Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/JYt-ToZ7zsBXrmfAQsQTWaaVg8c.roa
File: JYt-ToZ7zsBXrmfAQsQTWaaVg8c.roa (raw, json)
Hash identifier: A+ddfhTww1g19pKqLQ+0zwXN4FAQSDTmmYE1593GINA=
Subject key identifier: 25:8B:7E:4E:86:7B:CE:C0:57:AE:67:C0:42:C4:13:59:A6:95:83:C7
Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial: 018B5C9A9389B703058B845934BD7CDE5A58
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/JYt-ToZ7zsBXrmfAQsQTWaaVg8c.roa
Signing time: Mon 23 Oct 2023 12:55:15 +0000
ROA not before: Mon 23 Oct 2023 12:55:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15962
IP address blocks: 78.141.64.0/18 maxlen: 18
95.105.128.0/18 maxlen: 18
95.105.128.0/17 maxlen: 17
178.143.0.0/17 maxlen: 17
178.143.0.0/16 maxlen: 16
185.50.212.0/22 maxlen: 22
178.143.128.0/17 maxlen: 17
213.151.246.0/24 maxlen: 24
213.151.248.0/24 maxlen: 24
95.105.192.0/18 maxlen: 18
109.230.0.0/18 maxlen: 18
213.151.192.0/18 maxlen: 18
Validation: Failed, certificate revoked on Tue 24 Oct 2023 08:09:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5c:9a:93:89:b7:03:05:8b:84:59:34:bd:7c:de:5a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
Validity
Not Before: Oct 23 12:55:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=258b7e4e867bcec057ae67c042c41359a69583c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:44:8b:45:2e:4b:a7:69:f6:e9:7d:29:a8:b5:
20:d2:26:c1:ff:37:61:bf:39:53:f1:34:94:52:9c:
1f:af:33:03:33:15:10:e2:70:7b:fe:85:f1:01:1e:
c2:58:48:f4:ff:21:41:8c:5f:88:35:ec:1b:3f:53:
b3:4e:ce:18:db:ec:db:7e:c5:51:6a:3f:16:1d:03:
eb:b1:a9:c9:fc:1f:7d:21:7d:6f:b8:50:dc:91:8e:
2d:05:83:f8:73:57:56:eb:f1:3a:e4:25:cc:0c:38:
2e:8b:d5:aa:c8:1b:15:88:7d:e6:e2:5a:ca:24:33:
fd:ce:a2:58:90:b2:1a:a8:df:49:c1:1f:59:2d:40:
34:a9:8f:98:b1:ab:c5:48:9b:d3:9b:d5:65:7a:f1:
83:16:b5:8c:76:4b:2e:9c:77:01:3f:8a:ca:a7:7a:
8b:05:45:bc:4c:d4:be:f1:bd:bd:ad:70:c1:7c:be:
3e:03:b3:0a:8a:31:52:ae:6b:7e:a6:14:2c:66:75:
ab:07:53:28:c4:50:6b:3d:9e:23:36:aa:cd:12:6a:
13:ce:ae:98:89:82:1c:d5:6b:2b:31:bf:3a:e7:5d:
e0:bb:15:ad:34:3e:04:2e:80:97:b5:e8:bf:4b:cc:
ec:d5:38:b8:6e:43:08:1d:aa:25:7d:e2:48:08:08:
ff:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8B:7E:4E:86:7B:CE:C0:57:AE:67:C0:42:C4:13:59:A6:95:83:C7
X509v3 Authority Key Identifier:
keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/JYt-ToZ7zsBXrmfAQsQTWaaVg8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.141.64.0/18
95.105.128.0/17
109.230.0.0/18
178.143.0.0/16
185.50.212.0/22
213.151.192.0/18
Signature Algorithm: sha256WithRSAEncryption
6a:65:d9:e2:75:7c:8b:46:38:96:19:00:36:0b:c5:a5:40:21:
b5:2f:03:56:be:d9:94:ca:5f:1a:64:c9:be:5b:5e:55:a7:f1:
8f:e5:cd:85:35:b3:2d:36:76:21:7d:65:5e:10:0c:5d:b9:cc:
64:15:4a:37:d7:ef:9d:96:0d:37:1e:39:e6:9d:65:93:d7:96:
70:1c:fd:e5:f3:ea:e4:68:9f:d5:1a:ff:17:e6:2d:26:94:0c:
9b:74:b9:d9:05:eb:87:47:6d:21:94:a7:92:e3:7f:e2:2b:3d:
41:cf:1d:47:77:f4:ac:08:70:26:d4:d4:fe:28:d3:88:ad:6b:
81:30:72:4a:14:51:7e:ab:59:9b:75:0c:66:2a:3c:5f:70:e0:
7d:4a:ef:3d:4d:75:94:b2:5c:83:45:e1:63:3a:f9:ae:ff:0a:
0c:4b:3a:e5:44:4e:f6:22:19:39:44:b0:a4:89:27:f7:2f:c5:
f4:5a:c4:57:e7:d9:ec:90:08:4d:c8:1f:cb:38:15:63:a8:0d:
55:cc:f9:be:ad:47:5e:3b:7a:e6:cc:df:cd:43:e2:59:2a:fe:
fb:50:be:3d:39:57:8d:f6:0e:d7:8c:b3:d7:75:11:1c:79:9b:
8a:b1:d3:2a:80:14:d3:79:b3:aa:86:ac:1c:43:75:88:45:73:
d9:e8:3c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:59 2024 by rpki-client on console-ams.rpki-client.org