Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/mJ4XjndVR7YOFyaHSOw4-zD4rBM.roa
File: mJ4XjndVR7YOFyaHSOw4-zD4rBM.roa (raw, json)
Hash identifier: Y2vRA5ObgGrjPPisxFdCbJ3XCGcN9n2mHQm5TuEvNoY=
Subject key identifier: 98:9E:17:8E:77:55:47:B6:0E:17:26:87:48:EC:38:FB:30:F8:AC:13
Certificate issuer: /CN=58d2d2715f43f747bea762dce166bca4b8e965eb
Certificate serial: 018CC500350BBCEEEF33E01918BF3C721364
Authority key identifier: 58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/mJ4XjndVR7YOFyaHSOw4-zD4rBM.roa
Signing time: Mon 01 Jan 2024 12:29:34 +0000
ROA not before: Mon 01 Jan 2024 12:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8560
IP address blocks: 85.215.200.0/22 maxlen: 24
85.215.204.0/22 maxlen: 24
85.215.208.0/21 maxlen: 24
85.215.216.0/22 maxlen: 24
85.215.224.0/20 maxlen: 24
85.215.220.0/22 maxlen: 24
85.215.240.0/22 maxlen: 24
85.215.32.0/19 maxlen: 24
85.215.248.0/22 maxlen: 24
85.215.160.0/19 maxlen: 24
185.56.148.0/22 maxlen: 24
85.215.192.0/21 maxlen: 24
85.215.64.0/20 maxlen: 24
2a01:239:100::/40 maxlen: 48
2a01:239:200::/39 maxlen: 48
Validation: Failed, certificate revoked on Thu 18 Jan 2024 08:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:35:0b:bc:ee:ef:33:e0:19:18:bf:3c:72:13:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2d2715f43f747bea762dce166bca4b8e965eb
Validity
Not Before: Jan 1 12:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=989e178e775547b60e17268748ec38fb30f8ac13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:f2:b6:af:be:e3:9d:f2:a9:93:1e:fc:ce:
d0:78:ff:3f:1f:14:22:b8:d6:51:78:3a:b2:f4:cb:
82:3f:3b:d3:9c:20:0c:1c:07:5e:9a:48:3e:9b:5b:
4a:4b:b5:d1:15:19:23:35:6d:c0:4f:2c:f9:1c:e8:
1b:d3:26:f3:7a:d9:28:55:ea:be:be:f7:1b:6f:45:
ba:66:c9:7e:d6:33:d9:df:4f:1b:ab:8c:64:b6:2a:
41:05:74:58:8f:f9:2f:db:36:3d:3a:fa:c2:4b:32:
bd:13:62:19:88:d6:bc:69:ce:d6:55:73:db:99:96:
7e:bc:6e:79:0c:15:46:ad:77:31:20:c1:7c:40:9c:
d6:5e:db:a5:cf:3d:11:5e:d2:b3:02:05:2c:eb:b6:
17:8b:9e:b8:f6:41:c5:b9:23:9e:a4:ca:b0:21:c4:
f0:fb:c3:7d:fa:79:96:84:96:8e:f8:bd:cf:78:d0:
69:a0:72:0e:2d:7b:98:80:da:77:61:5d:0a:77:02:
e6:b6:91:18:aa:97:73:c7:a3:3e:de:df:e5:46:65:
d4:75:47:c6:d7:4b:2b:10:03:48:8b:12:05:e1:a4:
09:2a:27:32:8c:fd:f0:43:04:01:31:75:99:32:44:
7a:aa:48:99:28:66:ab:7a:c7:47:99:2b:74:86:38:
8e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9E:17:8E:77:55:47:B6:0E:17:26:87:48:EC:38:FB:30:F8:AC:13
X509v3 Authority Key Identifier:
keyid:58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/mJ4XjndVR7YOFyaHSOw4-zD4rBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.215.32.0-85.215.79.255
85.215.160.0-85.215.243.255
85.215.248.0/22
185.56.148.0/22
IPv6:
2a01:239:100::-2a01:239:3ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
32:4f:91:4d:f1:0a:e5:98:1c:77:9b:9b:04:72:8d:c4:98:74:
54:3a:c3:b4:47:33:c0:6e:b2:7e:12:23:5e:9a:83:da:1d:8e:
1a:ba:e0:99:ff:c1:78:0a:b3:a9:70:81:a9:12:a5:99:0d:88:
6f:52:8a:df:e8:27:ee:df:9d:c0:a1:4e:9d:84:41:7b:d4:72:
16:7a:1a:51:11:84:d9:42:e9:56:95:85:ac:f8:84:e7:5a:9a:
d2:de:da:0f:2c:6f:83:12:97:40:03:bd:75:85:a5:32:29:7a:
4f:aa:5f:6d:cd:15:8c:35:e6:2f:68:78:d7:bb:2c:db:ff:d5:
c3:79:b0:e9:28:49:53:9d:ae:0e:8e:a4:fb:b2:27:f4:26:4e:
41:01:a6:57:f0:f0:1f:d1:8e:a8:44:56:32:46:49:b8:2b:ce:
0c:d5:f8:00:a8:38:8d:99:7c:2b:fc:b1:d9:fb:b6:91:73:73:
35:2a:28:03:8e:69:40:b0:27:87:86:fe:70:69:c4:8c:39:e3:
d2:be:2e:ed:df:b4:5f:a1:8b:f8:0c:a1:be:98:e3:5f:b0:20:
54:5d:d5:f1:84:fc:15:fc:89:31:18:9b:51:0a:77:68:00:da:
8a:c5:18:fd:98:85:b6:88:03:1f:18:68:58:f1:fb:e8:cc:76:
af:34:81:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:37 2024 by rpki-client on console-ams.rpki-client.org