Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/JY2mue3NOVD-2uo6-f80LMZoskc.roa
File: JY2mue3NOVD-2uo6-f80LMZoskc.roa (raw, json)
Hash identifier: aE05rGv5n625bplwSiO5AkAbP3QjbrHvM2UWhrHA82A=
Subject key identifier: 25:8D:A6:B9:ED:CD:39:50:FE:DA:EA:3A:F9:FF:34:2C:C6:68:B2:47
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018DAC7CD52AAB0BD501C62E867C16A4E533
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/JY2mue3NOVD-2uo6-f80LMZoskc.roa
Signing time: Thu 15 Feb 2024 11:17:58 +0000
ROA not before: Thu 15 Feb 2024 11:17:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 5.102.96.0/22 maxlen: 22
149.126.88.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 24 Feb 2024 08:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ac:7c:d5:2a:ab:0b:d5:01:c6:2e:86:7c:16:a4:e5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Feb 15 11:17:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=258da6b9edcd3950fedaea3af9ff342cc668b247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:63:91:60:c5:a2:55:25:72:f1:a5:2c:c0:
c2:51:74:9c:17:09:ac:53:4d:de:d7:da:bd:02:6e:
e5:bd:7f:e5:6f:cd:14:7d:3d:8a:d4:54:c5:db:5b:
8d:5e:fe:64:a9:0c:5b:00:ce:8a:5d:ad:e5:3f:59:
5f:a5:d8:24:47:b5:89:41:19:60:fd:10:47:f0:d3:
20:1f:29:0c:78:18:2e:c1:d5:d4:6f:82:b5:bf:7b:
30:e3:20:6a:1d:a5:9f:a0:04:15:0c:b4:68:7d:3d:
e5:4e:09:14:d7:f9:ae:cc:56:6d:d3:0a:5d:8b:32:
34:cb:27:45:ed:b1:0a:e9:75:fd:69:e9:b0:69:89:
22:be:17:de:33:68:f0:ba:8a:7d:4f:dd:68:ad:ae:
ec:9c:d1:7c:7e:10:87:f1:53:0d:bc:3b:c0:d1:a3:
6d:1f:2b:b5:c6:02:86:9b:91:2d:56:5b:dd:5a:64:
ec:ed:42:a2:d7:c5:8d:ca:d3:22:6e:1b:d8:b4:88:
2c:94:60:9d:84:53:7e:f3:08:d0:e9:a5:9d:b9:55:
7b:27:a2:ff:95:8d:54:1c:b9:15:7e:26:95:fd:21:
99:4f:64:35:25:a8:1b:21:e0:b0:7e:a5:e3:3c:5f:
89:10:6c:4d:14:e9:ed:cc:41:8a:21:2f:b9:5c:c8:
23:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8D:A6:B9:ED:CD:39:50:FE:DA:EA:3A:F9:FF:34:2C:C6:68:B2:47
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/JY2mue3NOVD-2uo6-f80LMZoskc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.96.0/22
149.126.88.0/22
Signature Algorithm: sha256WithRSAEncryption
99:8c:45:84:35:b2:c5:5d:c2:1c:cd:81:8e:72:a9:fd:92:a1:
77:61:e4:13:75:25:3c:3a:c9:bf:83:3f:3a:2a:80:ef:17:13:
8c:f7:8e:a3:0a:4d:1e:e0:ae:5a:5b:48:8a:22:51:e3:1d:37:
65:5b:43:25:c2:7f:5c:d5:6b:bf:39:e0:2d:90:24:79:15:ac:
87:40:68:60:82:75:55:89:03:fc:d0:19:01:81:3a:a4:9e:1f:
4d:b0:6e:70:43:3d:a1:fa:4c:32:f0:38:d1:20:4c:86:10:a2:
1a:f7:53:7e:07:55:b7:f7:d2:1a:ab:b8:cb:f2:67:53:fb:5b:
ff:51:c9:6a:86:e6:28:b7:8d:94:c1:7e:d9:05:e4:9a:61:ab:
c4:2b:94:d7:f8:29:a4:5d:b4:53:37:ee:13:99:45:c5:64:eb:
0f:ee:61:fd:8e:84:cb:70:0d:d3:b2:aa:42:52:23:46:54:e6:
12:33:31:79:cd:b8:3b:0d:25:a7:ba:13:83:be:45:65:5c:e9:
f6:48:bb:69:c4:c9:c9:ab:af:03:6a:68:7b:af:13:ac:d4:5d:
5d:65:06:45:71:da:a9:e4:68:2b:fb:92:77:96:ef:ab:f4:63:
5d:3d:a3:38:61:0e:b1:3f:22:ad:c9:ff:f1:78:dd:86:ae:1c:
6b:e9:21:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org