Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/jgySwhd1T9v4zf94hWTaXMW8UKo.roa
File: jgySwhd1T9v4zf94hWTaXMW8UKo.roa (raw, json)
Hash identifier: /LVzBY8I1NWzzqbrPqozqXWYm7QxgMrcQ+HsmFeP+is=
Subject key identifier: 8E:0C:92:C2:17:75:4F:DB:F8:CD:FF:78:85:64:DA:5C:C5:BC:50:AA
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018790B1C2618BE4F399ADD4E133904AD0A9
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/jgySwhd1T9v4zf94hWTaXMW8UKo.roa
Signing time: Mon 17 Apr 2023 19:29:41 +0000
ROA not before: Mon 17 Apr 2023 19:29:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42337
IP address blocks: 2.188.225.0/24 maxlen: 24
2.188.224.0/20 maxlen: 24
2.188.232.0/23 maxlen: 23
2.188.234.0/24 maxlen: 24
2.188.236.0/23 maxlen: 23
2.188.240.0/20 maxlen: 24
2.188.40.0/21 maxlen: 21
2.188.164.0/22 maxlen: 22
2.188.160.0/22 maxlen: 22
2.188.165.0/24 maxlen: 24
2.188.161.0/24 maxlen: 24
2.188.160.0/21 maxlen: 24
2.188.176.0/23 maxlen: 23
2.188.192.0/19 maxlen: 24
2.189.160.0/21 maxlen: 21
2.189.168.0/21 maxlen: 21
2.188.212.0/23 maxlen: 23
2.188.208.0/23 maxlen: 24
2.189.80.0/21 maxlen: 21
2.189.88.0/21 maxlen: 21
2.188.60.0/22 maxlen: 22
2.188.72.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:90:b1:c2:61:8b:e4:f3:99:ad:d4:e1:33:90:4a:d0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Apr 17 19:29:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e0c92c217754fdbf8cdff788564da5cc5bc50aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:50:a0:5a:20:02:42:47:23:fd:83:75:0d:f2:
1c:b4:95:51:92:19:3b:0b:e9:34:2f:53:32:b3:28:
e2:58:0d:9f:6c:88:ca:8c:f1:02:72:92:92:af:ff:
45:33:1c:b3:39:5e:ae:9a:7b:9b:73:a4:8f:43:08:
37:0f:94:1d:67:5f:33:16:20:ca:64:a2:37:32:0e:
a7:fe:d1:31:37:25:47:82:ff:5f:36:4d:de:84:f9:
4f:4e:87:f1:91:60:07:fc:c5:e3:07:2e:af:d7:d1:
d3:1d:6d:fc:54:ac:ee:dd:de:98:db:74:6a:d2:fa:
ca:9a:59:bb:a0:b2:e6:44:bf:e9:cf:3e:db:ed:75:
a1:ec:68:d5:50:3a:31:55:22:e5:d2:0d:36:40:8b:
6a:47:e2:80:03:1b:03:de:65:d1:fa:92:df:1a:ba:
32:70:93:f9:35:40:1b:13:7a:48:0b:9a:1c:c7:f2:
16:dc:28:bb:3d:5b:50:f1:0b:55:70:d0:7b:2d:2f:
af:74:06:b9:5f:e1:9d:05:c3:96:0a:ca:79:4c:88:
c9:cd:05:a7:87:3c:19:8e:5b:a7:6a:d9:b2:f8:b8:
d0:68:16:43:b6:46:ab:9d:ca:5a:b6:c0:44:88:79:
5d:68:69:06:fb:f4:fe:e9:f3:d7:7a:78:c0:16:a7:
c8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0C:92:C2:17:75:4F:DB:F8:CD:FF:78:85:64:DA:5C:C5:BC:50:AA
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/jgySwhd1T9v4zf94hWTaXMW8UKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.188.40.0/21
2.188.60.0/22
2.188.72.0/22
2.188.160.0/21
2.188.176.0/23
2.188.192.0/18
2.189.80.0/20
2.189.160.0/20
Signature Algorithm: sha256WithRSAEncryption
64:8f:85:c5:a2:2f:6a:0a:36:e5:b3:8c:ce:2a:f5:eb:e0:be:
c9:c6:9b:25:9e:6e:04:a2:a8:a6:9d:f2:3b:9e:ba:9e:73:ee:
1e:9b:10:d1:b8:40:15:43:10:b3:07:e5:f8:a1:7f:6f:5d:21:
f1:bb:68:e3:c9:7d:65:0e:17:46:0e:28:50:7c:84:b0:4e:7e:
63:7b:f8:17:0b:ae:3b:a3:ea:c2:71:b7:48:09:e7:b2:14:8b:
5c:a6:a1:17:78:06:39:81:2f:a9:6f:22:8c:a7:db:57:6a:e9:
14:8e:e9:a7:53:ef:6a:46:29:ec:1a:7e:c7:a7:e2:60:22:26:
9b:78:f3:00:fd:fd:15:fd:43:a3:b8:61:aa:ac:8a:1d:e1:2d:
75:21:56:43:15:dc:d8:30:38:72:d4:65:75:47:7c:8a:59:b5:
f1:9d:af:84:88:18:80:c6:d5:97:08:77:a8:22:a7:50:5d:3b:
4e:48:9f:db:33:9a:d0:aa:48:9e:d4:27:80:0f:55:c6:4e:b7:
a6:04:35:e0:78:32:9e:66:95:cd:fc:f9:31:2f:34:cc:f7:77:
46:e2:cf:65:84:b3:25:66:de:70:a3:6a:38:4f:25:65:64:38:
ee:05:b6:38:a7:98:f3:7c:34:86:88:c0:07:0b:13:46:e9:14:
01:6d:1c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:45 2023 by rpki-client on console-ams.rpki-client.org