Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/JuPAq1UN_Fb06WIoOKHCm9_yV5s.roa
File: JuPAq1UN_Fb06WIoOKHCm9_yV5s.roa (raw, json)
Hash identifier: lGCn5PZz+MnxRIvX5mbaKYMOLKudep1A9Sl0AdPxU74=
Subject key identifier: 26:E3:C0:AB:55:0D:FC:56:F4:E9:62:28:38:A1:C2:9B:DF:F2:57:9B
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0187D8FEB31A4BC1CECAECA1382CC8C5C704
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/JuPAq1UN_Fb06WIoOKHCm9_yV5s.roa
Signing time: Mon 01 May 2023 20:26:23 +0000
ROA not before: Mon 01 May 2023 20:26:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.105.22.0/24 maxlen: 24
188.255.215.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
188.255.134.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
212.69.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d8:fe:b3:1a:4b:c1:ce:ca:ec:a1:38:2c:c8:c5:c7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 1 20:26:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26e3c0ab550dfc56f4e9622838a1c29bdff2579b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5e:7a:67:f7:04:18:a5:6f:aa:59:71:d3:c0:
03:b0:2c:8b:ca:7a:5e:08:a2:f5:e0:2e:cb:52:5f:
fe:13:8b:4c:ab:4a:dc:dd:fe:7d:7d:45:a2:8d:1d:
f8:04:03:8a:61:54:4b:5f:00:04:81:bf:b1:8c:b4:
16:eb:c6:b7:47:6e:8d:de:e5:bb:ca:02:f8:90:47:
a1:a8:fa:52:0d:cd:9a:b1:ed:03:4c:50:71:ff:20:
10:99:98:ca:01:90:aa:cd:04:37:88:cc:ea:ad:66:
ad:c9:07:f9:5c:54:fe:a2:87:b2:ee:fb:73:12:5b:
e7:6d:39:bc:a8:8e:ed:78:bd:ae:d0:06:3a:71:2b:
7e:87:01:cd:5a:24:f8:46:62:de:53:70:76:2b:ff:
1d:f7:39:7f:3c:c1:a8:17:12:93:3b:78:3d:3a:b6:
67:b1:65:b0:9c:b8:04:f3:10:1f:ff:28:ca:3f:f7:
81:97:90:76:73:3f:cc:88:8f:f2:df:92:00:47:38:
81:f3:c1:bb:7f:b3:75:a4:0a:6a:a7:22:0d:83:48:
54:0b:b8:1a:b3:4d:83:75:63:95:50:77:1b:99:a2:
c9:ea:ad:5a:09:18:07:2b:99:3a:12:f8:3b:ee:4c:
2f:22:f5:ec:9f:db:81:02:ac:c3:69:00:46:ee:46:
ee:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E3:C0:AB:55:0D:FC:56:F4:E9:62:28:38:A1:C2:9B:DF:F2:57:9B
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/JuPAq1UN_Fb06WIoOKHCm9_yV5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.22.0/24
109.121.40.0/24
188.255.134.0/24
188.255.215.0/24
212.69.13.0/24
212.69.18.0/24
Signature Algorithm: sha256WithRSAEncryption
45:7b:83:00:20:69:dd:0c:de:64:ae:52:25:04:41:73:12:01:
d9:4c:e0:61:ef:d1:7b:2b:7f:78:99:01:d7:74:c4:7c:56:8a:
00:85:ab:f4:9e:de:71:4c:8c:0f:28:d7:52:6f:fc:4d:8f:ed:
d5:55:1c:f3:0f:d2:43:39:fb:af:46:d4:56:db:81:e2:eb:c2:
dd:54:00:b0:fa:7a:06:20:d6:a2:2d:9a:ca:8e:7f:ca:17:5a:
bd:ec:40:c8:26:8d:95:8d:a2:58:a6:cd:ac:5e:5b:46:fd:31:
e0:03:e8:fa:3c:5c:c7:cd:c8:6f:f0:54:81:3b:de:dc:7f:4a:
d5:e4:d4:f0:50:36:7d:a7:1f:bb:2a:be:dc:d6:9a:d1:d4:77:
dd:e2:f4:9d:7b:50:f6:66:5b:3e:8f:ac:73:a3:9f:4f:bc:76:
fe:67:91:14:06:ea:e3:ad:64:25:03:f6:2d:32:b0:ba:c7:40:
b5:47:11:84:a4:9a:de:0a:dc:08:1e:72:16:04:c6:65:c9:0a:
d8:01:17:84:2e:3c:54:e6:72:21:07:81:2e:6a:0b:7b:09:eb:
5f:98:95:e8:f1:29:ef:7d:a2:e2:35:c3:d6:ac:de:2e:d6:15:
af:f4:9d:73:3c:25:5a:bb:59:7f:8a:2e:cf:66:a3:37:5b:a9:
e7:40:2e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-fra.rpki-client.org