Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/jui2dr_sraQPI3P2QSnVWmkupSI.roa
File: jui2dr_sraQPI3P2QSnVWmkupSI.roa (raw, json)
Hash identifier: HXJG81rkBi9kH7Rt8WBmBhGubksEmVgweawzGbNb6l8=
Subject key identifier: 8E:E8:B6:76:BF:EC:AD:A4:0F:23:73:F6:41:29:D5:5A:69:2E:A5:22
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01865C42A7FD97F479242EFAED13FBA81893
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/jui2dr_sraQPI3P2QSnVWmkupSI.roa
Signing time: Thu 16 Feb 2023 22:05:17 +0000
ROA not before: Thu 16 Feb 2023 22:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 91.186.216.0/22 maxlen: 24
94.241.164.0/23 maxlen: 24
94.241.160.0/22 maxlen: 24
178.253.44.0/23 maxlen: 24
83.147.232.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Mar 2023 17:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5c:42:a7:fd:97:f4:79:24:2e:fa:ed:13:fb:a8:18:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Feb 16 22:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ee8b676bfecada40f2373f64129d55a692ea522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cd:9e:38:cf:f7:43:d0:d2:c6:c4:35:30:d0:
02:22:bd:36:4c:1c:7a:11:6d:54:31:f4:d9:05:f2:
7c:52:90:33:59:e6:c0:54:72:4a:92:2e:9c:57:ea:
42:ab:29:46:a6:a4:7a:64:72:e1:d1:5f:ff:af:d6:
cb:03:54:7d:16:17:d4:02:96:77:28:ec:86:27:3c:
7d:d7:80:21:be:b9:02:17:d5:e0:74:cf:39:65:f8:
a2:19:cd:a9:95:45:1a:4b:c8:28:90:d6:9c:ed:68:
ef:0c:75:a7:b1:5d:97:fd:40:57:db:5b:77:75:b9:
cc:38:d9:fc:71:cb:a8:40:ee:1e:2a:f8:38:1e:83:
3a:30:19:d6:58:fd:a2:c3:ac:8c:8f:8c:41:de:e2:
2c:da:d9:3a:54:43:c2:fe:ef:1d:0f:6b:bf:0a:7b:
73:92:70:a4:fb:9d:af:53:40:09:66:4c:5f:60:9a:
41:23:7d:97:21:e9:d0:3f:6b:b7:4d:18:b8:de:f5:
f5:f7:fe:96:7b:19:3f:04:be:2c:f0:05:c7:dc:4d:
62:14:80:19:26:a9:26:c2:aa:34:b4:73:20:98:72:
0f:d4:b0:67:a4:ee:c9:5f:62:fd:46:76:f2:36:a9:
2a:14:f3:48:16:dd:4e:00:0e:25:f9:44:15:c8:0a:
a8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E8:B6:76:BF:EC:AD:A4:0F:23:73:F6:41:29:D5:5A:69:2E:A5:22
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/jui2dr_sraQPI3P2QSnVWmkupSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.232.0/22
83.147.252.0/22
91.186.216.0/22
94.241.160.0-94.241.165.255
178.253.44.0/23
Signature Algorithm: sha256WithRSAEncryption
10:9b:fe:14:1b:8a:c1:07:fa:93:3e:72:ab:ec:75:3b:8d:33:
f4:31:25:dc:1b:ab:69:f0:38:c8:b5:00:4f:8b:72:15:72:fb:
90:ce:0b:ac:15:38:0d:a7:5a:b4:97:84:8c:39:8e:ac:22:cd:
83:58:8a:60:97:df:31:b9:d7:57:63:25:b5:12:18:f0:57:2c:
2c:9f:89:88:ce:d3:57:b2:c2:44:bd:bd:1c:89:76:63:ee:ab:
e9:e6:99:58:9b:00:bd:24:1d:05:d6:77:3b:7e:f6:65:31:1c:
89:90:89:a6:92:95:92:56:d5:ba:13:b7:14:26:d0:ee:cd:cc:
c6:54:5b:6f:96:e9:df:3c:c5:16:03:68:05:92:54:f3:be:58:
08:c9:dd:1d:90:94:1d:bc:bb:99:af:f9:09:fc:65:93:b0:4e:
f1:46:d9:04:dd:af:9c:d9:4c:19:37:e0:1d:60:73:d8:74:16:
a1:5a:08:3b:47:69:50:25:96:96:c7:d5:39:bd:21:47:77:da:
ba:a8:ac:17:5e:a6:92:af:b6:f5:e2:f2:89:d8:82:9a:fb:ee:
1c:50:74:ba:21:1e:06:ba:f7:0e:88:3c:a0:a0:08:7c:81:0c:
93:6c:61:ef:b4:14:5a:cc:16:5c:20:0a:c2:3e:55:e0:8c:e6:
e2:6e:e2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org