Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/jDLTUUzfdPph3hbkKxh99KUMMmA.roa
File: jDLTUUzfdPph3hbkKxh99KUMMmA.roa (raw, json)
Hash identifier: T210KVogXCF1mBjbt6+8/c+5Tw/5hQkOkQkZruZxkns=
Subject key identifier: 8C:32:D3:51:4C:DF:74:FA:61:DE:16:E4:2B:18:7D:F4:A5:0C:32:60
Certificate issuer: /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Certificate serial: 01857142D392772D985DFCFCCF98FFF17845
Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/jDLTUUzfdPph3hbkKxh99KUMMmA.roa
Signing time: Mon 02 Jan 2023 06:54:42 +0000
ROA not before: Mon 02 Jan 2023 06:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21497
IP address blocks: 128.124.0.0/16 maxlen: 19
77.52.0.0/16 maxlen: 18
5.207.0.0/16 maxlen: 17
88.214.64.0/18 maxlen: 19
46.133.0.0/16 maxlen: 19
178.133.0.0/16 maxlen: 19
31.144.0.0/16 maxlen: 19
80.255.64.0/20 maxlen: 21
89.209.0.0/16 maxlen: 19
2a00:f50::/30 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:d3:92:77:2d:98:5d:fc:fc:cf:98:ff:f1:78:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Validity
Not Before: Jan 2 06:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c32d3514cdf74fa61de16e42b187df4a50c3260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b8:c6:00:ec:30:b9:0c:a8:56:15:e5:a2:57:
68:93:46:94:92:7e:1b:76:8a:ef:49:1f:bf:e9:59:
f8:6a:5d:dd:c3:17:f3:0f:cb:a2:59:d8:c7:a6:6c:
1a:e8:a6:4d:65:05:e1:7e:eb:15:30:91:5f:b6:04:
74:1c:d9:59:13:94:fc:25:5c:18:ae:fb:eb:d5:0e:
b2:c3:69:91:0f:8d:87:7d:21:7d:d8:6b:f9:25:50:
7a:02:90:5d:04:69:14:85:94:5e:83:10:a0:61:77:
cf:96:62:31:29:fb:8e:74:2d:57:a4:c8:fe:f5:f5:
51:3e:28:1f:fa:87:05:69:04:42:44:35:da:71:91:
91:53:8f:fc:a5:a9:21:41:87:10:e3:a0:a0:5f:d8:
c5:ed:d9:c0:ea:e3:11:c2:a6:53:5c:8a:cc:ba:22:
a8:1f:35:8b:02:3d:97:a6:2f:a3:f6:6e:e6:df:43:
d3:d3:ff:7f:ce:e6:1b:7f:3f:69:00:e4:dd:0f:9f:
55:1e:01:bc:8a:b4:a7:ea:72:04:ee:50:37:7e:b8:
9a:eb:59:89:4c:8a:c2:12:1e:ef:d4:23:a4:db:65:
4e:ee:35:26:16:6e:25:41:d0:72:d1:5b:8c:64:7c:
b7:f7:9d:59:af:6a:f9:88:3b:5c:8c:f7:30:dc:08:
b4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:32:D3:51:4C:DF:74:FA:61:DE:16:E4:2B:18:7D:F4:A5:0C:32:60
X509v3 Authority Key Identifier:
keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/jDLTUUzfdPph3hbkKxh99KUMMmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.207.0.0/16
31.144.0.0/16
46.133.0.0/16
77.52.0.0/16
80.255.64.0/20
88.214.64.0/18
89.209.0.0/16
128.124.0.0/16
178.133.0.0/16
IPv6:
2a00:f50::/30
Signature Algorithm: sha256WithRSAEncryption
15:c0:be:7d:36:d4:95:40:41:31:44:17:9e:91:86:49:19:4f:
4a:7d:c1:7c:af:77:18:d7:ff:4f:c8:b5:27:8a:aa:b8:6c:cb:
d1:f7:9b:a5:c0:28:04:2e:b3:fc:12:2b:4b:59:9b:72:81:33:
4c:cc:fe:bd:30:8e:18:67:53:fc:e7:31:e3:52:bb:52:2d:c0:
b6:00:c9:e9:1e:c9:7b:16:df:63:3a:7f:0b:50:a6:b5:fe:3b:
e1:4d:88:9b:3f:2f:b5:e6:10:f7:8e:85:59:5a:e2:81:4f:2b:
e3:c0:9d:78:7c:8d:f6:ff:e8:55:f1:97:2f:ba:39:8e:33:d2:
00:15:6e:f2:ed:aa:6c:c3:ad:98:73:2b:a8:e8:24:ac:e6:7a:
e3:dd:6f:09:3e:37:26:e7:6a:db:71:d3:a1:4e:c3:c1:98:3b:
f1:28:d4:bd:3f:ee:5c:2c:82:a8:44:0c:4e:2b:42:69:97:38:
3b:70:22:82:e7:0f:da:7e:de:45:93:42:2c:22:7d:84:28:79:
57:0e:fe:8d:10:7f:76:1e:24:f9:7a:53:4b:b0:f6:54:82:04:
a6:01:9a:b4:da:9f:97:0a:f1:b4:fe:9d:b6:a1:a3:0d:71:94:
65:ed:9a:81:8e:a5:e5:4c:84:5a:ed:4f:0f:68:fd:9a:4e:68:
54:e3:0b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:29 2024 by rpki-client on console-ams.rpki-client.org