Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/Jv9HRixiq9uLD4irEDpO3pt8wr8.roa
File: Jv9HRixiq9uLD4irEDpO3pt8wr8.roa (raw, json)
Hash identifier: U7xROwec+QF/MHQhH33xrPWiso272jz4FDkvQW7GBOQ=
Subject key identifier: 26:FF:47:46:2C:62:AB:DB:8B:0F:88:AB:10:3A:4E:DE:9B:7C:C2:BF
Certificate issuer: /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial: 018E10A7E17B7CBB9A8F2B92DB139EF1E3A4
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/Jv9HRixiq9uLD4irEDpO3pt8wr8.roa
Signing time: Tue 05 Mar 2024 22:07:01 +0000
ROA not before: Tue 05 Mar 2024 22:07:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25135
IP address blocks: 85.255.224.0/20 maxlen: 20
85.255.232.0/23 maxlen: 23
85.255.234.0/23 maxlen: 23
85.255.236.0/23 maxlen: 23
88.82.0.0/19 maxlen: 19
148.252.128.0/19 maxlen: 19
148.252.128.0/23 maxlen: 23
148.252.132.0/23 maxlen: 23
148.252.136.0/22 maxlen: 22
148.252.140.0/23 maxlen: 23
148.252.144.0/23 maxlen: 23
148.252.146.0/23 maxlen: 23
148.252.148.0/23 maxlen: 23
148.252.150.0/24 maxlen: 24
148.252.152.0/24 maxlen: 24
148.252.156.0/23 maxlen: 23
148.252.158.0/23 maxlen: 23
148.252.160.0/19 maxlen: 19
194.62.232.0/24 maxlen: 24
194.62.238.0/24 maxlen: 24
212.183.128.0/19 maxlen: 19
212.183.128.0/20 maxlen: 20
212.183.152.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 15 May 2024 11:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:10:a7:e1:7b:7c:bb:9a:8f:2b:92:db:13:9e:f1:e3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Validity
Not Before: Mar 5 22:07:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26ff47462c62abdb8b0f88ab103a4ede9b7cc2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bd:ea:9c:3e:57:41:68:e7:63:28:79:2d:fd:
d5:2b:ec:1c:f3:d8:ec:d3:59:ef:f5:72:cb:af:42:
d5:2c:b1:f1:9d:5e:47:d6:59:9c:30:71:f3:9a:27:
c7:70:4d:a4:62:a8:e8:74:fc:f7:2e:12:c6:7b:ed:
ea:66:d8:6c:4d:51:f0:44:90:c3:03:48:23:9f:24:
35:36:5a:54:ee:2f:1f:f9:a4:3c:54:a8:e4:18:b0:
cd:74:25:eb:05:db:8b:2b:a6:c0:3e:76:ac:00:6c:
ed:88:c5:a0:fa:b7:7b:18:f6:64:90:64:b5:31:ff:
de:dd:65:a3:f6:cb:51:1c:44:35:7b:51:11:f4:dd:
2c:8d:db:70:3c:fa:94:2d:03:66:63:53:72:5f:74:
b4:ed:6f:38:10:1e:64:f3:b0:e7:d4:34:b0:e0:e1:
c7:da:ed:b8:15:d7:24:dc:af:e3:ec:d6:3a:03:14:
16:18:94:58:70:1d:8f:a3:58:b3:a4:e9:89:69:b1:
81:b6:57:6e:ad:d5:c0:4a:ca:69:e3:79:04:f2:a7:
09:fc:83:72:99:85:07:33:bc:07:0c:ff:51:95:99:
c8:a9:8f:5c:f5:e2:1b:fd:ee:5c:56:a5:bf:f4:f7:
3b:7e:cc:70:11:cf:1f:58:92:09:bb:c7:43:52:25:
ed:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FF:47:46:2C:62:AB:DB:8B:0F:88:AB:10:3A:4E:DE:9B:7C:C2:BF
X509v3 Authority Key Identifier:
keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/Jv9HRixiq9uLD4irEDpO3pt8wr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.224.0/20
88.82.0.0/19
148.252.128.0/18
194.62.232.0/24
194.62.238.0/24
212.183.128.0/19
Signature Algorithm: sha256WithRSAEncryption
40:d2:17:e9:35:cf:51:4e:ac:ce:cb:a4:a4:f1:7f:b2:57:32:
ca:b5:93:26:be:8c:2c:c6:d0:c3:cc:ac:a7:08:e1:3f:dd:1f:
27:34:13:74:8a:fb:e2:d4:d8:95:da:0b:f7:95:06:88:40:4c:
bc:f7:a2:64:f3:f0:a0:11:2d:ab:83:2c:e1:d7:ce:16:60:1c:
29:c1:e1:6d:88:aa:52:79:79:f6:56:8b:da:ee:12:06:e0:cb:
c6:b8:03:c9:d8:95:35:e0:cc:6b:f6:62:9e:b0:3e:a3:fe:bf:
b5:1a:e6:ef:ba:69:15:7f:78:66:52:8a:a4:d6:64:a3:a3:f9:
f9:13:b6:55:a3:77:c5:7f:65:6f:7e:0f:89:e4:72:6f:fa:5a:
b0:d1:36:41:7a:92:66:25:ec:20:44:27:1d:53:98:ed:6e:70:
db:d6:31:fe:ee:cd:e0:07:d8:6c:1a:12:1b:f4:66:10:4a:26:
ef:bc:ab:07:71:e7:a2:be:af:dd:e0:46:11:86:6a:c2:bd:c4:
28:ab:a0:a9:d7:89:2b:4c:c3:f3:c6:85:c1:e3:5e:02:be:1b:
47:b3:06:64:d3:0b:60:4d:a3:1f:f7:bb:ef:4b:e3:a7:8b:d4:
e8:0e:03:e5:b5:23:91:28:17:1f:b3:a4:ee:47:57:a1:c1:04:
72:e0:c7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:01:20 2024 by rpki-client on console-ams.rpki-client.org