Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/JxEIGJ-2ljcmILWK2YvF2901Pdg.roa
File: JxEIGJ-2ljcmILWK2YvF2901Pdg.roa (raw, json)
Hash identifier: DigYP7l0sLXXykx1HNDLMa8rDiYUyc8SgugTCprivcM=
Subject key identifier: 27:11:08:18:9F:B6:96:37:26:20:B5:8A:D9:8B:C5:DB:DD:35:3D:D8
Certificate issuer: /CN=fbcb947651260d9d8b02f31d5bc7f1d5d0b01780
Certificate serial: 018731B44144DD0696D9EB9B7F1903A11B14
Authority key identifier: FB:CB:94:76:51:26:0D:9D:8B:02:F3:1D:5B:C7:F1:D5:D0:B0:17:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/JxEIGJ-2ljcmILWK2YvF2901Pdg.roa
Signing time: Thu 30 Mar 2023 08:48:29 +0000
ROA not before: Thu 30 Mar 2023 08:48:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49784
IP address blocks: 185.28.224.0/22 maxlen: 24
157.97.48.0/20 maxlen: 24
46.244.48.0/20 maxlen: 24
213.109.112.0/20 maxlen: 24
91.239.174.0/23 maxlen: 24
91.236.202.0/23 maxlen: 24
2a04:3640::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:31:b4:41:44:dd:06:96:d9:eb:9b:7f:19:03:a1:1b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcb947651260d9d8b02f31d5bc7f1d5d0b01780
Validity
Not Before: Mar 30 08:48:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=271108189fb696372620b58ad98bc5dbdd353dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:22:a0:7d:0b:ee:dc:29:3b:ed:0c:f9:1d:88:
6d:86:30:6e:8c:27:b0:4a:e1:83:96:ec:59:c8:bf:
20:6a:f7:7d:a2:ba:23:e3:67:27:e9:e7:89:b2:ae:
ea:89:08:ff:52:f0:5f:1b:20:4f:4f:2a:b9:8c:53:
02:b3:8c:5c:51:7c:88:ca:55:f9:15:f5:8a:bd:06:
d0:e7:83:7b:89:9a:94:d5:62:14:16:50:6a:91:77:
e5:3c:fa:4a:12:75:71:fd:8f:97:24:74:28:c4:88:
f0:be:7b:37:60:06:d8:8f:78:26:36:3c:9a:87:4d:
7c:12:81:fb:83:a4:72:7e:94:51:07:24:fe:20:18:
51:81:25:84:ce:7d:da:1c:d2:6e:37:46:3c:52:a8:
25:50:5f:ca:e1:59:d4:3c:d2:04:45:d9:e4:fa:e7:
2b:e9:71:5f:85:fe:66:fc:4c:fb:98:1c:3a:c7:7f:
26:ba:88:fa:d7:a9:ee:49:49:d7:07:bd:44:93:a1:
81:9a:c1:33:ed:7b:08:dc:35:95:21:58:ca:9a:f4:
1d:c4:79:09:eb:0c:3c:a1:20:e9:c1:cd:09:92:47:
0b:11:55:2a:1a:1f:80:1b:7b:c0:80:cd:b0:da:6e:
e4:35:d2:8c:74:ec:21:5a:4f:8e:fd:ca:a6:60:c8:
45:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:11:08:18:9F:B6:96:37:26:20:B5:8A:D9:8B:C5:DB:DD:35:3D:D8
X509v3 Authority Key Identifier:
keyid:FB:CB:94:76:51:26:0D:9D:8B:02:F3:1D:5B:C7:F1:D5:D0:B0:17:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/JxEIGJ-2ljcmILWK2YvF2901Pdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.48.0/20
91.236.202.0/23
91.239.174.0/23
157.97.48.0/20
185.28.224.0/22
213.109.112.0/20
IPv6:
2a04:3640::/29
Signature Algorithm: sha256WithRSAEncryption
33:fd:50:46:88:39:77:6d:d5:74:86:4a:56:bf:80:9f:20:55:
8c:d7:2b:31:37:8b:1a:39:eb:98:28:e6:96:80:d5:ef:22:a8:
9b:6b:bd:76:50:7e:14:4f:ff:54:97:af:7c:69:c7:f4:29:2b:
c9:b5:4d:39:ae:f6:11:6e:b1:8b:ae:83:fc:e7:be:67:d5:10:
4e:71:a9:ca:17:0c:2b:a4:f1:e2:78:f0:41:33:7b:25:6b:05:
c9:de:a0:61:c0:c6:95:fd:80:d4:65:6e:d4:89:5b:51:5e:6f:
72:7b:aa:60:05:7e:9d:f8:0a:3a:4e:22:c9:5a:87:2e:2c:a5:
34:fc:e7:e5:9b:51:2d:9a:d5:59:88:be:df:51:90:65:6a:60:
f6:17:c1:92:41:0f:37:ab:26:b9:5a:16:c1:d8:55:c8:a5:72:
32:ea:b1:28:42:59:89:a2:e2:cd:d2:cf:b1:09:2d:60:f4:ff:
10:50:e5:05:d5:27:f5:23:ac:76:45:c7:fb:c1:0b:ee:44:86:
b0:60:5c:ba:55:0a:9c:ba:b1:3b:3c:ed:35:b0:7e:ba:98:85:
c4:ed:c1:96:a7:e0:e3:f2:eb:1a:35:a0:cc:7d:17:ec:79:e3:
5a:87:00:d6:ed:3f:91:b9:9c:de:60:db:50:5f:b7:8c:ef:7b:
e0:5c:f9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:07 2024 by rpki-client on console-fra.rpki-client.org