Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JoGaJGWQuvvkhHRm8JgOthfpP-I.roa
File: JoGaJGWQuvvkhHRm8JgOthfpP-I.roa (raw, json)
Hash identifier: Z3mqv8NJrGJOy3ocR/l4DGOErUuUCXG1ZCZoaBUlDTA=
Subject key identifier: 26:81:9A:24:65:90:BA:FB:E4:84:74:66:F0:98:0E:B6:17:E9:3F:E2
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018795A4D99E8D4BC7199F3FB9FD6179F4FD
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JoGaJGWQuvvkhHRm8JgOthfpP-I.roa
Signing time: Tue 18 Apr 2023 18:33:41 +0000
ROA not before: Tue 18 Apr 2023 18:33:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 78.135.100.0/24 maxlen: 24
188.132.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 May 2023 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:95:a4:d9:9e:8d:4b:c7:19:9f:3f:b9:fd:61:79:f4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Apr 18 18:33:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26819a246590bafbe4847466f0980eb617e93fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:c4:57:f8:fa:af:10:56:f4:67:94:d1:4d:
f0:81:c9:d2:df:f0:5e:3e:a8:46:c7:36:d6:26:c2:
dc:e2:4d:8f:31:52:40:54:aa:6c:08:9c:17:cf:0c:
34:db:8c:74:0c:d3:6e:8f:8a:95:58:be:fd:5a:0e:
f9:13:d3:ba:3e:49:39:ea:d9:f2:59:30:58:17:dd:
b7:81:8d:5a:ed:37:e8:11:aa:80:cc:72:58:d1:e4:
46:35:5f:12:ce:e1:26:be:11:d4:80:a0:d8:6a:1c:
7d:07:92:3d:93:a2:81:49:a8:66:e2:7b:9d:91:ee:
9d:53:44:2f:eb:30:d8:4c:80:e8:f0:fe:02:2a:03:
e1:61:bd:0f:86:86:9c:92:12:39:1a:31:5c:60:8a:
de:89:80:93:0e:50:ab:f4:48:20:c5:a2:1c:3e:45:
64:62:73:c9:65:d1:15:d7:f8:6c:ac:09:c1:1b:8d:
8a:a3:cd:e2:08:9f:54:af:4a:0b:6c:75:9a:9c:fb:
13:43:76:e8:90:01:3e:00:28:da:5a:b2:fe:ce:64:
b4:69:4b:a0:ab:18:48:af:e1:cd:53:44:0a:f8:8a:
f3:a9:fb:18:78:80:55:21:99:06:e7:7a:fb:03:a9:
58:03:cd:26:24:e0:91:6c:41:05:fb:1f:13:04:48:
17:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:81:9A:24:65:90:BA:FB:E4:84:74:66:F0:98:0E:B6:17:E9:3F:E2
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JoGaJGWQuvvkhHRm8JgOthfpP-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.100.0/24
188.132.185.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:5c:2e:be:89:b2:0d:bf:cc:67:b6:30:77:40:af:b7:c2:6b:
28:7d:c3:16:12:c6:89:c8:38:2c:3d:03:15:3f:79:29:b6:5b:
ae:f3:a4:a4:6a:70:93:28:2c:bb:2f:9d:c9:49:64:c1:fa:fe:
f8:02:1d:46:05:37:c2:16:27:a3:8d:98:e5:c7:8e:d8:87:75:
41:aa:d6:36:86:7c:72:02:cd:7c:d2:7a:3f:91:2c:0e:0d:0b:
f1:1e:58:fc:0a:e8:14:47:ca:61:31:ad:2d:40:1f:70:f7:67:
8a:f7:eb:bb:43:be:7b:aa:de:98:80:e2:26:98:7a:dd:e2:df:
0f:a6:19:14:dc:b6:32:ce:bc:df:0b:87:33:34:d5:b2:3a:4f:
b7:cd:39:ac:72:66:1f:bd:1a:bf:17:8b:b5:c7:7a:41:b3:20:
ce:53:9d:92:0c:94:f6:04:dd:f4:56:f0:c0:26:a3:56:e9:35:
60:67:53:41:6d:be:cb:7f:c0:b0:7f:05:35:fa:9e:76:21:60:
a9:26:73:ba:7b:db:03:0b:49:0c:af:ae:fe:b1:56:ba:83:a5:
e8:7f:9e:57:79:fb:db:2d:86:44:60:54:55:1b:03:fc:09:13:
b8:c9:db:e8:2a:a0:99:e4:09:ce:84:2c:b5:47:48:44:88:71:
fe:e7:f9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org