Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/jpdZbClABm5Dkw88wENCLMTtS5w.roa
File: jpdZbClABm5Dkw88wENCLMTtS5w.roa (raw, json)
Hash identifier: KfWX9MFyTWHwlvgI+Fiofu1vrOKsi6denme4U+jrgWk=
Subject key identifier: 8E:97:59:6C:29:40:06:6E:43:93:0F:3C:C0:43:42:2C:C4:ED:4B:9C
Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial: 018B42A5892958C463CB1049241C096F63D0
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/jpdZbClABm5Dkw88wENCLMTtS5w.roa
Signing time: Wed 18 Oct 2023 11:57:06 +0000
ROA not before: Wed 18 Oct 2023 11:57:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15962
IP address blocks: 178.143.0.0/17 maxlen: 17
178.143.0.0/16 maxlen: 16
185.50.212.0/22 maxlen: 22
178.143.128.0/17 maxlen: 17
213.151.246.0/24 maxlen: 24
213.151.248.0/24 maxlen: 24
213.151.192.0/18 maxlen: 18
Validation: Failed, certificate revoked on Fri 20 Oct 2023 11:34:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:42:a5:89:29:58:c4:63:cb:10:49:24:1c:09:6f:63:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
Validity
Not Before: Oct 18 11:57:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e97596c2940066e43930f3cc043422cc4ed4b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3b:f9:8f:6e:7e:6c:c1:30:d9:6c:10:4a:01:
92:42:ee:8f:37:d6:5b:82:dc:e7:0a:aa:0e:9e:af:
5d:56:04:37:93:50:71:69:4e:d6:f1:a6:1f:94:ec:
3f:68:82:c1:08:dd:01:3d:79:dc:6c:9c:b5:e9:14:
1e:0b:ad:33:15:ed:7a:99:c9:03:30:eb:a6:55:f8:
a0:0c:59:a4:44:b3:30:cc:80:d1:98:75:c2:b3:b8:
87:36:a1:b3:91:49:95:27:e8:01:d3:99:bc:94:67:
f9:f3:6a:01:79:bb:76:fc:0c:91:8f:dc:67:6e:5a:
99:40:2d:15:6a:d4:bd:e0:14:9a:c4:2e:d6:53:b6:
55:92:b0:f5:dc:f4:f2:ad:0c:14:e3:2c:94:95:0b:
f8:de:85:95:a3:51:fb:a6:2e:28:e9:e0:28:10:31:
aa:6d:44:09:cc:d4:60:ee:78:25:c6:2e:bc:cc:73:
cc:23:44:4f:dc:6b:7c:37:2f:d6:74:26:6e:52:f1:
5c:ba:81:4f:36:f8:1a:a5:7e:33:f6:8d:8e:a9:59:
ed:01:50:b6:53:ba:6a:98:ee:61:0f:36:45:69:34:
a6:53:8e:fa:5b:ee:99:f0:d2:cb:40:43:ec:aa:56:
36:44:46:e6:32:1e:cd:f5:b5:26:07:0b:57:95:38:
c0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:97:59:6C:29:40:06:6E:43:93:0F:3C:C0:43:42:2C:C4:ED:4B:9C
X509v3 Authority Key Identifier:
keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/jpdZbClABm5Dkw88wENCLMTtS5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.143.0.0/16
185.50.212.0/22
213.151.192.0/18
Signature Algorithm: sha256WithRSAEncryption
73:2f:f0:c9:cf:24:99:e8:b9:9b:7a:8a:2d:92:8b:d1:98:6c:
e0:3a:e8:31:25:b3:ae:84:c3:f7:d6:cb:52:6a:68:79:35:1b:
a1:ea:dd:fe:b9:2c:36:67:3a:e3:25:5a:9e:e4:30:67:ad:de:
c3:fd:16:ff:a6:fb:15:be:c4:c4:2b:8d:d5:af:91:be:74:b9:
7c:b2:0a:42:50:df:f9:d9:47:70:7c:e5:48:6d:9b:d4:02:35:
a3:4d:c2:c4:40:d2:90:8c:33:a7:78:c3:67:a6:92:bf:ec:1c:
9e:4a:99:20:6b:90:d3:d8:23:77:5b:c2:93:37:b3:9b:c1:14:
c2:36:b3:0e:bb:68:18:18:32:cc:58:e9:cf:74:e7:f6:ce:9b:
09:0e:74:ae:2e:cf:e5:6b:a0:ae:7a:52:b1:c2:86:d8:1e:1f:
87:3d:47:29:fb:39:a9:e6:69:00:9b:9d:10:ea:9f:ab:34:bc:
1a:ff:64:55:43:d0:ea:4c:c9:80:01:bb:d3:a6:ad:2c:e3:ed:
4a:d1:9f:a9:79:2b:5c:96:ed:95:19:34:af:8e:1c:09:40:0e:
a5:0b:e2:e5:bd:6c:5a:90:d9:dd:5a:bd:de:d2:ca:80:c5:69:
49:e2:11:ea:a2:b4:7d:65:51:1a:d6:0f:58:b9:e0:ed:d9:70:
f7:ec:cf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:26 2024 by rpki-client on console-fra.rpki-client.org