Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JRm1Olx0rnlcH0BKy-eO7X-yuL0.roa
File: JRm1Olx0rnlcH0BKy-eO7X-yuL0.roa (raw, json)
Hash identifier: Jx4KJ933GaG2IYcDWSJuMeQ92MZEF4GFZMM//+lMjU4=
Subject key identifier: 25:19:B5:3A:5C:74:AE:79:5C:1F:40:4A:CB:E7:8E:ED:7F:B2:B8:BD
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0189B0B9629D9798E4723E36E0B4CF4C1ECA
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JRm1Olx0rnlcH0BKy-eO7X-yuL0.roa
Signing time: Tue 01 Aug 2023 10:51:26 +0000
ROA not before: Tue 01 Aug 2023 10:51:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 188.212.121.0/24 maxlen: 24
89.36.140.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
86.105.4.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Aug 2023 06:41:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:b9:62:9d:97:98:e4:72:3e:36:e0:b4:cf:4c:1e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 1 10:51:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2519b53a5c74ae795c1f404acbe78eed7fb2b8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:81:e2:21:89:aa:3f:71:04:52:09:be:52:bc:
ce:d8:bc:98:a6:8d:8a:96:2f:50:3b:56:b6:0e:11:
22:55:91:38:df:67:94:b5:56:d9:46:dd:03:da:d3:
e9:82:2b:77:14:0a:52:12:b6:af:73:d8:4f:97:ca:
84:06:47:28:b9:e6:45:1d:e8:db:08:c1:c3:54:6b:
48:ed:58:0d:4a:dc:7b:a5:bc:03:91:3e:1f:f8:fc:
ca:ac:27:00:29:c2:ca:d6:b0:43:cc:ee:96:22:22:
75:cd:3a:2c:3d:51:de:a4:01:1f:9d:6b:d1:4e:5a:
30:85:52:57:ee:1d:fd:9b:15:97:df:9d:1c:94:73:
8f:8e:ab:cd:3a:56:bc:87:47:6f:25:bc:dd:d9:bd:
f2:0d:bf:07:1b:d2:d7:9f:d1:33:86:2b:ab:2f:9b:
e1:27:ce:51:08:bc:38:2e:59:04:74:a7:eb:98:c7:
37:66:b4:33:4b:a5:da:63:a2:d9:8c:84:1a:0c:98:
76:35:3d:f4:cc:81:6a:b1:2c:74:79:98:82:e3:f1:
95:5f:2c:50:87:6d:58:23:13:14:5a:93:07:2a:0e:
9a:a2:af:bc:b7:d4:05:cf:0e:c8:86:7a:4f:53:e1:
c6:b1:bc:c1:c6:30:02:26:2d:f2:18:23:c5:8d:62:
68:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:19:B5:3A:5C:74:AE:79:5C:1F:40:4A:CB:E7:8E:ED:7F:B2:B8:BD
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JRm1Olx0rnlcH0BKy-eO7X-yuL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
86.105.4.0/24
89.36.140.0/24
89.40.36.0/24
89.45.35.0/24
188.212.121.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a7:ab:b4:33:90:96:f1:aa:e4:d3:10:ac:34:0f:dd:5c:59:
88:25:a6:5d:65:fe:ad:21:b2:0d:bf:4a:d8:57:47:ac:7a:a5:
eb:f8:55:ee:d9:d9:20:c6:31:2c:7a:e0:86:a1:f7:fc:2d:28:
e0:8f:92:fb:b4:a0:56:ea:37:a5:fb:56:e4:c0:ed:02:47:c4:
4f:03:e9:49:9f:f1:6c:a1:09:dd:39:81:b4:aa:c4:ad:9d:b5:
fb:35:bc:ee:88:86:3c:86:77:3f:10:b2:77:ac:8e:a1:d1:91:
ae:f2:6e:bf:7f:bb:6a:b3:c0:9e:3c:ca:85:ff:f2:d9:6f:36:
20:3a:d0:41:f3:aa:5a:12:cd:48:0c:35:cf:70:64:a8:dc:ae:
7b:b9:c9:cb:52:85:96:49:1a:cd:4e:98:e9:54:a5:93:c0:59:
fa:bc:3e:33:ad:44:62:5c:77:77:d8:cb:61:25:36:e8:8b:19:
04:b6:de:3e:e4:cb:1d:3e:8e:88:bc:b8:de:14:69:50:0f:b0:
e0:1b:54:85:1a:a6:73:c0:7c:f6:17:bc:08:ac:93:93:ae:a2:
8d:e3:87:aa:5c:8b:85:f0:e1:31:65:2d:68:d9:da:72:82:5a:
4b:38:4c:85:6f:2e:d6:74:86:f7:dd:93:3a:31:df:14:57:2c:
7b:91:f6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org