Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/JiGN3UROmXaURCNiJNeFptOZ6SM.roa
File: JiGN3UROmXaURCNiJNeFptOZ6SM.roa (raw, json)
Hash identifier: TcRR2jMY4BoLjS0Clz6SkeoH8KShoQreUC3+pOX/LeE=
Subject key identifier: 26:21:8D:DD:44:4E:99:76:94:44:23:62:24:D7:85:A6:D3:99:E9:23
Certificate issuer: /CN=2b8966d0f14fd59993ca4878e774fa4779036694
Certificate serial: 018AE028B9F8A8144406E0EBC5F92EED7797
Authority key identifier: 2B:89:66:D0:F1:4F:D5:99:93:CA:48:78:E7:74:FA:47:79:03:66:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4lm0PFP1ZmTykh453T6R3kDZpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/JiGN3UROmXaURCNiJNeFptOZ6SM.roa
Signing time: Fri 29 Sep 2023 08:57:59 +0000
ROA not before: Fri 29 Sep 2023 08:57:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198682
IP address blocks: 193.176.64.0/22 maxlen: 22
109.71.136.0/21 maxlen: 21
109.205.0.0/21 maxlen: 21
185.71.148.0/22 maxlen: 22
185.230.96.0/22 maxlen: 22
185.220.72.0/22 maxlen: 22
45.88.140.0/22 maxlen: 22
2a00:1f10::/32 maxlen: 32
2a0b:f1c0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e0:28:b9:f8:a8:14:44:06:e0:eb:c5:f9:2e:ed:77:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b8966d0f14fd59993ca4878e774fa4779036694
Validity
Not Before: Sep 29 08:57:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26218ddd444e99769444236224d785a6d399e923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:06:ed:be:ff:7e:c8:d5:8e:f1:6d:a3:9f:c6:
da:55:a3:af:5f:27:c3:9c:98:81:df:44:7d:07:72:
e8:ae:0e:cd:a2:c4:65:8e:a3:ab:a2:08:07:81:60:
a2:8b:87:c2:e1:0b:09:ed:26:1a:5f:43:24:c5:e8:
d3:59:88:57:70:91:af:45:2e:36:b8:ca:ab:17:80:
52:28:62:31:2c:1a:05:7d:0e:2d:47:5b:f5:78:4b:
1e:b2:a5:2d:c6:f7:29:b0:5d:07:68:8a:ff:d4:ff:
c7:bb:85:fc:ba:78:b0:7f:c0:a6:85:c2:d7:05:4b:
da:2c:fa:33:38:99:c3:37:a6:69:2f:f9:46:3c:d2:
3c:e4:67:fe:09:95:1b:e9:d0:b2:52:d2:58:c8:be:
74:6f:64:67:79:35:d6:de:d5:a7:45:ed:84:43:20:
fd:63:17:d9:c8:68:3d:89:f8:16:c9:df:37:5e:46:
44:5f:d3:32:11:56:5e:0c:c4:a4:9f:87:cc:93:c5:
21:29:53:94:51:fe:b4:42:a9:ae:88:9e:97:00:34:
81:f3:65:d1:5d:3e:8d:73:f6:3b:9b:72:ee:06:bf:
d2:a3:c8:ae:1c:c1:a5:ac:41:b0:28:e4:91:dc:f8:
4e:ee:8a:9d:9c:7b:32:86:69:a1:50:46:36:3d:a1:
78:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:21:8D:DD:44:4E:99:76:94:44:23:62:24:D7:85:A6:D3:99:E9:23
X509v3 Authority Key Identifier:
keyid:2B:89:66:D0:F1:4F:D5:99:93:CA:48:78:E7:74:FA:47:79:03:66:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4lm0PFP1ZmTykh453T6R3kDZpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/JiGN3UROmXaURCNiJNeFptOZ6SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/K4lm0PFP1ZmTykh453T6R3kDZpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.140.0/22
109.71.136.0/21
109.205.0.0/21
185.71.148.0/22
185.220.72.0/22
185.230.96.0/22
193.176.64.0/22
IPv6:
2a00:1f10::/32
2a0b:f1c0::/32
Signature Algorithm: sha256WithRSAEncryption
74:cd:1c:bb:d9:9e:2b:7f:08:75:7e:83:8d:e6:5b:a8:a9:56:
11:80:9a:c4:af:5d:ae:c2:cb:34:7a:b8:42:f8:5c:1c:cb:e3:
c7:da:e6:e8:39:e2:a2:7e:dc:81:7c:49:00:c1:9d:c1:04:3f:
a6:1e:70:69:1e:a1:9b:05:d0:bb:2d:f9:d7:8d:84:6c:a8:93:
6a:70:ad:d2:1b:54:b9:37:ed:f5:46:f8:a2:7e:b2:9c:f6:c8:
a7:c8:83:64:62:16:43:58:98:44:89:db:a3:ad:b8:52:81:3a:
15:d6:2b:b7:65:8b:b6:c0:0e:0d:51:d2:a5:ca:fc:cf:d1:3e:
0a:ea:27:74:3b:0a:63:16:e4:41:44:04:5c:bb:88:98:f9:fb:
4d:90:9b:7c:cf:d3:7b:5d:3d:b5:85:d7:31:a2:05:34:8a:76:
5a:96:b8:63:85:16:eb:32:ee:cb:42:f1:90:4b:47:71:6e:c4:
ba:27:d6:95:11:b3:cb:08:57:30:3b:56:4c:79:e2:51:63:b1:
05:3f:43:77:81:d2:d1:e3:d8:cb:ee:c0:b3:b1:ee:5c:72:15:
df:04:f5:54:b3:e7:8d:e5:0b:3a:32:f0:b7:16:7a:7a:ef:01:
14:d4:a3:0d:dd:f4:2b:9b:ab:ac:71:96:e2:6f:9a:24:af:b8:
53:e9:69:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 6 11:16:44 2023 by rpki-client on console-ams.rpki-client.org