Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/Jl5d_XNhXXmQlubNNvQMQE0l3Cg.roa
File: Jl5d_XNhXXmQlubNNvQMQE0l3Cg.roa (raw, json)
Hash identifier: kaUuQWNcGfHIJ/sOAZC/K+2hWj08/2yP4B8OHZVYq40=
Subject key identifier: 26:5E:5D:FD:73:61:5D:79:90:96:E6:CD:36:F4:0C:40:4D:25:DC:28
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0187DCD5F9A55E3D2098F1D288AABB00A071
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/Jl5d_XNhXXmQlubNNvQMQE0l3Cg.roa
Signing time: Tue 02 May 2023 14:20:23 +0000
ROA not before: Tue 02 May 2023 14:20:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 92.114.40.0/22 maxlen: 24
31.186.176.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 May 2023 07:18:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:d5:f9:a5:5e:3d:20:98:f1:d2:88:aa:bb:00:a0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: May 2 14:20:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=265e5dfd73615d799096e6cd36f40c404d25dc28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:5e:14:c3:ff:19:19:79:a3:35:e6:d1:74:
02:b9:79:65:b9:86:75:50:d5:24:f4:d0:db:8d:93:
70:41:ab:c6:dd:32:45:e5:ce:ca:f7:6d:08:20:8d:
a8:17:79:76:0e:fc:d4:8a:49:38:93:be:36:18:8b:
06:8a:cf:bc:83:ea:4c:46:94:63:ad:3f:83:7e:56:
05:75:20:a3:a4:88:1a:9b:48:46:7a:76:f4:12:64:
72:a2:30:9c:72:bd:b2:48:68:ef:f3:36:d6:8d:4d:
14:eb:2a:2c:fd:3d:fd:3d:af:87:53:42:27:b7:6a:
9d:ac:2d:46:97:a2:bd:b4:9f:73:21:b9:20:ad:8b:
49:47:a8:8b:d7:5f:5b:e0:03:bd:12:e5:f5:c1:74:
69:f9:2b:02:11:37:28:27:b2:e7:08:67:61:82:32:
c0:75:0b:40:76:6b:ba:0f:79:c6:69:cb:5d:fc:88:
45:bd:cc:ec:52:cd:6a:44:f9:cf:9d:7a:de:ae:1e:
49:2c:dd:64:f6:7c:b2:d8:8e:07:6b:41:90:a4:4e:
94:7c:12:88:32:6d:d3:c5:5e:fe:17:e7:52:88:ab:
9e:cf:46:2d:16:fa:f3:30:d1:c8:21:46:2d:61:44:
99:95:60:e8:6d:d0:33:5e:d2:67:ba:57:ce:50:ce:
8d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5E:5D:FD:73:61:5D:79:90:96:E6:CD:36:F4:0C:40:4D:25:DC:28
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/Jl5d_XNhXXmQlubNNvQMQE0l3Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.176.0/22
92.114.40.0/22
Signature Algorithm: sha256WithRSAEncryption
98:7a:51:22:cc:2f:f7:e3:5a:1a:65:39:d8:a7:ae:81:20:29:
51:d9:5f:b1:9c:38:66:20:66:39:61:a7:3f:fe:12:c2:36:3b:
68:54:bc:0a:6e:12:21:e7:84:a4:ff:5d:6f:37:2a:7e:c5:63:
a5:dd:c8:63:52:da:51:73:c6:b5:40:80:17:2f:8e:dc:56:fe:
f6:09:f1:e1:04:4e:3d:d3:f9:cc:02:c0:4b:b1:70:8a:9c:6a:
65:ab:84:e0:ed:0f:d5:b2:b7:d4:54:af:49:1a:f0:5d:42:6c:
0d:6f:a3:d4:65:e6:2f:d8:79:67:61:44:39:ff:1b:83:7e:a1:
ac:cd:89:61:20:a1:16:90:f4:52:80:16:a6:ed:92:9f:7b:33:
75:3e:86:92:cc:47:04:c3:bb:5b:4a:a3:de:7b:63:ff:b6:82:
eb:5b:fe:b7:80:4c:1f:26:d5:1d:c4:37:70:9e:0c:6b:46:ce:
82:16:4e:69:7b:b9:ec:a7:08:7f:22:49:1d:90:4f:6f:a0:fe:
b9:7b:f3:02:8b:e0:9d:a3:05:f0:93:3a:a6:e6:4c:bc:37:98:
b7:d4:89:d9:50:93:76:01:f4:42:b2:f3:80:8b:14:7d:17:89:
b1:43:4a:f4:4d:a0:e1:2a:b8:0a:c1:3d:b4:eb:7e:c0:ce:34:
f8:b0:e9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org