Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/J3kChN_J8l1Ce9tk-6uATEN8EJQ.roa
File: J3kChN_J8l1Ce9tk-6uATEN8EJQ.roa (raw, json)
Hash identifier: kjLHfWyEk3IxfOIu4AtIFFR4yMmJx8ZtwkoBHyuWeao=
Subject key identifier: 27:79:02:84:DF:C9:F2:5D:42:7B:DB:64:FB:AB:80:4C:43:7C:10:94
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 018DA762BAFA48076AF5471CB0F98B532033
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/J3kChN_J8l1Ce9tk-6uATEN8EJQ.roa
Signing time: Wed 14 Feb 2024 11:31:21 +0000
ROA not before: Wed 14 Feb 2024 11:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48851
IP address blocks: 92.61.238.0/24 maxlen: 24
94.188.210.0/24 maxlen: 24
94.188.222.0/24 maxlen: 24
94.188.223.0/24 maxlen: 24
94.188.232.0/24 maxlen: 24
94.188.233.0/24 maxlen: 24
94.188.234.0/24 maxlen: 24
94.188.235.0/24 maxlen: 24
94.188.236.0/24 maxlen: 24
94.188.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Aug 2024 11:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:62:ba:fa:48:07:6a:f5:47:1c:b0:f9:8b:53:20:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Feb 14 11:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27790284dfc9f25d427bdb64fbab804c437c1094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:20:6b:fe:b3:f0:e7:95:06:7e:a5:8e:ee:46:
01:84:10:60:ac:8b:03:ee:ba:d8:bb:cb:bd:03:e5:
bb:77:a2:b4:ef:94:bb:d0:8c:84:2a:ce:0d:29:7c:
6e:d2:c7:dc:03:19:28:9e:9c:0c:46:2b:e4:67:ec:
12:5f:22:b3:18:fa:bc:ad:95:ee:ef:d1:19:fb:62:
2b:4e:0c:c3:25:e4:f3:79:30:35:88:98:95:09:d5:
25:29:94:66:b8:b1:dd:7d:5e:bd:75:50:76:d2:c4:
8f:6a:75:75:f2:36:e1:f7:ba:ef:49:55:1f:ea:8c:
80:88:f5:02:9e:79:2e:bb:e8:a7:db:73:74:06:52:
60:5d:b2:f8:8d:e1:c4:d1:32:9c:91:f9:32:c4:e5:
fb:18:df:ac:f0:d4:ac:bd:30:8e:17:ec:af:b6:02:
02:11:de:0a:60:d8:51:ec:66:6c:49:96:c6:57:f4:
ad:4f:95:90:80:e5:3a:0f:95:51:b2:ac:8c:d7:f1:
b8:91:49:0a:60:24:4e:9d:c8:52:0d:1a:3a:59:f5:
e4:93:de:15:02:60:bc:16:c4:05:a5:fc:9d:d7:73:
53:b5:a8:a2:b2:4c:73:c5:86:95:d5:5c:aa:ff:d1:
e4:e9:32:30:fa:cb:6c:3d:d4:7a:b4:33:03:b5:7f:
e2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:79:02:84:DF:C9:F2:5D:42:7B:DB:64:FB:AB:80:4C:43:7C:10:94
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/J3kChN_J8l1Ce9tk-6uATEN8EJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.238.0/24
94.188.210.0/24
94.188.222.0/23
94.188.232.0-94.188.237.255
Signature Algorithm: sha256WithRSAEncryption
8d:76:74:3a:a0:ec:33:9d:37:30:8b:40:08:92:02:49:75:35:
29:9c:65:6f:59:84:f3:af:f9:eb:8e:92:96:67:15:43:36:9a:
c0:5d:35:ec:1c:51:7b:50:84:8a:44:f9:9a:0f:e8:e3:82:91:
a6:d9:58:11:68:83:33:16:bb:ca:42:10:f9:bd:b3:0a:d6:b9:
3e:00:5a:b2:43:16:89:3f:ac:ae:74:1b:21:16:3a:61:04:3a:
d2:4e:90:e4:1c:82:de:88:ef:9c:a0:f9:c2:3c:68:df:3f:12:
1e:60:a0:36:4e:6b:1a:9f:ea:f0:e4:81:11:8d:8a:12:04:92:
64:d3:db:7d:b2:a5:7d:18:f6:e1:a1:e5:f1:18:a6:60:9d:e6:
4e:e3:23:bc:ec:c9:37:63:32:7b:47:a4:0c:25:02:2d:b0:ba:
60:c2:05:75:2b:6b:5b:3b:26:15:b1:b0:78:fc:8e:a6:34:1a:
03:df:bf:ea:6b:3f:65:23:ff:c3:65:12:68:21:5f:f1:ee:7c:
5e:9c:6e:4d:f2:18:6a:dd:a2:ea:36:87:84:00:b4:05:c6:d1:
bc:b2:a8:cb:43:7c:fd:81:b0:8e:2d:9f:4d:9a:d8:8b:a6:e7:
46:6d:5e:44:93:fd:04:2a:2f:db:f5:4e:a6:17:3b:6c:b3:ef:
30:40:bd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:16 2025 by rpki-client