Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/JVymg0X35a0P6tlDAW9VNvXUk0A.roa
File: JVymg0X35a0P6tlDAW9VNvXUk0A.roa (raw, json)
Hash identifier: biyxqokHqIVsn/ljXY6Cm7XZ9lE662lfHBogmshqJjI=
Subject key identifier: 25:5C:A6:83:45:F7:E5:AD:0F:EA:D9:43:01:6F:55:36:F5:D4:93:40
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018571D7D56DD3B254E86B4FC1460A59E726
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/JVymg0X35a0P6tlDAW9VNvXUk0A.roa
Signing time: Mon 02 Jan 2023 09:37:28 +0000
ROA not before: Mon 02 Jan 2023 09:37:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56681
IP address blocks: 188.255.224.0/24 maxlen: 24
188.255.221.0/24 maxlen: 24
188.255.146.0/24 maxlen: 24
188.255.169.0/24 maxlen: 24
188.255.173.0/24 maxlen: 24
188.255.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:d5:6d:d3:b2:54:e8:6b:4f:c1:46:0a:59:e7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 09:37:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=255ca68345f7e5ad0fead943016f5536f5d49340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:08:a2:9b:fd:af:ec:c3:48:ec:0c:c2:d3:
fe:56:d5:30:bc:4f:37:80:4c:eb:2a:f2:9e:b4:c9:
a9:60:97:45:f0:76:bb:19:c1:5a:e2:84:ca:17:21:
5f:a0:e3:08:55:61:ee:71:52:0b:b2:9b:bc:73:b1:
a3:f2:65:f9:26:05:22:ea:7f:5a:94:65:9e:cd:c4:
1e:09:a0:b9:f0:60:71:55:be:aa:cf:c6:0a:2d:31:
3c:64:89:f0:15:3b:af:91:9d:2b:51:a4:2c:47:f8:
91:bd:56:56:08:c8:6e:cb:44:d5:ec:f7:96:23:5d:
a5:d9:6b:c3:33:49:16:10:22:e9:53:a9:36:48:e1:
56:f8:50:2a:c3:8c:90:40:c3:a7:cf:30:6e:e4:0a:
db:28:3f:f3:81:bf:18:15:f2:cc:e7:cc:e8:b5:58:
83:da:f4:f9:5b:e1:28:ea:8c:c5:2d:e8:09:a7:41:
68:2f:6f:94:83:29:8c:03:85:a0:68:e7:a9:4b:b2:
ea:5f:f2:42:46:1f:85:8c:97:a6:24:61:f8:1d:3c:
a1:0c:36:fc:7b:e2:36:df:45:8e:9d:c6:45:d2:2f:
f6:09:fc:5d:af:7c:fd:6c:4b:ab:5e:71:60:82:27:
10:e7:a7:02:66:9f:3b:ba:1f:7b:09:b6:0b:9a:96:
fd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5C:A6:83:45:F7:E5:AD:0F:EA:D9:43:01:6F:55:36:F5:D4:93:40
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/JVymg0X35a0P6tlDAW9VNvXUk0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.146.0/24
188.255.169.0/24
188.255.173.0/24
188.255.184.0/24
188.255.221.0/24
188.255.224.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a7:86:d9:93:e1:8e:54:34:74:83:7d:40:3e:57:d3:35:2e:
2f:8f:50:f7:1d:39:02:d1:f3:8e:f2:95:2a:f2:c4:2c:8a:22:
60:f5:8b:95:1e:e3:d1:59:d4:ed:d5:81:c0:a3:2d:74:fe:1b:
e1:ee:c0:ed:50:02:45:1f:e1:af:87:9d:15:62:34:0a:77:59:
20:fa:31:77:72:39:e7:ad:eb:f5:5f:4c:25:58:0d:3d:76:93:
90:26:b5:cb:57:4b:98:67:c6:c8:f7:99:08:4a:3b:ab:df:f6:
7c:87:e6:6e:0f:29:8d:00:39:c2:e0:b5:27:09:05:0d:ee:06:
34:85:92:76:4c:5b:ea:2f:58:55:a5:ff:e3:f5:ce:57:2f:fb:
ae:85:aa:43:06:b5:0f:8a:e9:8d:a9:5d:c0:c4:ed:aa:3c:70:
98:00:ca:da:5b:c6:fc:53:ef:cb:26:5d:1c:84:d0:8f:36:3f:
31:85:01:9e:fa:a5:23:6a:72:0a:64:56:5c:20:70:f0:54:5f:
25:20:61:71:29:64:11:b2:8b:2d:39:5a:76:f8:c1:29:51:45:
9f:92:16:37:69:a2:2c:86:41:7d:ff:07:b6:22:4f:d7:d4:72:
ac:ea:aa:9f:8e:6e:fd:36:51:47:83:44:12:1e:a9:77:cb:38:
bf:f5:94:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:36 2024 by rpki-client on console-fra.rpki-client.org