Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/JlhysoN3YQ8-Yb-sVAxM0DVzSJI.roa
File: JlhysoN3YQ8-Yb-sVAxM0DVzSJI.roa (raw, json)
Hash identifier: 6uX8XTeyZlvnkL+B+vl1e1EpIqJJF3Fg2/C38vDkj5o=
Subject key identifier: 26:58:72:B2:83:77:61:0F:3E:61:BF:AC:54:0C:4C:D0:35:73:48:92
Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial: 018ADA9D28115C0942F6D22A368550483430
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/JlhysoN3YQ8-Yb-sVAxM0DVzSJI.roa
Signing time: Thu 28 Sep 2023 07:07:27 +0000
ROA not before: Thu 28 Sep 2023 07:07:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15372
IP address blocks: 193.36.120.0/22 maxlen: 22
212.111.224.0/19 maxlen: 24
195.248.83.0/24 maxlen: 24
91.90.167.0/24 maxlen: 24
193.176.146.0/24 maxlen: 24
188.239.188.0/23 maxlen: 23
2a01:7700::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:da:9d:28:11:5c:09:42:f6:d2:2a:36:85:50:48:34:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Validity
Not Before: Sep 28 07:07:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=265872b28377610f3e61bfac540c4cd035734892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3e:1e:e8:c7:c7:a6:d1:04:a1:70:15:30:1c:
ed:d2:ce:f7:e7:69:26:5d:e4:ff:16:2b:71:bb:3a:
58:a3:23:92:32:6e:1a:cb:ab:fc:51:95:bd:67:fb:
d2:86:00:4e:f6:d8:7c:03:c6:c2:f8:95:c6:9c:d4:
e3:26:dc:71:80:6f:a6:35:75:1e:e9:f3:b0:38:5c:
fe:d8:08:92:c7:a9:ba:a1:6c:90:40:17:bf:c8:44:
71:48:c3:a6:1e:ce:db:d3:8c:70:e1:b2:33:bc:b0:
36:2d:7e:84:1b:cc:0d:d1:c4:99:17:a0:73:4d:52:
a4:ca:75:28:4d:14:39:58:b4:5d:b4:66:b3:67:67:
b2:a4:65:cd:34:f3:d1:b3:92:fc:1f:70:5b:ed:64:
35:2a:61:d0:25:fe:e1:ef:19:b7:27:97:e8:28:0b:
f5:d3:38:4d:51:24:b9:bb:a3:1f:94:a3:ce:f4:06:
4f:9f:61:5c:6c:98:d5:b1:c0:3e:e9:67:58:a8:1a:
3d:8d:71:ec:99:f7:d9:ea:e4:ab:35:1c:a3:42:6a:
96:4c:0e:6e:7d:d4:72:97:ee:96:2f:e9:dc:f2:ad:
61:5f:7a:8c:f3:1c:b2:b0:b2:4c:67:3b:bd:bc:eb:
e1:aa:e2:26:e3:7c:41:53:93:b9:19:8a:fe:ca:c3:
58:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:58:72:B2:83:77:61:0F:3E:61:BF:AC:54:0C:4C:D0:35:73:48:92
X509v3 Authority Key Identifier:
keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/JlhysoN3YQ8-Yb-sVAxM0DVzSJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.167.0/24
188.239.188.0/23
193.36.120.0/22
193.176.146.0/24
195.248.83.0/24
212.111.224.0/19
IPv6:
2a01:7700::/32
Signature Algorithm: sha256WithRSAEncryption
03:73:a0:51:b0:e0:ba:2f:5a:da:0c:41:6a:97:5a:76:ca:10:
50:84:9b:d1:75:04:b9:85:62:5e:54:de:37:99:a2:6b:9e:bb:
05:16:cb:2e:56:ac:80:ce:aa:e2:36:30:43:15:fc:83:c4:8e:
99:86:43:cd:ba:26:a5:93:52:ca:3b:85:95:3c:ed:2d:78:3d:
7f:37:bf:e9:30:2f:f3:5e:0b:8c:72:7d:c1:f7:21:a9:1e:39:
1b:c3:07:ce:d5:8e:d2:b5:31:f1:17:e9:71:1e:40:b6:60:ee:
7d:4f:46:d7:62:72:d2:3d:1d:85:ee:3a:7c:40:2f:ae:0d:74:
61:77:0d:05:aa:52:ff:40:98:c4:01:9e:1c:31:1c:1c:50:d2:
5e:c8:9f:ff:69:71:98:33:72:fc:6a:6f:27:b3:ed:90:36:85:
74:13:7b:28:94:30:d6:cf:18:ca:f7:c9:35:cf:4c:21:33:1e:
b7:ce:58:02:0b:5c:90:2f:c0:4c:ed:49:6a:de:06:c9:07:e5:
8d:45:9e:0b:9b:3a:5c:2f:61:4d:e9:ef:4c:4f:4c:38:02:9e:
03:75:f7:05:3d:11:d6:1e:13:eb:5e:b3:ef:2c:2e:fe:c2:4b:
84:19:31:b5:5c:0b:28:ef:28:20:58:43:ac:61:2d:34:a8:e0:
a8:78:a2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:26 2024 by rpki-client on console-fra.rpki-client.org