Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/sjyuofXBScm-k1bll083spAJFsw.roa
File: sjyuofXBScm-k1bll083spAJFsw.roa (raw, json)
Hash identifier: e4Dg9kS3Oq5aFn4FOvUKPZSWraDtXxeygyE6GEL7fqI=
Subject key identifier: B2:3C:AE:A1:F5:C1:49:C9:BE:93:56:E5:97:4F:37:B2:90:09:16:CC
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 0191E0D6094193D86E81BFF72F6288482443
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/sjyuofXBScm-k1bll083spAJFsw.roa
Signing time: Wed 11 Sep 2024 11:26:48 +0000
ROA not before: Wed 11 Sep 2024 11:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 91.184.240.0/22 maxlen: 24
185.197.74.0/24 maxlen: 24
185.230.143.0/24 maxlen: 24
193.188.20.0/24 maxlen: 24
193.188.21.0/24 maxlen: 24
193.188.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Oct 2024 11:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e0:d6:09:41:93:d8:6e:81:bf:f7:2f:62:88:48:24:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Sep 11 11:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b23caea1f5c149c9be9356e5974f37b2900916cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:20:bd:85:ef:57:3e:af:74:b8:36:fe:ac:8d:
19:1d:6c:75:17:fd:70:6a:dd:be:82:33:43:f1:3f:
28:b0:3d:a5:0b:5a:0e:19:f5:9d:78:a3:f3:16:15:
dd:8e:93:90:c3:85:bf:1c:e3:10:fe:8b:5c:a7:ea:
8b:15:50:d6:74:cb:04:4f:0e:84:56:2c:e9:bf:f6:
be:a8:a5:03:2e:82:9f:0b:b9:26:4f:7d:ab:60:5b:
ef:82:c4:14:98:c9:f9:e7:2b:7a:23:da:5c:ee:c9:
b4:32:79:7f:d8:8b:bf:b7:c6:9b:d1:1a:8c:84:2a:
71:6c:1b:f0:80:2e:4d:26:07:a1:8e:ef:85:ec:f9:
27:3a:5e:de:32:14:ac:88:b6:f2:b3:0e:82:25:99:
41:18:de:0c:7e:17:3e:ca:81:37:2d:39:14:b3:44:
c8:2f:4d:f7:a3:77:78:d5:0b:92:62:02:c4:8e:af:
e1:d9:5a:6b:4f:23:cf:90:58:cc:dd:31:74:e5:4f:
cc:96:c8:51:33:16:bf:41:ad:f5:8b:45:bb:c8:3a:
23:66:e4:2e:2a:93:a4:c5:18:f1:ec:97:d6:04:08:
33:c2:bc:ff:71:6a:6a:f2:49:dc:38:e4:39:3a:43:
1b:5c:77:9c:74:55:56:f2:f7:c1:58:aa:dd:24:4f:
59:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3C:AE:A1:F5:C1:49:C9:BE:93:56:E5:97:4F:37:B2:90:09:16:CC
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/sjyuofXBScm-k1bll083spAJFsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.184.240.0/22
185.197.74.0/24
185.230.143.0/24
193.188.20.0-193.188.22.255
Signature Algorithm: sha256WithRSAEncryption
6e:30:25:b4:3b:eb:1e:23:58:0f:b3:1c:d7:71:df:f0:18:43:
c7:6b:c5:0f:bf:1f:76:70:57:c3:42:0c:b6:9b:e2:66:0e:41:
f5:9c:14:6f:13:b4:6e:b9:60:d1:66:6d:4d:b6:1a:94:22:92:
44:54:22:a0:4c:01:fc:65:5c:f2:1a:76:fb:08:fe:5f:94:d1:
85:49:92:ad:c4:44:4f:86:e6:6b:0c:b1:0f:89:be:98:6d:a7:
3a:12:37:1e:78:e6:12:a4:79:6c:cc:91:42:2b:c8:1c:61:c3:
1f:e8:29:61:64:f2:de:78:b7:ed:22:0e:62:d6:b9:76:ac:d2:
33:90:76:34:13:79:0e:6d:2e:74:bf:86:ef:03:94:2d:1a:e0:
ae:35:fa:97:42:d1:2b:22:e4:0e:7b:c0:ad:64:f5:6a:be:c5:
0f:38:67:3d:7e:dc:7b:b6:f6:77:4e:22:e4:29:70:dc:b5:ce:
4b:63:44:d9:e4:af:eb:c9:fb:74:fe:88:eb:19:fc:05:4b:55:
29:1b:27:31:56:f2:21:14:bb:7e:22:ff:10:e2:67:3d:ec:ce:
6f:0e:ae:68:7e:c4:09:77:d9:3c:c5:5a:30:e7:90:fb:73:b1:
7e:18:7c:83:de:9d:71:94:47:d0:90:3e:82:c5:70:b1:14:d9:
63:61:af:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:31 2024 by rpki-client on console-ams.rpki-client.org