Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/JxK14tP8CK7s0mQ4AYq4jhoqmjk.roa
File: JxK14tP8CK7s0mQ4AYq4jhoqmjk.roa (raw, json)
Hash identifier: On+YOpkXPCW1liPobZJ3WMAmj4QqG3nwhqO2hYvGd70=
Subject key identifier: 27:12:B5:E2:D3:FC:08:AE:EC:D2:64:38:01:8A:B8:8E:1A:2A:9A:39
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 01856FCB85FF4269BA4A2B78832A5977ABC3
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/JxK14tP8CK7s0mQ4AYq4jhoqmjk.roa
Signing time: Mon 02 Jan 2023 00:04:47 +0000
ROA not before: Mon 02 Jan 2023 00:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29582
IP address blocks: 95.158.145.0/24 maxlen: 24
80.95.19.0/24 maxlen: 24
93.152.240.0/24 maxlen: 24
93.152.246.0/24 maxlen: 24
93.152.247.0/24 maxlen: 24
2a00:e200:103::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:85:ff:42:69:ba:4a:2b:78:83:2a:59:77:ab:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 2 00:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2712b5e2d3fc08aeecd26438018ab88e1a2a9a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:b9:7e:f5:69:ad:5e:43:b7:c0:85:2e:14:
ad:dd:15:66:cc:9a:d0:42:e7:9b:5f:74:78:5d:b0:
74:32:fd:ea:af:b5:51:61:57:cd:58:5f:a5:14:d3:
86:7d:0d:cf:32:06:2a:23:8e:ed:bd:89:64:5c:dd:
27:79:ad:9b:0d:6e:ec:6f:0c:24:e9:2d:d1:04:36:
48:db:d3:8f:ca:dd:14:10:3b:41:a9:c0:a8:e0:6b:
ae:78:08:f4:1a:ad:7d:b1:c1:6b:6c:37:03:24:2d:
99:b5:97:a3:a5:dc:26:5e:70:b9:04:d6:64:b9:b4:
b4:45:f4:26:31:37:16:0e:1a:ec:a4:21:7f:b5:71:
47:08:a3:02:03:f2:1a:b7:78:c6:8c:f0:ce:89:2e:
69:4b:ee:89:d6:14:fd:08:18:ce:4f:62:82:7d:92:
f5:05:9a:f7:22:c7:38:1e:8b:ef:e9:33:c5:32:db:
8e:87:65:c3:a6:97:6b:c4:87:a0:ae:9d:4b:a6:10:
6a:c2:c7:a9:ef:56:36:eb:33:81:27:09:32:3b:c7:
4a:05:ba:7f:4a:01:d3:98:4c:69:16:f8:ed:85:7e:
7e:ff:af:2e:75:45:9f:76:59:33:5b:fc:11:4f:aa:
0d:93:d9:da:18:d0:0e:86:0d:45:b2:a4:31:30:54:
b8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:12:B5:E2:D3:FC:08:AE:EC:D2:64:38:01:8A:B8:8E:1A:2A:9A:39
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/JxK14tP8CK7s0mQ4AYq4jhoqmjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.95.19.0/24
93.152.240.0/24
93.152.246.0/23
95.158.145.0/24
IPv6:
2a00:e200:103::/48
Signature Algorithm: sha256WithRSAEncryption
a3:20:c7:3e:bd:f5:ee:d9:f1:ad:3e:4f:fc:9f:3c:5b:e9:4b:
6d:13:19:a5:7c:b7:ec:19:d7:88:33:54:e0:04:d4:f9:81:65:
e2:d4:be:a4:b2:c5:af:6d:d4:a3:24:48:7e:6c:9f:ee:b2:a5:
7f:8d:49:69:7e:50:c3:2a:6d:8e:8f:a3:9b:f1:87:a7:90:f1:
c1:e0:f9:87:1d:e7:ed:fe:95:ae:e7:65:6a:68:ce:5e:26:b4:
94:8d:d4:a6:78:81:b5:e8:96:55:9d:a1:26:c1:00:e1:26:d6:
46:ba:76:c4:c8:14:5b:77:bb:4a:5a:20:c6:1a:0d:92:1c:0f:
ce:d3:e5:26:14:47:db:85:b1:26:f9:49:2b:7b:47:9f:76:4b:
07:f1:31:2c:cb:29:24:b7:cf:2f:3e:0a:4e:7b:92:f4:fb:26:
b2:fb:98:b0:52:0a:9f:90:e1:5b:dc:f2:6e:22:b6:e2:32:b5:
d0:76:6c:b1:0d:23:f2:b4:cd:24:19:45:86:90:48:5f:51:7a:
2d:e0:ec:af:47:93:e5:34:a0:49:cc:63:f5:0b:93:52:90:26:
01:f3:77:7f:b1:5c:60:aa:9c:36:12:e1:08:c0:78:21:15:b1:
63:48:b7:c5:87:97:e6:fc:a0:65:3f:d4:95:d3:0a:24:05:98:
25:54:b3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:24 2024 by rpki-client on console-fra.rpki-client.org