Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/JZpads1YWU9MDPomVy85xTXUCYA.roa
File: JZpads1YWU9MDPomVy85xTXUCYA.roa (raw, json)
Hash identifier: iI6UNcS56vD7cJmeOI5OEhGSBFzNWmcZR5huNtamyWw=
Subject key identifier: 25:9A:5A:76:CD:58:59:4F:4C:0C:FA:26:57:2F:39:C5:35:D4:09:80
Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial: 019059BC6A21229878D8604B80F1912E9BC7
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/JZpads1YWU9MDPomVy85xTXUCYA.roa
Signing time: Thu 27 Jun 2024 12:47:18 +0000
ROA not before: Thu 27 Jun 2024 12:47:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51531
IP address blocks: 45.129.80.0/22 maxlen: 24
46.31.120.0/21 maxlen: 24
81.89.88.0/21 maxlen: 24
185.70.20.0/22 maxlen: 24
185.176.193.0/24 maxlen: 24
185.176.194.0/23 maxlen: 24
2a02:c50::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 12 Jul 2024 11:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:59:bc:6a:21:22:98:78:d8:60:4b:80:f1:91:2e:9b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Validity
Not Before: Jun 27 12:47:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=259a5a76cd58594f4c0cfa26572f39c535d40980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:79:d6:7d:12:9a:aa:3a:c0:8d:c0:83:ab:1a:
ff:fa:41:d5:50:ec:7f:a4:fc:9e:46:a9:47:4d:ce:
61:65:89:30:fc:53:56:b2:b9:23:79:36:5e:60:d1:
9f:99:41:25:c7:5b:09:73:04:f9:a3:5f:57:8c:ea:
74:4d:1b:ae:27:72:9d:0b:06:96:8c:07:44:a4:48:
36:38:29:5a:bb:66:8a:46:9c:72:28:6f:91:96:79:
03:eb:76:c5:3c:37:fc:79:a1:31:53:54:07:64:6f:
da:60:7e:60:35:d6:90:b3:a9:78:19:04:12:49:ad:
c8:1c:cf:3b:6b:32:94:3c:6f:c3:27:fb:a7:8d:34:
1b:e8:c2:18:59:6f:a2:c4:20:3c:41:66:f7:a8:64:
9c:f6:12:6d:e7:37:94:59:60:f6:1e:55:c0:78:cd:
fa:a3:a2:8a:e2:5c:84:6b:31:2a:d3:e5:0e:b5:d5:
75:86:15:00:5e:22:b8:41:03:03:84:07:f2:64:72:
0f:de:a1:19:79:9c:c2:b8:47:2a:82:6c:50:89:e7:
fe:94:89:96:63:d7:ad:c7:cf:4f:ba:96:76:3a:a5:
1f:fb:f2:11:6c:32:9a:34:8a:30:3f:90:bc:5a:e5:
f0:ae:c9:6c:9c:76:fb:d5:04:f2:4f:e9:f2:80:bb:
df:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9A:5A:76:CD:58:59:4F:4C:0C:FA:26:57:2F:39:C5:35:D4:09:80
X509v3 Authority Key Identifier:
keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/JZpads1YWU9MDPomVy85xTXUCYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.80.0/22
46.31.120.0/21
81.89.88.0/21
185.70.20.0/22
185.176.193.0-185.176.195.255
IPv6:
2a02:c50::/32
Signature Algorithm: sha256WithRSAEncryption
2f:41:c4:b5:e1:b7:09:01:a0:e7:82:28:9a:70:82:77:b7:e9:
dc:0e:7d:98:e5:02:6c:85:c6:74:71:48:29:01:b9:e3:80:5f:
3b:ab:9d:88:30:79:25:69:ed:c7:58:b5:c1:60:20:be:24:89:
48:27:39:8c:8c:f5:ba:af:a1:71:99:13:1a:d7:dc:f3:b0:81:
f3:e5:52:3f:a4:90:99:3a:bc:7e:b2:3f:eb:c4:b5:61:e3:31:
a8:dc:7e:12:6f:89:87:20:4e:bd:e6:64:df:39:78:79:4f:ef:
4f:a2:60:75:51:fa:92:c5:d7:45:6e:56:c9:d8:c7:cf:ad:d2:
2a:8c:87:b9:1e:ae:08:ba:b1:92:36:0d:ea:82:b8:5f:ea:1c:
57:17:a5:21:2d:42:db:64:03:f6:02:1d:29:7b:95:bd:e9:d4:
31:a6:a6:06:c3:e6:93:45:c2:ed:53:cd:d6:25:23:a5:1d:5a:
9d:88:8f:49:d5:75:a7:78:6a:59:6c:59:48:f1:48:37:2e:30:
9a:9d:f0:19:2c:e7:e6:12:83:51:30:9c:10:df:a5:26:4c:81:
a3:9f:9c:44:23:c6:15:08:f3:3a:a4:84:92:3d:29:5d:32:16:
89:70:0f:a8:f7:ab:dd:44:92:5b:31:11:aa:84:08:ff:ed:d7:
09:5b:82:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 13:01:34 2024 by rpki-client on console-fra.rpki-client.org