Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/jyxhqgL9jaTPz90OUkD_NJ4u9T4.roa
File: jyxhqgL9jaTPz90OUkD_NJ4u9T4.roa (raw, json)
Hash identifier: JoCVkkxvbmfUp+ObrzbsMogNKNqZwSWh0aVtqmuW9uw=
Subject key identifier: 8F:2C:61:AA:02:FD:8D:A4:CF:CF:DD:0E:52:40:FF:34:9E:2E:F5:3E
Certificate issuer: /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Certificate serial: 018C38EA65E7A153DF0E05E81C4E7B82FA8C
Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/jyxhqgL9jaTPz90OUkD_NJ4u9T4.roa
Signing time: Tue 05 Dec 2023 07:38:54 +0000
ROA not before: Tue 05 Dec 2023 07:38:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61053
IP address blocks: 185.169.140.0/22 maxlen: 22
94.176.188.0/24 maxlen: 24
94.176.189.0/24 maxlen: 24
185.172.159.0/24 maxlen: 24
185.172.158.0/24 maxlen: 24
185.172.157.0/24 maxlen: 24
185.172.156.0/24 maxlen: 24
93.115.11.0/24 maxlen: 24
185.80.128.0/22 maxlen: 22
185.34.52.0/22 maxlen: 22
185.111.180.0/24 maxlen: 24
91.225.104.0/22 maxlen: 22
185.111.183.0/24 maxlen: 24
185.111.182.0/24 maxlen: 24
185.111.181.0/24 maxlen: 24
91.211.244.0/22 maxlen: 22
2a05:7cc0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:38:ea:65:e7:a1:53:df:0e:05:e8:1c:4e:7b:82:fa:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Validity
Not Before: Dec 5 07:38:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f2c61aa02fd8da4cfcfdd0e5240ff349e2ef53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:30:07:f4:09:c8:8c:09:de:8e:5d:1a:27:
60:ce:dc:3b:b5:b9:26:af:09:52:4f:61:50:40:c3:
ec:bb:03:c8:f2:65:20:53:69:14:db:3d:06:f8:27:
1f:1f:1f:71:d9:35:73:58:11:11:07:fb:ed:af:b5:
1f:52:19:93:da:e4:5f:cb:c2:9b:e4:6e:68:ab:a2:
28:af:a8:47:a2:14:78:d3:b1:31:26:42:21:dc:eb:
c3:13:23:b8:74:da:37:32:bb:59:a0:e2:a8:ef:1f:
13:b1:7e:26:70:de:0e:1f:f1:8c:60:d7:e8:be:01:
d1:b1:a6:a4:4e:7c:dc:00:d2:fe:9c:72:dd:6b:7a:
bf:4e:a6:fd:dd:54:3e:f7:1b:23:b2:1b:ff:1c:59:
a2:de:ad:c4:2c:af:a8:3d:c5:cb:f9:14:45:51:f5:
3c:7a:cf:57:c1:97:6a:7c:fb:f9:0a:33:e7:df:56:
c2:a2:23:7f:9e:71:c7:f1:e4:75:56:06:3e:95:e2:
53:01:30:6a:48:06:11:d8:9b:6d:64:f4:ec:6e:d1:
e2:7c:08:32:a8:7e:0f:fb:ea:d3:02:23:b7:40:fb:
80:e8:ae:6c:d1:7d:83:b8:6c:c4:8a:c0:92:7d:34:
89:0e:3d:26:b0:96:22:27:7c:21:a8:0d:44:7c:95:
ad:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2C:61:AA:02:FD:8D:A4:CF:CF:DD:0E:52:40:FF:34:9E:2E:F5:3E
X509v3 Authority Key Identifier:
keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/jyxhqgL9jaTPz90OUkD_NJ4u9T4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.244.0/22
91.225.104.0/22
93.115.11.0/24
94.176.188.0/23
185.34.52.0/22
185.80.128.0/22
185.111.180.0/22
185.169.140.0/22
185.172.156.0/22
IPv6:
2a05:7cc0::/29
Signature Algorithm: sha256WithRSAEncryption
a7:7d:77:df:38:0a:ba:50:a3:7a:5e:4e:48:b1:db:32:ce:6f:
3e:34:84:3e:12:13:04:f3:76:99:05:45:79:f4:9a:89:d9:7d:
a6:5b:59:78:82:a5:20:23:9d:41:f5:ae:b9:c7:bc:28:78:99:
c9:11:64:68:1d:0f:3f:18:bc:db:15:94:6c:e4:bf:67:ea:40:
7b:8c:24:9b:2f:66:77:9c:0c:db:e9:e2:c7:ac:30:5c:86:92:
4a:0e:10:73:2d:28:ec:b2:2f:3d:14:b1:d0:f7:ea:da:84:41:
f2:73:89:2b:03:e9:61:2b:ca:31:ac:e3:00:dc:1b:4a:b5:e1:
a9:b1:a3:30:dd:ef:28:11:27:92:f4:2b:93:6b:ef:02:d7:95:
e6:2a:fa:da:a1:d8:58:1d:1b:e4:04:82:77:9a:52:ae:e1:a5:
8f:3d:48:c4:ee:ea:7e:d2:9c:5e:6f:46:99:20:cd:bd:bd:6a:
84:ff:21:68:b1:93:bf:7c:f8:7e:a4:cf:eb:60:a3:69:e1:6f:
f7:92:b3:de:ee:2f:72:ab:33:52:2b:bd:65:3c:82:51:9a:3c:
bc:1a:a7:85:8a:f2:53:bc:08:c5:39:a8:01:3b:b9:1b:19:28:
65:d9:26:4f:96:75:4a:1c:36:82:0f:c3:30:0a:dc:f4:85:30:
a6:0c:94:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:23 2024 by rpki-client on console-ams.rpki-client.org