCCoI9FuxiZTAAJilPsl/Vmeg2yt5SsGE=
Subject key identifier: 24:19:82:81:10:7C:DC:44:7D:9E:18:9B:BB:AD:89:09:BC:BD:DC:97
Certificate issuer: /CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
Certificate serial: 0185BF7BCA554C60EB4573619605B24A2420
Authority key identifier: 38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/JBmCgRB83ER9nhibu62JCby93Jc.roa
Signing time: Tue 17 Jan 2023 11:27:19 +0000
ROA not before: Tue 17 Jan 2023 11:27:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60268
IP address blocks: 185.97.132.0/24 maxlen: 24
185.97.133.0/24 maxlen: 24
193.19.72.0/24 maxlen: 24
193.19.73.0/24 maxlen: 24
185.33.168.0/24 maxlen: 24
185.33.171.0/24 maxlen: 24
2a00:cee0::/29 maxlen: 29
2a00:cee6::/32 maxlen: 48
2a00:cee3::/32 maxlen: 48
2a00:cee0::/32 maxlen: 48
2a00:cee1::/32 maxlen: 48
2a00:cee2::/32 maxlen: 48
2a00:cee5::/32 maxlen: 48
2a00:cee4::/32 maxlen: 48
Validation: Failed, certificate revoked on Sun 29 Jan 2023 16:44:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bf:7b:ca:55:4c:60:eb:45:73:61:96:05:b2:4a:24:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
Validity
Not Before: Jan 17 11:27:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24198281107cdc447d9e189bbbad8909bcbddc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b8:19:d5:3c:06:73:13:82:d1:64:56:16:3e:
38:eb:d8:b9:f5:f5:2b:8c:46:fe:da:ab:0b:a7:bd:
7a:9b:6c:b8:f8:3b:b2:c4:4c:08:c6:79:2a:6b:ad:
55:de:79:d1:b1:aa:7b:d5:52:4e:cd:ef:a6:d9:77:
8a:b9:ce:60:0a:7b:d5:f7:ca:33:71:3d:39:a4:77:
a7:b2:91:a7:21:a0:62:21:e3:ae:a8:3e:c4:ac:7b:
45:58:b4:09:03:98:be:47:06:c6:26:bd:a7:5c:ad:
b3:cf:00:5a:ef:df:85:63:35:31:37:96:0c:32:37:
7e:7a:00:2e:10:af:4b:c2:e0:5e:96:c3:8d:29:34:
b5:66:6d:e9:12:8e:4f:5c:61:95:46:e6:38:81:9b:
d3:af:f0:0e:cc:af:75:7a:e9:92:73:4b:62:3d:3c:
71:ae:d1:49:1d:53:58:7b:12:48:80:16:95:28:64:
f3:45:02:9a:12:a4:22:e5:27:97:92:d7:62:65:b2:
5b:ee:d8:30:1f:83:c7:fc:c7:02:5e:ec:78:89:15:
de:f9:06:c1:87:9d:5a:69:67:d9:eb:9a:99:b2:3b:
00:bc:67:f0:b4:5a:17:d8:b9:99:d5:3d:84:c4:a9:
4f:8e:af:bb:4e:cd:db:30:82:cb:93:de:a1:5d:88:
26:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:19:82:81:10:7C:DC:44:7D:9E:18:9B:BB:AD:89:09:BC:BD:DC:97
X509v3 Authority Key Identifier:
keyid:38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/JBmCgRB83ER9nhibu62JCby93Jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.168.0/24
185.33.171.0/24
185.97.132.0/23
193.19.72.0/23
IPv6:
2a00:cee0::/29
Signature Algorithm: sha256WithRSAEncryption
6a:ae:fe:9c:81:2d:3e:5e:12:83:71:f7:10:dc:c9:a5:97:90:
e1:44:8b:6f:39:98:4c:43:13:e5:5e:6a:ef:d7:56:2f:b8:bb:
57:26:61:69:7d:9a:ec:7b:1e:86:91:31:a0:57:de:16:2b:7e:
41:84:b8:7a:25:b0:bc:5c:ba:84:63:f5:15:8a:57:7e:3d:79:
61:ea:6c:62:3b:62:0b:96:48:dd:de:02:23:f9:cf:0a:cf:04:
e3:88:36:c4:d5:b1:f9:19:75:ca:36:05:bf:ed:38:cd:1e:bb:
3c:0b:b4:80:d0:e7:1a:79:22:1e:b0:5e:c2:34:83:fb:d7:22:
af:8b:73:f6:a8:91:2c:8b:5e:e0:ec:ab:3d:d4:2a:69:39:aa:
2d:68:93:83:e1:b1:74:b2:4c:78:3e:11:17:8a:d0:5e:3d:3d:
af:32:ba:0d:a3:29:4d:e5:24:82:b5:ce:91:6e:4b:26:1b:9e:
b0:07:ff:a2:6f:44:30:f3:60:ec:44:00:55:bc:dc:21:7a:f2:
0a:70:20:0e:6f:d0:1f:77:1d:2f:b6:f0:c0:41:85:51:54:c1:
41:9c:37:6f:c5:4e:47:da:ec:26:19:7d:bd:4a:6c:c3:0c:71:
cf:c3:f6:4e:7e:b9:96:f7:11:95:25:5a:41:8d:65:dc:cc:4d:
a4:3d:fa:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:14 2024 by rpki-client on console-fra.rpki-client.org