Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/jgQZyXH5lf5lZInR0HuNOgxVyPw.roa
File: jgQZyXH5lf5lZInR0HuNOgxVyPw.roa (raw, json)
Hash identifier: MyUbSkVZqEFH/qtbUGhhaa26SFfKKEhkKWIJ+uvWw/s=
Subject key identifier: 8E:04:19:C9:71:F9:95:FE:65:64:89:D1:D0:7B:8D:3A:0C:55:C8:FC
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 0185714C3E2BE010A8FC10A91E8624C3506F
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/jgQZyXH5lf5lZInR0HuNOgxVyPw.roa
Signing time: Mon 02 Jan 2023 07:05:00 +0000
ROA not before: Mon 02 Jan 2023 07:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40980
IP address blocks: 144.208.192.0/21 maxlen: 22
144.208.200.0/22 maxlen: 22
185.50.234.0/24 maxlen: 24
2a01:aea0:dd5::/48 maxlen: 48
2a01:aea0:df5::/48 maxlen: 48
2a01:aea0:df3::/48 maxlen: 48
2a01:aea0:dd3::/48 maxlen: 48
2a01:aea0:df4::/48 maxlen: 48
2a01:aea0:dd4::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:3e:2b:e0:10:a8:fc:10:a9:1e:86:24:c3:50:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 2 07:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e0419c971f995fe656489d1d07b8d3a0c55c8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a7:55:27:4a:81:95:b5:58:7f:f4:50:c1:e5:
ca:87:09:b6:0d:65:9f:16:c2:7e:f7:c8:3f:d4:8d:
5b:51:c3:b8:82:8e:c0:4f:78:86:5f:ac:3d:ae:df:
c8:13:61:18:06:0e:ff:9b:66:9b:62:d6:6b:f5:5a:
42:64:c4:42:3c:d5:13:97:b9:86:b4:22:68:fc:fe:
5a:85:89:34:2a:db:4c:4b:a2:85:26:e5:4f:45:54:
4f:57:04:5f:64:3f:6e:7f:52:80:50:6d:ec:6c:a1:
84:d8:e9:09:aa:d2:59:b5:2e:c9:0e:e3:c4:62:8c:
cf:36:51:4a:05:ad:b6:a8:7a:9f:fc:ca:bd:4a:3d:
c4:f3:ba:0a:c9:1b:68:d0:49:cd:f8:5b:7a:2e:60:
d1:45:3e:47:73:75:33:cb:81:66:cd:f9:87:01:7e:
c0:34:d9:aa:3a:18:a0:50:df:26:19:98:e5:1a:0e:
04:c7:29:14:0f:e5:b2:3b:a2:33:ef:76:12:6a:54:
3f:d5:ed:7a:0c:1d:d8:3f:57:85:5c:e2:a9:70:2d:
a8:62:e2:92:39:8c:ed:09:21:68:b8:61:a2:bb:b7:
29:46:31:ba:01:40:e8:1a:19:41:df:bf:a2:38:8b:
c1:86:43:06:67:e3:86:45:87:ff:44:5b:2b:16:45:
bc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:04:19:C9:71:F9:95:FE:65:64:89:D1:D0:7B:8D:3A:0C:55:C8:FC
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/jgQZyXH5lf5lZInR0HuNOgxVyPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.208.192.0-144.208.203.255
185.50.234.0/24
IPv6:
2a01:aea0:dd3::-2a01:aea0:dd5:ffff:ffff:ffff:ffff:ffff
2a01:aea0:df3::-2a01:aea0:df5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2c:2d:58:4a:13:6c:f3:90:41:9a:6e:02:96:f7:3f:e5:1c:3d:
c7:a8:a1:72:07:c3:a2:db:23:fa:8a:e5:60:23:f1:87:9a:20:
da:c5:cf:dd:e7:7d:65:bc:1b:c2:d5:cc:df:1b:83:bb:1a:ae:
c0:9d:bc:ca:c0:d1:80:8e:d2:c4:36:f5:58:0c:d3:c7:ba:d7:
25:cb:ba:4a:cb:da:0d:46:30:03:35:a6:f1:af:29:43:ce:a5:
38:80:19:3a:58:45:8b:6b:e2:42:4e:70:ff:01:38:7d:3a:0f:
a3:53:0a:0b:84:dc:26:c4:c0:6c:9c:10:4d:6e:49:7b:e7:c4:
84:ec:66:93:9c:fe:27:94:63:42:38:f6:49:7f:ef:a8:d6:fd:
87:69:1b:45:65:55:8b:5e:cb:37:25:b2:8a:b4:6f:b1:65:c7:
a5:b6:0a:cb:1c:16:56:06:ec:e1:04:04:c6:ab:40:0e:ad:99:
0d:52:6c:4e:bc:19:f1:8b:d7:a7:a7:51:49:59:11:68:1c:28:
a9:be:60:31:d9:62:06:d4:27:37:ab:7e:4e:78:b5:2a:2e:b6:
26:f6:36:0a:be:e4:ca:b3:44:11:0e:9a:5f:ef:46:f5:56:2c:
6a:37:f7:06:e5:b3:43:c3:41:8b:6e:ba:67:ac:de:a4:e4:96:
f8:13:10:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:51 2024 by rpki-client on console-ams.rpki-client.org