Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/JmjY5XxefqB1LZJrfXDeC5xCWs4.roa
File: JmjY5XxefqB1LZJrfXDeC5xCWs4.roa (raw, json)
Hash identifier: MZqTQC8zmkfPoPvt0pT2cSor/G/mookWuw6niVy4tfw=
Subject key identifier: 26:68:D8:E5:7C:5E:7E:A0:75:2D:92:6B:7D:70:DE:0B:9C:42:5A:CE
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 018EF17563337D6D49859DDAAFEF2FE09D27
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/JmjY5XxefqB1LZJrfXDeC5xCWs4.roa
Signing time: Thu 18 Apr 2024 13:46:25 +0000
ROA not before: Thu 18 Apr 2024 13:46:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201086
IP address blocks: 185.86.80.0/24 maxlen: 24
185.205.19.0/24 maxlen: 24
185.254.94.0/24 maxlen: 24
185.254.95.0/24 maxlen: 24
193.36.63.0/24 maxlen: 24
2a0a:fa40::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 28 May 2024 07:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f1:75:63:33:7d:6d:49:85:9d:da:af:ef:2f:e0:9d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Apr 18 13:46:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2668d8e57c5e7ea0752d926b7d70de0b9c425ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3a:93:48:4c:82:29:d2:d9:a3:08:5c:d2:b8:
53:e2:de:e9:cd:47:bb:ca:6a:66:49:75:32:27:a0:
d4:87:f0:9b:46:03:bb:83:ed:42:e1:7d:12:32:82:
12:7c:72:7d:54:19:c3:9e:cd:b7:7c:19:1c:a2:02:
00:7f:e6:be:b5:73:56:21:ab:a5:cc:79:96:d4:79:
d4:ac:39:2c:c4:a5:8b:f4:88:77:29:72:58:08:05:
ac:50:fa:25:8e:4c:e0:37:df:cc:15:ee:da:01:62:
b8:0c:ab:1b:2a:01:4c:bb:8d:18:19:cf:26:ab:fc:
42:11:42:48:b8:4a:00:32:cf:15:64:aa:80:b0:75:
09:69:e8:2e:68:15:07:13:eb:29:27:01:45:b8:91:
59:90:91:67:53:77:61:b2:1c:b6:c4:fa:66:9a:b1:
f7:e1:d4:53:9f:09:97:2b:94:77:8f:b2:4c:b7:02:
df:19:5a:46:ff:e4:64:f3:47:d5:1c:b1:58:7d:93:
14:02:ac:d6:cf:ed:b7:00:6b:af:cd:d3:32:1f:a2:
15:b8:f9:e8:9c:18:78:d7:33:5c:e5:d7:f6:7a:04:
16:1f:a1:fc:08:74:8e:e2:e6:5f:18:dd:d6:f5:32:
c9:49:e4:25:22:4f:a0:ed:cd:71:10:2d:84:f6:86:
a0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:68:D8:E5:7C:5E:7E:A0:75:2D:92:6B:7D:70:DE:0B:9C:42:5A:CE
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/JmjY5XxefqB1LZJrfXDeC5xCWs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.80.0/24
185.205.19.0/24
185.254.94.0/23
193.36.63.0/24
IPv6:
2a0a:fa40::/32
Signature Algorithm: sha256WithRSAEncryption
16:5a:1a:ce:35:c4:d2:b9:13:db:a5:e4:84:17:cb:a1:0e:44:
31:e0:0b:59:a4:1b:f5:69:a7:1c:a4:c9:19:c2:ac:f4:47:ab:
25:3c:98:55:03:a7:99:eb:af:1e:ea:88:2d:f4:91:bd:6c:dd:
88:cf:43:bd:55:e5:e5:35:eb:02:b4:73:03:98:c7:46:d4:92:
0c:4a:17:03:bc:c0:7b:d7:8e:e7:50:70:53:c7:d9:76:ca:d9:
61:4a:2e:fc:e0:50:7e:ad:9d:12:2a:fa:f5:51:e2:a3:36:67:
a5:c3:eb:1e:15:70:18:c8:13:fe:be:60:39:cd:75:80:d0:62:
58:a3:93:67:cd:33:db:55:17:97:80:54:d3:f4:e1:0d:d0:b4:
83:89:e3:59:de:41:ec:60:7f:49:37:b9:f9:54:be:a6:6a:05:
6a:b2:51:76:64:9a:be:5a:c3:1c:20:27:2c:0d:6f:6f:3f:d7:
11:db:35:f1:83:53:76:c7:e9:f6:f0:80:fb:a6:66:c5:80:e9:
4a:b3:84:af:24:4f:c8:82:b0:0b:b7:bc:b7:7f:fe:a2:b5:be:
6c:7d:94:74:1e:9c:a9:9a:98:92:62:c3:97:61:88:ed:3c:fa:
32:2a:4c:9a:d8:ca:19:d6:92:ca:f3:84:e8:ac:c1:39:7e:12:
0a:9e:fe:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:52 2024 by rpki-client on console-ams.rpki-client.org