Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/jOh53SZtThLSzMtUBImuYaWaWUg.roa
File: jOh53SZtThLSzMtUBImuYaWaWUg.roa (raw, json)
Hash identifier: CCBcGQjbVydGBB+wO7VCXIe1Bs2Zg1rSQk0+k5kcJkg=
Subject key identifier: 8C:E8:79:DD:26:6D:4E:12:D2:CC:CB:54:04:89:AE:61:A5:9A:59:48
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018A98325676EA2E70672250B83303C5583F
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/jOh53SZtThLSzMtUBImuYaWaWUg.roa
Signing time: Fri 15 Sep 2023 09:35:50 +0000
ROA not before: Fri 15 Sep 2023 09:35:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47570
IP address blocks: 94.100.2.0/24 maxlen: 24
94.100.0.0/20 maxlen: 20
80.232.163.0/24 maxlen: 24
94.100.6.0/24 maxlen: 24
94.100.7.0/24 maxlen: 24
94.100.8.0/24 maxlen: 24
94.100.9.0/24 maxlen: 24
94.100.11.0/24 maxlen: 24
94.100.12.0/24 maxlen: 24
94.100.13.0/24 maxlen: 24
94.100.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Dec 2023 14:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:98:32:56:76:ea:2e:70:67:22:50:b8:33:03:c5:58:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Sep 15 09:35:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ce879dd266d4e12d2cccb540489ae61a59a5948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:56:3b:c7:4e:c4:a5:33:1f:a3:96:c9:eb:cd:
81:34:68:f5:0c:f6:4c:54:0d:2d:aa:d1:18:91:fa:
06:39:13:93:a6:2c:f8:6d:ab:b7:66:5b:a9:ac:0f:
ba:64:09:a0:f7:7c:35:d0:0e:8f:d3:b7:3c:3f:49:
2a:43:91:63:47:0d:0b:8e:48:7c:8e:ad:03:a5:d0:
53:e6:ba:5a:95:c4:8c:07:19:92:63:79:5e:43:13:
af:79:c3:ee:3b:51:46:ff:1b:74:21:81:a9:5d:b4:
3d:97:62:37:d7:b9:39:e1:27:84:b3:ee:97:e1:87:
fa:04:58:c8:26:08:45:6e:fe:d8:8a:ac:a2:27:2a:
a6:ac:cc:6c:2e:3d:1f:dc:a8:5f:c4:37:4a:50:6e:
b8:c5:4c:55:63:a4:cd:62:b7:6a:84:49:8f:00:9d:
cc:36:92:08:11:62:ea:a8:be:c2:84:67:7a:cc:a7:
d7:31:54:9c:bc:2a:05:5d:53:95:68:8a:cf:21:5c:
4b:48:d2:89:71:74:78:1d:2a:95:2f:d4:0e:bc:6c:
eb:91:a0:48:09:e7:5b:ba:19:bb:a0:1a:08:c2:24:
dc:34:a4:51:03:a5:5f:f5:9a:a2:72:91:2e:1e:1c:
e7:44:31:5b:40:f2:a7:1f:82:5a:20:2b:dd:48:2e:
dc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E8:79:DD:26:6D:4E:12:D2:CC:CB:54:04:89:AE:61:A5:9A:59:48
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/jOh53SZtThLSzMtUBImuYaWaWUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.232.163.0/24
94.100.0.0/20
Signature Algorithm: sha256WithRSAEncryption
0b:53:c0:48:a7:a8:58:f2:01:07:58:79:cc:e5:57:4d:20:c8:
33:c1:aa:28:0f:5b:81:cb:2d:9f:18:43:cc:2d:3f:3c:dc:7a:
e5:d7:39:6f:fd:bc:1b:21:5e:01:02:a0:b4:e6:bb:b7:11:f5:
d0:e2:ca:ad:84:12:80:7a:f4:b7:47:e4:c2:be:d6:a6:be:41:
9b:34:a4:0d:27:92:5c:7b:44:dc:c6:fb:3a:b7:f3:42:ea:fc:
a2:75:f7:37:b0:de:f0:43:e5:2e:1f:f6:a5:bc:35:fd:ad:11:
f6:f0:85:5b:8b:09:e5:8c:44:f8:33:5b:28:f0:84:ef:2a:5c:
32:9f:ac:8e:d7:2b:9c:e9:19:d7:16:95:20:4a:8a:dc:46:60:
b3:c6:13:5f:7a:7b:29:1f:13:12:82:59:e3:37:76:4d:3a:62:
b2:00:96:53:12:81:d2:18:0c:fa:5c:ba:29:af:6d:a4:35:5e:
ae:8f:8b:96:5c:ea:b0:27:f3:00:83:c2:df:0d:3b:9c:85:36:
52:6a:9c:d7:73:8b:7d:f0:42:78:bf:bf:4e:bb:6d:a2:99:51:
da:55:67:85:04:30:88:69:88:74:f0:c0:a9:df:99:dc:08:3a:
e9:1c:a2:91:6a:5a:38:c3:26:87:bd:01:2b:31:95:fa:73:76:
1a:f0:9e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:47 2024 by rpki-client on console-ams.rpki-client.org