Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/jvkOUejCpCIfCj1YwaD1jug-uI4.roa
File: jvkOUejCpCIfCj1YwaD1jug-uI4.roa (raw, json)
Hash identifier: g1nI3B0Oun3Q7C96N+yq7lcvzGq64+wxBtqy+bZFtf4=
Subject key identifier: 8E:F9:0E:51:E8:C2:A4:22:1F:0A:3D:58:C1:A0:F5:8E:E8:3E:B8:8E
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 018F1564695C02EF597B8FD8EDC0A8B5D108
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/jvkOUejCpCIfCj1YwaD1jug-uI4.roa
Signing time: Thu 25 Apr 2024 13:14:13 +0000
ROA not before: Thu 25 Apr 2024 13:14:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 2.56.243.0/24 maxlen: 24
45.136.206.0/24 maxlen: 24
193.47.41.0/24 maxlen: 24
194.61.233.0/24 maxlen: 24
194.147.88.0/24 maxlen: 24
194.156.94.0/24 maxlen: 24
194.169.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Apr 2024 11:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:15:64:69:5c:02:ef:59:7b:8f:d8:ed:c0:a8:b5:d1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Apr 25 13:14:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ef90e51e8c2a4221f0a3d58c1a0f58ee83eb88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:e2:97:b6:eb:02:b7:bf:84:86:66:4d:99:
6a:e2:27:64:58:fe:3c:0b:20:6c:06:21:30:33:6a:
aa:67:82:b3:12:4a:08:80:0d:9b:8a:4c:e0:41:e8:
c2:2d:00:80:93:ca:9b:fc:2a:79:74:74:4a:79:b8:
72:f0:ef:f7:97:bc:b3:1b:45:2f:81:72:13:f1:ac:
81:d5:6f:9d:e4:82:d1:85:ab:c0:95:24:78:93:36:
94:bc:41:1d:35:ab:ea:04:c3:68:d0:00:fb:05:f6:
69:6c:ea:eb:ac:d6:3e:12:cd:79:c8:4d:d6:d5:8d:
89:6e:a9:2d:9e:55:a0:a2:24:1f:6b:0c:2b:50:39:
83:ec:43:27:c7:1e:5f:ae:9d:ef:9b:ae:69:46:ad:
8c:5f:24:96:a7:6d:a7:b0:99:4d:04:8f:1c:d3:3a:
bb:d0:1b:21:f0:b6:ac:c9:d7:dc:46:73:41:c5:49:
ef:b8:2f:90:2c:77:ad:e2:04:3e:50:f2:4b:f4:02:
db:d1:15:af:1e:20:43:1e:2f:23:c5:8c:6a:b8:3e:
0a:8e:6f:95:90:90:47:ea:8e:8f:3d:c0:df:29:8a:
c6:85:2e:1d:ee:ab:6a:dd:cf:12:5f:a2:27:46:e2:
0d:10:b9:5f:01:6a:3e:76:7c:8e:a9:3c:ca:1e:25:
7b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F9:0E:51:E8:C2:A4:22:1F:0A:3D:58:C1:A0:F5:8E:E8:3E:B8:8E
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/jvkOUejCpCIfCj1YwaD1jug-uI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.243.0/24
45.136.206.0/24
193.47.41.0/24
194.61.233.0/24
194.147.88.0/24
194.156.94.0/24
194.169.86.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:d0:c7:d6:d2:d2:12:af:69:8b:f2:ed:3e:f5:f4:59:b7:67:
86:5a:38:21:6a:82:17:f6:c2:45:25:e1:c7:59:3c:fa:b2:91:
2a:b7:10:5c:70:09:ee:b5:4f:0b:06:95:aa:73:13:9e:c0:d1:
7f:b9:55:3c:93:3f:9c:7c:1c:c9:84:88:ff:60:15:3e:c3:18:
d0:75:7c:e0:ab:87:00:7e:e1:70:b5:29:c4:cf:cd:bd:46:7d:
55:94:a2:d4:ff:9b:f0:5b:c6:c5:f7:fc:7b:c7:33:73:3a:8c:
b1:7f:fd:bc:b9:97:1b:a9:16:ae:3e:ad:a9:c0:98:63:17:42:
ed:d4:c4:cf:ff:00:86:71:99:ba:b0:25:3a:62:e6:21:4c:7b:
34:8d:f0:24:89:4c:6c:db:50:f2:5b:3b:c4:25:96:44:6d:52:
8b:86:fe:c0:ed:fb:18:50:5d:16:27:dd:90:21:d7:c3:f8:1f:
05:18:e5:fe:eb:c6:94:70:7e:04:8d:6e:67:73:25:3a:12:ee:
62:76:a9:fa:09:ea:42:97:86:e8:b4:c1:3f:5a:33:71:ec:94:
c6:f2:f0:33:c4:17:87:eb:90:7d:bd:d0:7d:27:0b:5c:a7:82:
09:43:ef:7a:e7:49:7a:30:45:9c:ee:fd:30:8c:36:fe:2f:b9:
a8:91:fb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:00 2024 by rpki-client on console-fra.rpki-client.org