Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/Jv7B2-S0U6kBkBMymKiAmNN5C6A.roa
File: Jv7B2-S0U6kBkBMymKiAmNN5C6A.roa (raw, json)
Hash identifier: KPLszvepPdckZvFnEETRxkURL/foiMX16PYfj7Qe08E=
Subject key identifier: 26:FE:C1:DB:E4:B4:53:A9:01:90:13:32:98:A8:80:98:D3:79:0B:A0
Certificate issuer: /CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Certificate serial: 018571B0ED741ACF1DD7AF28046126628075
Authority key identifier: 36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/Jv7B2-S0U6kBkBMymKiAmNN5C6A.roa
Signing time: Mon 02 Jan 2023 08:54:58 +0000
ROA not before: Mon 02 Jan 2023 08:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57075
IP address blocks: 185.104.130.0/23 maxlen: 24
2a06:3084::/30 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:ed:74:1a:cf:1d:d7:af:28:04:61:26:62:80:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Validity
Not Before: Jan 2 08:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26fec1dbe4b453a90190133298a88098d3790ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7a:fd:50:ae:5f:4c:65:92:ac:01:0a:a6:ee:
59:06:cd:07:b8:e2:5b:00:da:2a:0e:05:95:a1:f5:
ae:14:f4:e1:6d:9f:a4:bb:43:b9:10:88:dc:74:98:
90:c6:ad:96:13:1a:29:06:c1:b3:af:60:88:fa:11:
01:29:70:50:83:aa:63:9d:67:21:0c:04:a3:37:f7:
99:2c:2c:f1:ba:b4:1f:44:d6:ef:5d:29:0e:23:e1:
56:76:62:3e:fc:08:d7:eb:04:74:4e:5c:b1:0f:d3:
41:e0:e6:81:14:d2:e2:6e:02:f6:29:d6:b9:5f:99:
5f:c2:ba:62:72:5f:7c:9f:a6:8d:ea:33:85:8e:61:
b2:5f:e5:3c:c8:c9:22:17:d5:de:46:fd:71:3f:a2:
82:d0:fa:90:1b:35:96:f7:56:04:ba:86:a6:5b:2b:
02:7e:81:1f:5a:4f:47:80:82:b4:2e:e0:84:e7:ca:
e8:8e:ae:74:b4:06:65:97:ae:7a:bf:89:79:1e:00:
25:32:45:58:a7:92:a1:91:1c:8f:3b:e1:f2:00:3c:
9d:18:57:23:1f:92:fa:c1:8c:12:1a:c6:85:89:aa:
67:45:44:11:80:2a:25:c3:d2:2f:9c:5b:1b:84:6c:
2a:82:09:e9:d1:7d:97:0e:11:55:fb:8a:a8:6d:82:
9f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FE:C1:DB:E4:B4:53:A9:01:90:13:32:98:A8:80:98:D3:79:0B:A0
X509v3 Authority Key Identifier:
keyid:36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/Jv7B2-S0U6kBkBMymKiAmNN5C6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.130.0/23
IPv6:
2a06:3084::/30
Signature Algorithm: sha256WithRSAEncryption
44:92:fc:72:8e:51:8c:60:2e:f2:ec:98:0d:e3:74:44:d4:65:
5a:46:77:b7:25:ae:8b:ca:e6:12:19:a0:6d:2e:0b:5d:a7:e2:
92:98:5f:12:5a:ce:55:df:a7:b1:eb:8d:c7:80:60:93:7e:f5:
2d:98:b0:9f:28:cd:cb:7c:38:46:c4:e0:13:22:d2:aa:cf:e7:
ee:17:ab:23:71:fb:62:1d:41:17:0c:2e:ca:d9:c7:25:dd:d8:
0e:2e:3f:6b:1d:52:5d:1b:45:4f:67:74:63:b1:6b:3b:f9:9b:
e3:ec:df:0f:ce:ca:19:86:13:8c:39:a2:ad:8b:7a:c4:94:42:
a5:37:3a:23:d1:27:59:70:c7:bf:07:ad:a3:c4:be:29:da:55:
5d:0d:8a:92:d1:df:7e:ea:ce:bd:65:e5:39:2c:ed:e4:a9:9d:
a3:5e:cc:cc:9a:88:d5:b0:a8:05:ee:59:c1:8a:05:0e:c0:09:
84:a8:ef:75:0a:0e:a0:a7:a3:70:fc:4f:8d:fc:08:ea:81:89:
a7:40:1f:4e:44:78:4d:74:b3:d5:48:70:9a:8c:bf:f9:86:bc:
7b:57:53:02:3d:a3:21:4b:58:39:6f:4f:92:bb:23:68:53:54:
09:ba:2b:06:9f:e2:ba:f1:ee:ff:c1:5a:87:49:38:67:62:69:
5a:4f:0c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:14 2024 by rpki-client on console-fra.rpki-client.org