Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jfHYs8LD1_7IZXXO7n4XjpWMnj8.roa
File: jfHYs8LD1_7IZXXO7n4XjpWMnj8.roa (raw, json)
Hash identifier: QxfBNczvfqW8uB0Y8xEi6LrsU+TQe1yUPALg2rnKN9U=
Subject key identifier: 8D:F1:D8:B3:C2:C3:D7:FE:C8:65:75:CE:EE:7E:17:8E:95:8C:9E:3F
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018DAE3DCCA66426E773C08487EDBD53FB14
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jfHYs8LD1_7IZXXO7n4XjpWMnj8.roa
Signing time: Thu 15 Feb 2024 19:28:21 +0000
ROA not before: Thu 15 Feb 2024 19:28:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8038
IP address blocks: 46.229.255.0/24 maxlen: 24
91.190.107.0/24 maxlen: 24
185.150.0.0/24 maxlen: 24
185.165.44.0/24 maxlen: 24
185.217.118.0/24 maxlen: 24
194.76.134.0/24 maxlen: 24
203.25.124.0/24 maxlen: 24
203.159.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 17:24:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ae:3d:cc:a6:64:26:e7:73:c0:84:87:ed:bd:53:fb:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 15 19:28:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8df1d8b3c2c3d7fec86575ceee7e178e958c9e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:db:0d:f7:7f:2b:c1:23:23:a1:3e:f5:6c:78:
e6:72:88:e6:d0:43:e6:90:27:f0:93:f9:24:87:a3:
d8:61:07:40:ab:1b:0c:79:a7:37:8d:da:6d:7a:db:
b8:1d:2b:72:ca:57:a9:27:51:8e:93:bb:f9:1f:7d:
6c:0e:4a:9b:e9:a7:07:28:d0:8b:b6:c4:9a:a1:eb:
c6:86:f8:f9:ce:ff:d5:e3:44:8f:6f:f4:0f:e1:ec:
c0:9e:f8:95:33:cc:63:94:8b:8b:3a:db:31:d5:0b:
c0:e5:6b:08:fa:0e:d5:1a:8f:76:32:74:8b:6a:b5:
e9:a1:45:cc:ce:4c:42:83:bf:35:f9:5b:b0:8c:1d:
d1:9b:b6:53:26:71:f9:51:b4:54:8c:3c:5a:f2:b7:
27:c4:69:e2:7c:6c:9c:57:b4:1d:41:88:df:9f:c7:
88:7d:4d:26:52:d0:8b:bf:25:88:55:ec:c1:18:3f:
d4:f5:89:cd:d8:a8:4a:dc:b8:0e:d7:b0:95:9c:b4:
20:70:46:a7:70:18:f0:5a:6a:9e:5a:87:0a:e8:4c:
c4:76:1c:8d:9f:0c:c4:a9:1d:5b:19:df:73:4b:9e:
10:54:f1:5c:0c:60:03:38:f1:54:25:3d:4b:07:00:
a6:f3:19:2b:ab:14:20:54:43:75:93:c7:82:d3:34:
20:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F1:D8:B3:C2:C3:D7:FE:C8:65:75:CE:EE:7E:17:8E:95:8C:9E:3F
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jfHYs8LD1_7IZXXO7n4XjpWMnj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.255.0/24
91.190.107.0/24
185.150.0.0/24
185.165.44.0/24
185.217.118.0/24
194.76.134.0/24
203.25.124.0/24
203.159.82.0/24
Signature Algorithm: sha256WithRSAEncryption
85:c3:ff:69:28:04:18:cf:d3:71:f0:77:bf:6f:87:4c:e1:f6:
e2:1f:e5:91:e7:fa:81:20:18:2e:de:79:4f:36:36:10:23:95:
64:ef:41:f5:7a:03:25:16:01:ba:17:86:f0:50:98:92:e9:6e:
a4:12:36:6a:e3:08:26:90:0e:6a:cb:19:19:c6:15:26:5e:a7:
8c:61:a7:ed:5a:a7:18:7e:32:6a:8b:e1:96:33:1f:ef:d2:66:
76:20:01:ac:fb:6e:5f:b8:56:cc:78:fa:a0:63:cd:f3:c7:83:
c4:43:e7:84:c0:f3:c1:76:86:cc:1b:a6:8f:9b:d0:d7:66:cc:
39:c5:de:d6:b1:ee:5f:79:fb:71:39:7e:56:38:d0:4a:f4:33:
65:7c:de:82:45:cc:e3:72:e1:18:47:74:f5:4c:c1:46:51:db:
82:51:50:a9:31:da:c5:42:8e:d2:51:cf:e7:4c:d0:d7:d5:1f:
dc:65:92:fb:26:b2:4e:0e:af:08:22:b6:37:60:14:36:05:5c:
2d:cb:d4:d7:9b:50:0b:d7:85:32:6a:07:f7:a1:03:52:50:a8:
81:88:7b:50:45:7f:a7:7c:b7:26:23:d1:79:4d:4a:02:b3:38:
62:50:ca:e6:cd:07:6f:09:43:86:96:0f:e7:64:e6:80:0b:81:
c6:3b:3c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 20:06:12 2024 by rpki-client on console-ams.rpki-client.org