Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/JiROAnLtkz6-KWcN3LS2ozNwqyg.roa
File: JiROAnLtkz6-KWcN3LS2ozNwqyg.roa (raw, json)
Hash identifier: usbLcaa2hKA+s9KkqT4TDEM8D1FjHVgyPx6pMIypgo4=
Subject key identifier: 26:24:4E:02:72:ED:93:3E:BE:29:67:0D:DC:B4:B6:A3:33:70:AB:28
Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Certificate serial: 01936256B57199B150AD795BFB2A882588F8
Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/JiROAnLtkz6-KWcN3LS2ozNwqyg.roa
Signing time: Mon 25 Nov 2024 08:01:09 +0000
ROA not before: Mon 25 Nov 2024 08:01:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212318
IP address blocks: 88.218.113.0/24 maxlen: 24
88.218.115.0/24 maxlen: 24
93.179.90.0/23 maxlen: 24
178.57.65.0/24 maxlen: 24
178.57.66.0/24 maxlen: 24
178.57.67.0/24 maxlen: 24
178.57.68.0/24 maxlen: 24
185.217.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Nov 2024 08:44:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:56:b5:71:99:b1:50:ad:79:5b:fb:2a:88:25:88:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Validity
Not Before: Nov 25 08:01:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26244e0272ed933ebe29670ddcb4b6a33370ab28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:dd:03:bb:46:79:69:ff:83:12:5c:46:bc:d2:
a8:bd:61:66:35:82:f2:b6:a4:8e:86:49:f8:9d:b6:
87:7f:47:1e:f8:e4:e8:51:1c:ed:91:2d:8a:ac:e2:
0c:9e:5e:b6:44:99:12:17:7d:4e:0a:8a:e8:45:57:
2c:e4:34:aa:c3:9c:17:7f:42:99:cb:4d:42:8a:5d:
19:03:e8:0a:33:b0:e2:a5:76:2c:9c:24:3b:91:e7:
a3:ce:05:b6:aa:d4:5c:12:3d:a4:d7:2b:7f:37:18:
5f:51:fc:b9:30:99:bb:fe:09:aa:be:9f:cb:6f:8c:
93:3b:26:c4:83:b4:f6:a8:be:e4:48:51:6f:42:d2:
f2:12:6a:02:df:0d:eb:43:71:a2:ed:d3:47:45:6b:
ce:f8:39:aa:2a:86:c2:b5:9f:08:7d:48:08:2a:a4:
1f:3a:ee:95:88:9a:74:f7:d9:e0:88:30:34:57:5b:
a7:33:69:bd:45:88:0e:4d:e7:9a:20:84:51:85:68:
87:8a:0c:c1:20:14:1c:e7:76:b1:e1:93:c3:e4:c5:
a6:13:2d:8a:73:c9:7f:b1:96:12:44:5d:3b:18:bb:
fc:b0:cb:c3:01:09:22:78:fa:9e:aa:3b:75:55:28:
d9:bc:6d:d2:92:e5:46:fc:a2:2f:09:bb:62:03:d4:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:24:4E:02:72:ED:93:3E:BE:29:67:0D:DC:B4:B6:A3:33:70:AB:28
X509v3 Authority Key Identifier:
keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/JiROAnLtkz6-KWcN3LS2ozNwqyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.113.0/24
88.218.115.0/24
93.179.90.0/23
178.57.65.0-178.57.68.255
185.217.37.0/24
Signature Algorithm: sha256WithRSAEncryption
93:48:e2:02:25:63:9a:50:b4:90:8c:64:26:4d:e0:22:f0:35:
4d:39:21:2e:06:63:32:76:b6:5d:1b:28:19:7c:7e:97:35:45:
e5:9b:a0:10:ca:5a:9d:ea:2c:38:c0:4f:03:18:81:c9:af:5f:
57:9d:dc:23:6b:4f:56:75:ca:8e:7f:e2:01:fb:a7:12:5b:64:
35:a1:31:86:30:d5:ce:49:59:db:b8:12:08:7c:68:88:97:e7:
d4:91:d0:0f:35:6f:06:59:84:f9:3f:49:e6:70:d5:35:3e:d9:
ce:99:94:0d:5d:95:1b:6e:25:9f:e9:ef:16:85:f0:78:5f:3b:
77:fc:15:8f:1f:8e:8d:bd:b0:44:5d:f5:d6:92:4e:9c:42:a7:
db:e8:98:b7:a2:a3:45:e7:44:15:32:12:8f:89:06:f6:ae:79:
af:33:42:82:6d:00:ad:bf:42:0f:f9:e9:f2:45:0a:07:c9:d7:
e6:f9:9a:74:1d:14:12:ae:61:1a:93:5d:d1:17:a9:98:0d:4e:
fa:1d:ad:63:70:94:2c:91:39:56:8f:77:25:23:66:b2:3e:43:
77:c4:12:91:74:0b:cb:86:3e:f7:29:b1:8a:30:92:3e:1a:4b:
ef:0c:ff:fc:66:6f:f6:ff:77:c7:5c:cb:c4:61:22:8f:7d:93:
51:55:d2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:15:31 2025 by rpki-client