Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JYzMsaT1tbTKEqHd-Bu8zOjwrTE.roa
File: JYzMsaT1tbTKEqHd-Bu8zOjwrTE.roa (raw, json)
Hash identifier: 6kShRgAmdZUwzkdpNCqQH8Oa8AbByzScFOBQ18son8s=
Subject key identifier: 25:8C:CC:B1:A4:F5:B5:B4:CA:12:A1:DD:F8:1B:BC:CC:E8:F0:AD:31
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018D6984053C15397C4518F895E1CA5C8259
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JYzMsaT1tbTKEqHd-Bu8zOjwrTE.roa
Signing time: Fri 02 Feb 2024 11:11:16 +0000
ROA not before: Fri 02 Feb 2024 11:11:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 86.107.51.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.34.202.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.35.131.0/24 maxlen: 24
89.37.192.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
89.43.62.0/24 maxlen: 24
91.132.51.0/24 maxlen: 24
93.90.75.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
128.0.41.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Feb 2024 04:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:69:84:05:3c:15:39:7c:45:18:f8:95:e1:ca:5c:82:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 2 11:11:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=258cccb1a4f5b5b4ca12a1ddf81bbccce8f0ad31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:31:b8:d1:a2:2c:09:12:78:6b:d9:a5:e6:
83:13:6b:f9:5d:70:f1:8b:b9:bf:07:0d:51:b2:cd:
83:69:b6:7d:f8:3d:ab:69:fa:a3:5c:ab:f4:2a:5a:
dc:24:00:b7:d7:dd:f9:ee:12:40:bb:ed:67:33:b7:
92:f7:4d:d6:84:6c:5b:71:26:dd:20:11:25:3f:55:
48:cc:24:f2:d6:98:59:8d:7d:9a:36:69:5e:a1:b0:
3a:6e:f6:00:45:45:0e:c9:7c:31:84:e1:1b:af:ef:
be:e4:a5:ec:42:5b:90:0b:48:1c:ad:53:ae:d1:e4:
ec:f7:d8:f8:71:9e:9d:ba:48:db:3f:58:76:f9:fa:
6b:9a:80:37:40:5c:63:92:c0:ba:3b:70:d2:be:03:
0c:74:4c:ee:d6:6c:2c:af:b6:12:95:b3:e3:5f:44:
a8:dc:d3:8b:60:09:32:9a:6d:19:18:93:e6:09:bd:
9d:16:64:0c:26:7d:eb:fd:1a:f7:a6:48:59:e6:43:
b3:7d:5d:cc:3e:9b:54:2c:35:df:dd:a0:a1:97:e7:
f5:0b:3d:11:3d:1a:af:c0:2f:c2:1b:de:3e:a9:67:
af:20:97:7b:dd:35:a2:79:66:57:b7:b1:ed:d9:0c:
a8:c4:1d:74:48:a9:7b:2c:2a:9a:05:04:b1:f8:5f:
40:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8C:CC:B1:A4:F5:B5:B4:CA:12:A1:DD:F8:1B:BC:CC:E8:F0:AD:31
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JYzMsaT1tbTKEqHd-Bu8zOjwrTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.51.0/24
89.34.106.0/24
89.34.202.0/24
89.34.219.0/24
89.35.129.0/24
89.35.131.0/24
89.37.192.0/24
89.40.215.0/24
89.43.62.0/24
91.132.51.0/24
93.90.75.0/24
93.114.183.0/24
128.0.41.0/24
188.241.137.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:cd:af:1f:ac:d2:c0:08:72:20:e2:bc:b6:89:de:90:d8:6e:
99:69:a2:38:6b:47:b9:fa:0f:e7:06:65:1c:03:79:55:98:37:
83:89:b1:62:c4:e9:a9:c2:6f:00:be:a2:5c:28:55:d9:87:1b:
90:08:45:5d:0a:d4:91:f0:fb:bf:ce:cc:b3:eb:5d:60:ab:8e:
9d:f4:84:b6:c0:ca:7b:91:8d:2f:71:7c:5d:71:47:92:05:2f:
6b:bf:e8:f8:18:e8:37:61:a9:ee:e6:09:c1:20:df:5f:fe:b4:
ea:43:98:6f:af:8c:42:01:c7:03:4c:a9:24:b4:d7:f6:74:98:
13:c7:84:87:c8:d4:1e:2e:59:34:99:ae:76:21:8f:e7:cf:07:
5b:be:b2:1b:13:8c:6b:0d:74:7f:3e:1c:75:bd:b9:ef:66:52:
4c:ff:ac:23:1b:01:82:4c:05:8d:4b:5d:06:4a:64:70:60:23:
7d:6f:99:ff:1e:76:9f:61:63:29:3f:72:d5:a9:44:3b:4a:81:
27:dc:11:36:35:4d:bc:5b:73:b5:f8:0f:a1:52:8b:12:6e:cc:
62:38:7d:3b:db:dd:22:68:46:0e:11:4c:ef:92:7a:da:3a:43:
e0:fb:5a:4e:62:85:84:e6:1e:e4:09:99:09:f1:60:b9:78:34:
a9:6b:50:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org