Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/jl9qNl-hY3rV_fPm-yiVUNkU1mE.roa
File: jl9qNl-hY3rV_fPm-yiVUNkU1mE.roa (raw, json)
Hash identifier: 27llZa1aCyLJP8+QYWvlg7DYNmpGZ6iqk3W4YiQMugI=
Subject key identifier: 8E:5F:6A:36:5F:A1:63:7A:D5:FD:F3:E6:FB:28:95:50:D9:14:D6:61
Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial: 018A5FA63C17109AD91169EABF51BF48D632
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/jl9qNl-hY3rV_fPm-yiVUNkU1mE.roa
Signing time: Mon 04 Sep 2023 10:04:04 +0000
ROA not before: Mon 04 Sep 2023 10:04:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211057
IP address blocks: 46.253.88.0/23 maxlen: 23
46.253.88.0/24 maxlen: 24
46.253.89.0/24 maxlen: 24
185.71.141.0/24 maxlen: 24
185.71.140.0/24 maxlen: 24
185.71.140.0/25 maxlen: 25
185.71.140.128/25 maxlen: 25
185.71.141.0/25 maxlen: 25
185.71.141.128/25 maxlen: 25
185.71.140.0/23 maxlen: 23
185.71.140.0/22 maxlen: 22
185.71.142.0/25 maxlen: 25
185.71.142.0/24 maxlen: 24
185.71.142.128/25 maxlen: 25
185.71.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:a6:3c:17:10:9a:d9:11:69:ea:bf:51:bf:48:d6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Validity
Not Before: Sep 4 10:04:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e5f6a365fa1637ad5fdf3e6fb289550d914d661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:10:20:45:d8:f7:7d:63:fa:1e:e3:49:37:65:
22:00:ee:86:c2:76:86:19:3d:2e:e1:75:ef:6c:29:
98:23:f5:b7:87:4c:11:61:40:05:a0:49:1a:e8:6f:
f0:fa:83:af:36:a6:ab:a5:de:a6:90:5b:1c:46:84:
1e:82:f5:b1:ab:91:aa:71:f4:54:e2:f9:46:e1:d8:
cb:f3:68:91:fc:e3:aa:99:6b:b8:7c:b5:86:ee:2c:
79:5f:11:45:54:db:11:7b:c1:fb:f6:a8:2a:c2:f6:
fc:c6:38:97:c8:00:d1:71:a0:fe:9e:44:4f:20:6a:
1d:46:23:6c:80:c0:a8:58:77:5e:f5:f2:50:76:23:
74:bf:b2:7f:6d:67:90:2d:b6:86:15:6f:b2:49:2e:
48:c0:7c:0f:f4:12:7f:f3:df:57:8f:42:ac:16:d7:
d8:27:8f:92:51:24:9e:3f:ae:54:9e:4b:60:a6:48:
91:a4:6d:e7:30:30:1f:af:7d:69:b3:e3:90:d3:a1:
5b:08:94:db:6a:de:df:50:f3:68:bd:e2:53:cb:b5:
89:e6:2e:10:63:61:67:7f:e4:4f:b0:74:c9:35:86:
e3:30:89:eb:6b:96:62:a6:1e:e5:06:1f:45:a4:5c:
8b:74:a3:56:89:a1:48:76:8c:bc:64:80:05:c4:19:
15:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5F:6A:36:5F:A1:63:7A:D5:FD:F3:E6:FB:28:95:50:D9:14:D6:61
X509v3 Authority Key Identifier:
keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/jl9qNl-hY3rV_fPm-yiVUNkU1mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.88.0/23
185.71.140.0/22
Signature Algorithm: sha256WithRSAEncryption
62:4f:81:d4:aa:f4:d4:55:40:60:d0:70:cd:50:ab:15:7f:07:
5f:2d:e7:29:6c:91:e1:a0:fd:44:f2:2a:97:56:52:22:2b:76:
cf:a3:31:b9:60:fc:75:92:0e:c1:9c:ca:9f:61:5b:9a:79:db:
49:58:40:16:f6:32:53:7b:a2:c2:7e:00:c5:d8:60:e2:78:87:
a3:01:9f:0f:84:59:b9:83:5c:1d:13:19:e9:31:ba:2c:86:51:
0b:24:46:0b:67:0f:04:45:d3:49:63:59:90:ab:31:5a:01:27:
06:b5:7a:62:7a:8e:8a:cf:22:44:d7:13:16:d3:c2:62:7a:a5:
60:dd:9d:ac:6e:bd:e7:93:56:d3:a5:88:63:f3:f1:ea:7b:59:
c4:f5:de:40:d8:56:35:cf:34:c1:36:6a:47:a6:60:62:b2:cc:
02:c3:9f:44:d9:42:e0:e4:a0:c7:0b:d6:8d:1f:5a:b9:62:87:
57:cd:d3:8c:cc:a8:10:79:c0:fc:b8:a6:8c:da:3b:c3:49:eb:
80:40:5c:a1:bf:53:fa:4b:2a:2b:65:15:ab:6d:2a:57:26:ff:
64:9f:86:71:84:36:06:4f:a3:2d:5b:44:58:5a:0e:d4:67:19:
17:b3:81:98:5f:3f:56:cd:37:b6:d3:f9:ab:a2:33:8c:a0:22:
98:ea:ab:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 6 14:29:46 2023 by rpki-client on console-ams.rpki-client.org