Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/JSd5W4n8BjylBtDUTatigwSu9Yo.roa
File: JSd5W4n8BjylBtDUTatigwSu9Yo.roa (raw, json)
Hash identifier: nwha1YxyGpQFt+IYRiHWWu7gmb+fLdqTVyxeF5lxLLg=
Subject key identifier: 25:27:79:5B:89:FC:06:3C:A5:06:D0:D4:4D:AB:62:83:04:AE:F5:8A
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 018A5273F0A69D1D35C30052EFF286425816
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/JSd5W4n8BjylBtDUTatigwSu9Yo.roa
Signing time: Fri 01 Sep 2023 20:34:04 +0000
ROA not before: Fri 01 Sep 2023 20:34:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.93.228.0/24 maxlen: 24
193.19.224.0/22 maxlen: 24
2a02:fe80:13::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:52:73:f0:a6:9d:1d:35:c3:00:52:ef:f2:86:42:58:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Sep 1 20:34:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2527795b89fc063ca506d0d44dab628304aef58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fd:b1:c7:8e:4c:cb:38:13:92:04:6f:98:b0:
82:f3:e0:15:34:a8:b7:51:6a:0b:8f:e5:66:53:66:
44:ac:dd:69:66:23:b6:bf:03:76:de:a6:78:19:1d:
44:76:dc:75:cd:6f:53:6f:cb:6a:c2:02:85:1f:94:
57:38:d8:2b:c5:cc:54:32:aa:f5:4f:01:83:ad:b6:
de:0c:32:a9:df:77:f2:d7:14:11:99:d5:4d:6c:1c:
7b:e0:5b:90:0e:58:a6:01:2f:5c:60:2a:77:ec:99:
81:3e:97:ec:49:ef:b9:0d:10:0b:4c:9f:55:52:63:
db:db:88:b1:8d:1d:05:87:ad:33:8a:38:7a:89:c4:
3c:17:6d:96:a4:fb:33:21:9d:c7:a1:35:12:d8:05:
df:d4:77:d6:1f:0e:64:1a:78:bc:99:b4:0e:d3:98:
b5:c7:1b:cd:68:10:ec:93:73:be:68:14:61:5d:b9:
58:fa:e9:5e:65:5e:d1:91:0a:ac:13:c2:42:35:18:
0e:d0:eb:a2:6d:c4:33:64:b1:ec:81:c6:cf:12:b0:
fa:1d:be:b4:df:27:40:dc:56:f3:68:11:5a:0e:af:
d7:b2:7b:fc:39:54:cf:11:75:47:1c:62:03:97:53:
df:26:e1:52:8d:73:07:14:2c:2a:04:16:87:5d:ec:
b3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:27:79:5B:89:FC:06:3C:A5:06:D0:D4:4D:AB:62:83:04:AE:F5:8A
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/JSd5W4n8BjylBtDUTatigwSu9Yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.228.0/24
193.19.224.0/22
IPv6:
2a02:fe80:13::/48
Signature Algorithm: sha256WithRSAEncryption
27:98:f3:af:c0:d5:c7:6f:41:2d:2b:65:31:f4:05:a1:d3:a5:
d6:68:e0:de:ed:25:66:9a:b9:eb:b8:be:ac:5b:e8:2d:fd:b2:
b7:fb:fd:c1:00:1d:1e:28:dc:69:95:09:2e:97:6f:d0:4c:ce:
e9:76:ef:d4:09:78:7c:fe:5c:00:36:0f:a3:71:68:78:19:b5:
03:db:7d:67:e7:bd:1e:42:f4:65:09:cb:e8:d3:7e:96:83:62:
6f:1e:d4:80:d4:88:53:bf:5e:9e:74:a6:45:be:ab:b5:f1:14:
ab:4e:66:f3:30:a7:85:14:fc:28:eb:0b:ba:16:d6:93:72:4b:
d7:43:83:ee:e3:da:60:3a:6b:2d:ca:5c:b2:1d:5f:b2:58:eb:
7c:e4:75:ce:76:22:e8:4e:40:cf:2f:38:ea:12:40:ee:f4:fc:
8c:46:5f:95:06:89:e2:a6:bb:b1:0f:17:15:78:ad:6d:58:3d:
40:c9:c7:7e:68:87:7f:29:8b:e9:b4:78:07:a7:07:a8:17:8a:
41:cd:a4:92:6c:75:c4:c1:3d:5b:4d:1c:4e:0c:a3:90:d8:92:
79:d9:6f:a7:78:69:95:71:23:70:12:ab:92:dd:41:3d:94:66:
ec:5d:13:7b:27:e2:f6:f5:e8:67:59:2f:de:0a:f3:7a:a2:00:
6d:5f:11:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:21 2024 by rpki-client on console-fra.rpki-client.org