Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/jBf9s24z0gATr_zkOOTjajAlfjQ.roa
File: jBf9s24z0gATr_zkOOTjajAlfjQ.roa (raw, json)
Hash identifier: iQYpgqvBgj/CubJmQEwwZbOEq9oFCQMLP2s8urBVGPA=
Subject key identifier: 8C:17:FD:B3:6E:33:D2:00:13:AF:FC:E4:38:E4:E3:6A:30:25:7E:34
Certificate issuer: /CN=cb20606de730456edd7335cc882cbdf4396f3460
Certificate serial: 01856D93E509F7B53095BBE822C55F1F6BEC
Authority key identifier: CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/jBf9s24z0gATr_zkOOTjajAlfjQ.roa
Signing time: Sun 01 Jan 2023 13:44:46 +0000
ROA not before: Sun 01 Jan 2023 13:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44914
IP address blocks: 78.28.0.0/19 maxlen: 19
78.28.32.0/19 maxlen: 19
78.28.32.0/21 maxlen: 21
78.28.40.0/21 maxlen: 21
188.125.128.0/20 maxlen: 20
188.125.144.0/22 maxlen: 22
188.125.148.0/22 maxlen: 22
188.125.152.0/22 maxlen: 22
188.125.157.0/24 maxlen: 24
78.28.58.0/23 maxlen: 23
78.28.56.0/23 maxlen: 23
78.28.62.0/23 maxlen: 23
78.28.60.0/22 maxlen: 22
2a02:e88:8000::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 25 Sep 2023 10:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:e5:09:f7:b5:30:95:bb:e8:22:c5:5f:1f:6b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb20606de730456edd7335cc882cbdf4396f3460
Validity
Not Before: Jan 1 13:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c17fdb36e33d20013affce438e4e36a30257e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8f:58:8b:0b:42:b3:77:21:1f:e7:78:17:d5:
ae:37:6e:da:ad:99:c2:47:a8:8c:67:e0:b1:3a:f6:
28:ea:15:aa:4a:a1:3f:ea:e8:f7:5d:97:7c:89:90:
5e:8c:1c:08:d7:e6:18:49:24:5e:f1:3b:2a:49:ed:
3b:22:a7:eb:48:7e:5f:49:8f:6e:e0:63:27:ed:5f:
4c:86:a5:62:ba:8f:ff:c5:d4:f8:b2:7c:4a:6b:4a:
ff:ef:9a:e5:01:af:2b:ea:99:08:c3:e3:8f:ed:32:
a4:c1:5d:10:bb:c8:61:b9:cf:2a:2f:7f:9a:bf:1c:
39:5c:45:5f:2a:4c:91:07:10:bd:e9:8b:6f:73:a4:
a1:9d:6f:9f:b1:8c:f6:a2:60:80:21:f5:4a:d8:ee:
d8:5a:44:05:9c:c5:27:eb:27:bd:14:8a:f0:50:41:
c9:1f:25:ea:77:33:13:a3:18:75:fb:74:20:d4:82:
90:f7:02:ca:77:6c:ba:0f:b0:75:88:bc:fc:41:11:
fb:e6:24:6a:0b:3e:79:7f:21:19:d5:c3:44:07:2c:
6f:b1:b3:44:d5:59:e5:0c:0b:35:b7:41:a9:d8:aa:
b7:5d:0d:67:5c:65:81:14:2e:42:ac:e4:02:88:5b:
22:90:fb:46:67:be:b8:fa:64:53:9a:a6:d5:de:67:
bf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:17:FD:B3:6E:33:D2:00:13:AF:FC:E4:38:E4:E3:6A:30:25:7E:34
X509v3 Authority Key Identifier:
keyid:CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/jBf9s24z0gATr_zkOOTjajAlfjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.28.0.0/18
188.125.128.0-188.125.155.255
188.125.157.0/24
IPv6:
2a02:e88:8000::/48
Signature Algorithm: sha256WithRSAEncryption
59:c1:14:e7:f7:af:00:4c:d1:a7:92:4d:c8:7e:8d:30:7e:a7:
89:b6:4e:12:1a:d8:e4:92:b8:7c:4b:1e:ae:37:30:08:d2:c6:
e7:09:ee:6a:1e:46:3c:49:f3:ce:8e:d0:b3:49:08:bf:cb:c6:
58:df:3d:07:0e:d0:11:aa:28:e3:30:5f:45:60:1d:be:30:96:
15:e2:9b:45:35:36:0d:ff:81:ed:e7:27:4c:f3:4c:a9:bd:42:
36:12:7f:a2:3d:15:b6:78:b6:02:b0:71:1a:e1:61:c3:5f:05:
61:42:06:15:55:f0:06:9b:fb:b5:cf:74:6e:b7:78:aa:19:dd:
97:cc:18:c3:b6:c4:15:b6:71:85:20:8c:36:60:6a:0b:ce:4a:
b3:b7:a6:da:55:da:c6:eb:b1:a0:69:dc:e8:de:29:1a:62:8c:
30:0e:5e:73:fc:1f:e5:1d:bd:17:c6:93:0e:84:c3:e2:4c:dc:
63:38:a7:e0:56:d4:27:7f:35:0e:a1:87:b8:52:99:5b:8b:85:
f3:15:7b:20:d1:21:9b:ee:a5:20:98:cf:37:e6:1e:9f:4d:67:
0c:45:72:08:8a:ff:42:6d:95:55:05:92:09:af:80:0c:18:82:
09:5d:a9:6d:d1:0a:d4:32:ed:37:13:b6:f9:70:fb:13:bb:84:
5d:6d:f1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-fra.rpki-client.org