Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/JkqJQgnihoJP3yOgifLGb-JHwYc.roa
File: JkqJQgnihoJP3yOgifLGb-JHwYc.roa (raw, json)
Hash identifier: 2dMEcxmZKpA1uXeSlFPOi7hyOB6mzmNn5aLUQTVDh2Q=
Subject key identifier: 26:4A:89:42:09:E2:86:82:4F:DF:23:A0:89:F2:C6:6F:E2:47:C1:87
Certificate issuer: /CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Certificate serial: 01921EA341FD337C304FD6E310F7330B8283
Authority key identifier: AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/JkqJQgnihoJP3yOgifLGb-JHwYc.roa
Signing time: Mon 23 Sep 2024 11:27:48 +0000
ROA not before: Mon 23 Sep 2024 11:27:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2872
IP address blocks: 2.58.40.0/22 maxlen: 22
2.58.40.0/24 maxlen: 24
2.58.41.0/24 maxlen: 24
2.58.42.0/24 maxlen: 24
45.115.92.0/24 maxlen: 24
45.115.93.0/24 maxlen: 24
45.115.94.0/24 maxlen: 24
45.115.95.0/24 maxlen: 24
89.43.206.0/24 maxlen: 24
89.43.207.0/24 maxlen: 24
185.123.0.0/22 maxlen: 22
185.123.0.0/24 maxlen: 24
185.123.1.0/24 maxlen: 24
185.123.2.0/24 maxlen: 24
185.123.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 16:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1e:a3:41:fd:33:7c:30:4f:d6:e3:10:f7:33:0b:82:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Validity
Not Before: Sep 23 11:27:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=264a894209e286824fdf23a089f2c66fe247c187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:de:d0:7a:59:93:be:4d:87:d5:2b:72:23:
89:c8:9c:9a:b9:80:94:7b:26:27:82:1d:44:f3:ca:
63:b8:6f:c3:60:07:a3:a8:16:f8:92:f9:54:c8:4d:
d7:27:7a:f4:b2:96:c3:44:00:f7:1f:86:df:dc:84:
31:ba:b6:3f:69:d8:89:00:12:e2:79:53:af:3f:bb:
89:56:2b:ab:65:cc:08:90:3d:3b:0f:77:82:a9:d4:
d0:b3:cd:21:74:12:c9:13:03:6d:04:b5:56:16:31:
d4:68:71:6f:53:0b:c5:b8:ac:b6:cf:64:b3:40:ae:
66:a7:8c:32:c5:76:e5:d5:03:e0:fa:c1:b6:79:12:
5a:1b:48:7b:78:95:b5:3e:92:d4:98:fd:c0:85:40:
e8:cb:dc:0d:ea:38:b8:d7:87:10:a2:60:86:b0:24:
c6:63:f4:f8:9d:89:59:d5:05:58:49:70:8e:6b:9d:
68:86:9e:e3:ef:4b:7c:fb:7c:2f:c0:89:fa:51:9a:
73:9e:12:b3:3a:76:5a:76:78:39:5a:a3:46:a6:f2:
4c:6e:9e:c0:0c:c2:d3:3f:da:1f:82:ed:aa:2c:a6:
6c:92:26:50:37:9c:4d:5b:b5:7f:8e:c7:aa:22:c7:
62:f2:5c:e6:9b:7b:04:14:77:e7:f8:a1:66:d7:ae:
79:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4A:89:42:09:E2:86:82:4F:DF:23:A0:89:F2:C6:6F:E2:47:C1:87
X509v3 Authority Key Identifier:
keyid:AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/JkqJQgnihoJP3yOgifLGb-JHwYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.40.0/22
45.115.92.0/22
89.43.206.0/23
185.123.0.0/22
Signature Algorithm: sha256WithRSAEncryption
88:f5:d4:fb:22:e9:11:51:d2:3d:a4:6d:62:d1:37:1b:cc:00:
96:89:00:6d:33:54:fa:6e:23:d8:b9:52:f4:b9:bb:2c:81:f8:
4d:cc:49:0a:52:f6:21:7f:90:3b:68:70:16:f9:7b:86:3b:1d:
44:f1:c0:e8:d6:ef:c1:a8:d6:7e:6d:c7:49:4d:d1:d6:70:e0:
5b:9a:3c:6e:4b:05:35:3d:1b:e8:f1:93:c7:73:ff:f3:ac:85:
83:5f:b8:c7:d3:ac:77:15:50:5c:e5:1f:bc:a8:3c:dd:1d:3e:
24:25:28:d8:66:b3:35:dc:76:bc:91:3c:31:21:6b:00:52:6d:
b0:ec:02:88:e6:fc:35:0f:54:2c:ee:aa:63:fa:67:e9:ac:dc:
6f:7b:d4:61:18:e9:64:20:b8:9f:ca:e0:77:d3:f6:e4:d2:c4:
93:9c:ba:dc:0c:d2:51:a9:4f:3c:dc:98:bf:3e:f1:c3:b0:ec:
92:b3:9e:e8:5f:df:2b:3e:ad:b0:05:f4:be:6b:ac:31:d4:40:
a3:74:5d:4c:b5:28:9d:6a:00:89:2c:dc:f0:d8:cb:de:37:67:
9d:d1:c6:b8:2f:b1:9b:da:25:5b:ef:a2:c3:52:11:65:f6:66:
1a:fb:73:0c:ab:cd:22:91:78:35:76:a6:88:c7:a4:fd:54:f7:
09:e2:69:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:04 2025 by rpki-client