Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/Jb40CSqMaWsRuDha02XT9wDE1eQ.roa
File: Jb40CSqMaWsRuDha02XT9wDE1eQ.roa (raw, json)
Hash identifier: YwMJ8Ja6Pg08r7bHfrzNy0pDRczx6ENVwIHNmdNZByI=
Subject key identifier: 25:BE:34:09:2A:8C:69:6B:11:B8:38:5A:D3:65:D3:F7:00:C4:D5:E4
Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial: 0186B26897FCC61E2DE4FAC1E9FBE32AD6AB
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/Jb40CSqMaWsRuDha02XT9wDE1eQ.roa
Signing time: Sun 05 Mar 2023 15:34:04 +0000
ROA not before: Sun 05 Mar 2023 15:34:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12732
IP address blocks: 212.21.71.0/24 maxlen: 24
212.21.92.0/22 maxlen: 24
212.42.236.0/23 maxlen: 24
212.42.242.0/23 maxlen: 24
2001:bf1::/32 maxlen: 32
2001:bf0::/29 maxlen: 32
2001:bf0::/32 maxlen: 32
2001:bf0:40::/48 maxlen: 48
2001:bf0:69::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b2:68:97:fc:c6:1e:2d:e4:fa:c1:e9:fb:e3:2a:d6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Validity
Not Before: Mar 5 15:34:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25be34092a8c696b11b8385ad365d3f700c4d5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:81:d3:59:4e:0a:26:5e:64:b4:79:d8:f6:88:
8a:a4:79:23:82:4f:7d:09:75:e5:d1:51:3b:7e:c7:
e0:0a:44:65:6f:2b:85:8e:d7:81:0d:9a:7e:e2:56:
4c:63:c6:e4:66:7e:7a:f0:50:89:bc:08:49:7d:81:
33:d4:f2:25:36:17:d6:a9:4d:45:8e:88:3a:52:c6:
1e:d0:a2:9e:20:7c:d3:3d:4d:46:5a:37:0f:94:92:
a6:5c:4d:fc:17:ee:d3:39:4a:e1:cd:09:92:b1:0f:
8e:81:dc:2b:59:88:d2:a7:a8:1a:43:cb:cd:06:74:
e6:de:e5:7c:e6:16:2c:c3:24:82:ee:81:39:0b:a4:
f3:96:3e:20:a7:73:39:2a:9b:ee:d3:b5:a9:3c:48:
41:8e:44:6b:32:30:94:73:50:5c:10:3c:b6:a7:f5:
93:d3:4c:d4:ad:5c:d9:74:44:d9:a0:08:63:e3:03:
bd:67:b9:b5:b5:cf:2f:48:a4:33:5c:eb:54:68:4b:
fa:ec:68:11:b0:ac:f9:de:89:ac:59:69:b5:a2:43:
87:a7:b9:5c:f4:03:98:f6:6c:cf:04:9a:92:d0:89:
b3:4c:17:02:60:3e:c3:e2:0c:11:97:be:81:6f:c2:
17:0d:07:6d:db:c1:d8:29:31:f4:d4:2d:38:92:05:
cf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BE:34:09:2A:8C:69:6B:11:B8:38:5A:D3:65:D3:F7:00:C4:D5:E4
X509v3 Authority Key Identifier:
keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/Jb40CSqMaWsRuDha02XT9wDE1eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.21.71.0/24
212.21.92.0/22
212.42.236.0/23
212.42.242.0/23
IPv6:
2001:bf0::/29
Signature Algorithm: sha256WithRSAEncryption
11:20:34:c4:9c:ce:87:d2:09:9d:71:df:9a:c8:9e:8c:31:c1:
43:a0:2b:3a:96:ec:03:25:23:36:b8:25:31:95:38:24:92:e1:
8b:6b:20:aa:8c:ba:0f:95:21:9e:ce:a5:c1:9a:c1:80:e3:02:
ac:24:df:aa:ef:06:02:ca:20:b9:80:bc:88:9b:fa:1e:02:22:
f8:92:9e:38:9d:af:8b:42:42:67:aa:7e:40:22:e1:0a:49:e6:
62:f7:cd:0a:17:80:10:fe:03:df:48:a6:7a:4f:04:20:e9:31:
5e:2c:aa:a2:e2:98:97:f1:12:41:90:07:23:9e:af:56:52:e0:
6d:c0:31:5d:63:9e:d8:73:31:fb:e1:be:70:50:4c:3f:b4:4b:
ff:16:8b:4a:a7:7c:0a:53:bd:e2:8f:0f:15:80:c2:1e:57:19:
fc:60:dc:a3:3e:be:34:f7:6c:28:b8:b8:57:4c:8e:26:eb:ac:
b6:85:8b:ad:33:44:eb:4b:a1:34:52:1f:15:26:24:00:46:70:
df:2d:df:80:cc:3e:6a:c0:03:38:b5:3d:16:9e:01:a3:71:66:
64:7c:51:ff:95:d2:c8:3f:c5:ad:c4:32:8b:a3:1f:dc:52:80:
d8:62:db:05:89:5e:a8:c6:62:21:78:87:15:6d:5b:5f:36:a9:
ca:bc:73:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:46 2024 by rpki-client on console-fra.rpki-client.org