Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/jjZm-W2y8EDti80w2PQlLsETS-8.roa
File: jjZm-W2y8EDti80w2PQlLsETS-8.roa (raw, json)
Hash identifier: 1UABuGAhXaI8lb/NNDpZgsTxfyW/WLOmFlsU2NVurnU=
Subject key identifier: 8E:36:66:F9:6D:B2:F0:40:ED:8B:CD:30:D8:F4:25:2E:C1:13:4B:EF
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 018B2902DE792072FFDDE03674FBF2F46901
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/jjZm-W2y8EDti80w2PQlLsETS-8.roa
Signing time: Fri 13 Oct 2023 12:28:55 +0000
ROA not before: Fri 13 Oct 2023 12:28:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25198
IP address blocks: 85.204.107.0/24 maxlen: 24
103.246.249.0/24 maxlen: 24
185.104.63.0/24 maxlen: 24
195.74.93.0/24 maxlen: 24
46.229.243.0/24 maxlen: 24
46.229.253.0/24 maxlen: 24
83.229.61.0/24 maxlen: 24
2a12:3200:4000::/36 maxlen: 36
2a12:3200:2000::/36 maxlen: 36
2a12:3200::/36 maxlen: 36
2a12:3200:1000::/36 maxlen: 36
2a12:3200:3000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 30 Oct 2023 19:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:29:02:de:79:20:72:ff:dd:e0:36:74:fb:f2:f4:69:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Oct 13 12:28:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e3666f96db2f040ed8bcd30d8f4252ec1134bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:91:44:3a:08:c9:20:49:8c:e3:c1:29:9b:ef:
5e:66:c1:0a:be:88:cb:88:4e:63:d3:5b:b9:0f:92:
e8:09:fd:5b:13:bb:b1:95:9e:a6:98:ef:12:de:e5:
7d:17:ac:64:b3:4e:90:16:77:6c:85:0e:c3:b6:ad:
91:a5:7b:d4:14:b8:95:95:e5:3e:7d:3b:ba:1e:77:
8e:1c:1a:1a:85:4c:00:bc:20:db:ae:2a:98:49:9a:
7c:93:0c:ab:42:36:03:10:d4:c1:70:f1:40:c7:dc:
6a:ff:9b:8a:52:72:8b:88:d7:e6:ea:6c:99:f4:b2:
6f:bb:60:5f:f4:08:2c:93:43:56:6a:02:4b:5e:18:
a0:00:7f:71:cd:af:86:ff:99:e0:ae:c7:94:a4:15:
ad:8c:ac:71:ab:45:9e:d8:54:84:52:36:93:a4:a9:
db:7e:70:d7:6a:c4:43:09:51:cb:39:a1:c2:db:47:
0a:89:fd:98:99:ce:25:4e:81:ca:d7:3d:11:cd:95:
03:c2:89:a7:de:0a:0a:9a:37:f4:f8:c4:e7:10:6e:
2d:bd:43:78:68:39:a9:de:37:b2:4c:3c:05:f0:2d:
dd:07:31:97:79:84:b3:96:08:7f:0b:23:32:8f:67:
69:cb:09:76:1a:c5:1a:69:c7:2b:8b:30:af:a4:47:
c1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:36:66:F9:6D:B2:F0:40:ED:8B:CD:30:D8:F4:25:2E:C1:13:4B:EF
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/jjZm-W2y8EDti80w2PQlLsETS-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.243.0/24
46.229.253.0/24
83.229.61.0/24
85.204.107.0/24
103.246.249.0/24
185.104.63.0/24
195.74.93.0/24
IPv6:
2a12:3200::-2a12:3200:4fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
81:34:91:5d:49:fa:36:c1:c9:1c:9b:eb:a3:a0:f8:bd:ec:5d:
ab:e3:51:8b:27:85:3b:23:e4:71:14:3f:26:03:cd:45:d6:83:
db:03:d5:8e:75:d1:4b:1c:df:aa:e6:38:06:64:8b:4c:c6:49:
85:e7:e4:46:52:a3:5e:7b:8b:01:65:09:b4:18:56:48:4d:e0:
ad:e3:9f:92:89:d5:7b:2e:24:42:ee:a8:d2:6b:f2:f2:8e:5b:
0c:0b:d2:13:ea:35:b6:1b:ed:88:8b:93:55:d1:ed:71:c0:5e:
cc:d1:b9:25:4a:7a:f4:1a:3f:12:f5:93:11:bc:49:65:73:3c:
28:63:dd:5d:0f:9c:e1:ca:d0:fa:af:3b:bf:04:f3:98:13:bb:
5b:c5:df:f5:e3:b2:de:7d:e9:3d:2c:72:99:7f:8e:a5:dc:58:
24:b4:c4:96:7d:d6:31:b4:7e:6f:85:0a:b7:9f:76:63:ba:8e:
85:85:ec:76:6f:bd:91:ed:ac:b7:0e:45:89:f0:2f:66:8f:fd:
29:a8:2b:f3:04:77:e9:c6:b7:05:48:09:76:53:8e:a5:74:64:
6f:95:f5:1d:11:84:9d:ea:83:e6:47:57:b1:bf:39:2a:3a:ec:
a0:42:b2:d2:c9:1f:73:bb:93:a0:78:07:ba:f5:83:2c:3c:3a:
83:3e:0a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:19 2024 by rpki-client on console-fra.rpki-client.org