Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/jqJshUhTd5OlkvnKu40EQ-6LciU.roa
File: jqJshUhTd5OlkvnKu40EQ-6LciU.roa (raw, json)
Hash identifier: GOC6CTzjiJ8p1hU03R2mmRwXvNyLGG+d8D9wlL/MIEU=
Subject key identifier: 8E:A2:6C:85:48:53:77:93:A5:92:F9:CA:BB:8D:04:43:EE:8B:72:25
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 018DA259AB11DDBAC846368923BF8906225B
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/jqJshUhTd5OlkvnKu40EQ-6LciU.roa
Signing time: Tue 13 Feb 2024 12:03:21 +0000
ROA not before: Tue 13 Feb 2024 12:03:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 185.118.79.0/24 maxlen: 24
193.68.89.0/24 maxlen: 24
213.21.232.0/24 maxlen: 24
213.21.236.0/24 maxlen: 24
213.21.237.0/24 maxlen: 24
213.21.245.0/24 maxlen: 24
213.21.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 10:58:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a2:59:ab:11:dd:ba:c8:46:36:89:23:bf:89:06:22:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Feb 13 12:03:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ea26c8548537793a592f9cabb8d0443ee8b7225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:55:0c:7a:30:5d:f3:71:85:95:46:6b:51:30:
46:63:94:80:0e:01:a7:ab:dc:b5:df:7f:ab:9d:ff:
1c:ef:59:bd:64:af:2c:04:af:9c:ee:f4:3c:5b:b2:
d4:af:ba:1a:2c:7e:1b:46:be:ea:16:58:09:4b:a6:
18:94:2a:0b:a1:f9:13:2d:ef:bf:b1:d9:33:e1:1f:
03:eb:be:f1:94:d2:6b:09:6a:27:cf:ee:88:6f:da:
74:cc:d9:09:51:9b:71:8c:9d:8f:f5:54:a8:78:45:
0c:48:b3:50:f6:ad:4c:3e:0c:d0:04:e1:28:21:aa:
36:cb:24:af:73:b5:b9:8e:1a:12:29:15:5f:b8:56:
34:35:90:44:cc:e1:04:ac:c2:3c:29:ac:ca:aa:5f:
1a:68:b4:7b:77:a8:e9:08:cc:ef:7b:15:6a:c3:12:
db:6b:39:de:d2:a5:11:52:f9:e2:bf:da:6c:78:4f:
9e:4e:20:f9:f1:b7:84:88:14:74:37:ca:cf:20:39:
17:40:91:c2:14:5f:73:c7:30:ce:2c:93:27:19:ae:
b7:8d:7b:9c:9d:da:57:31:44:e4:ce:2d:78:4b:69:
8d:4a:a8:b2:42:e9:30:d3:91:24:fa:1e:f1:8c:85:
4d:f8:47:cd:d8:7d:ad:2e:e9:ae:6e:64:a5:2f:5d:
f0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A2:6C:85:48:53:77:93:A5:92:F9:CA:BB:8D:04:43:EE:8B:72:25
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/jqJshUhTd5OlkvnKu40EQ-6LciU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.79.0/24
193.68.89.0/24
213.21.232.0/24
213.21.236.0/23
213.21.245.0/24
213.21.253.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:51:b8:c5:cc:75:29:0a:15:35:3b:a0:fe:d6:6c:12:12:76:
8b:58:a5:30:16:64:e7:95:b8:a4:1b:65:9e:c6:92:40:f3:c2:
ac:37:3e:db:d9:03:31:c1:22:7d:52:f6:0f:2e:30:b7:ef:26:
fd:e1:b1:8a:26:b4:3b:e7:5b:c3:eb:8f:5e:bb:4d:b5:4c:78:
b1:85:84:44:97:fa:43:8d:8e:4a:ed:44:c3:02:81:0d:c8:08:
45:41:18:15:b3:62:3f:09:dd:73:64:e0:1e:66:2d:fe:ac:f9:
30:7e:4d:7d:12:43:a7:19:2b:b7:b4:47:f8:a4:6f:d7:8f:60:
c2:15:d9:45:c4:91:63:5c:77:db:a6:2e:1b:05:13:59:b0:a7:
ed:81:58:bc:09:16:d2:aa:e1:86:d4:5f:ae:3a:17:13:15:52:
82:a7:af:48:65:18:0e:67:2c:57:c4:3b:25:2f:0c:57:16:f2:
11:66:18:1f:32:80:9a:83:11:71:d7:89:ce:5b:2f:4d:74:f4:
06:bb:0d:b4:ad:85:48:1d:29:f6:55:e9:d0:70:62:c8:63:72:
0e:fd:b8:8a:8d:c5:a0:8d:7f:c2:8c:56:83:5c:17:a0:4b:3e:
f7:eb:fe:e5:3a:e7:76:f7:11:f8:d7:de:e4:e8:7d:e0:d2:32:
db:9d:fb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:38 2024 by rpki-client on console-ams.rpki-client.org