Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/jLDRS78JuftzLqJ9DQ_5cufpgac.roa
File: jLDRS78JuftzLqJ9DQ_5cufpgac.roa (raw, json)
Hash identifier: A6NiHZEt5HNLgznQqmIwPOIB3jHYugvqOddRHN/gtnE=
Subject key identifier: 8C:B0:D1:4B:BF:09:B9:FB:73:2E:A2:7D:0D:0F:F9:72:E7:E9:81:A7
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 018CC2DB3D093D8ABCC10E86110A94ABE300
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/jLDRS78JuftzLqJ9DQ_5cufpgac.roa
Signing time: Mon 01 Jan 2024 02:29:57 +0000
ROA not before: Mon 01 Jan 2024 02:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12557
IP address blocks: 185.117.180.0/22 maxlen: 22
2a03:52a0:172::/48 maxlen: 48
2a03:52a0::/32 maxlen: 32
2a03:52a0:180::/48 maxlen: 48
2a03:52a0:181::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 May 2024 15:49:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3d:09:3d:8a:bc:c1:0e:86:11:0a:94:ab:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Jan 1 02:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cb0d14bbf09b9fb732ea27d0d0ff972e7e981a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:10:36:c9:96:4f:c0:83:86:bf:72:d9:18:c5:
d5:22:f1:b8:07:a8:a6:eb:d1:b7:d4:90:b8:16:8d:
0d:ed:e1:09:d2:d3:f4:ea:c5:c5:bb:6b:b8:bc:86:
36:09:8d:b5:b6:27:d0:de:61:16:01:0f:c1:9e:a8:
7f:aa:4a:5d:a4:7a:df:dd:2d:42:2b:db:87:3f:3d:
86:1b:66:c1:d9:62:09:ab:e9:ef:03:da:bc:be:88:
0e:aa:11:25:32:22:00:69:f1:f3:72:8b:70:87:57:
e0:f3:11:b2:d1:15:da:46:1d:72:29:b0:7c:b2:f6:
cc:02:df:b2:11:a3:99:18:1d:b3:bc:02:7e:7f:11:
bf:47:5e:ac:e9:fb:01:e4:25:6b:91:02:b0:ad:43:
e2:9e:b6:51:e7:ab:ef:01:3b:76:a2:9f:b6:53:b1:
08:09:e1:d1:8a:5d:8d:0e:e1:c5:4b:8f:85:db:28:
db:00:0f:e9:ac:5a:51:ca:4d:ac:47:cb:64:f4:a0:
3e:9e:6f:25:be:92:51:9b:c7:6c:ed:11:4f:93:9e:
2d:a1:9a:9b:b3:f6:ce:14:8f:ff:6a:8b:15:fc:ba:
4a:eb:ef:12:71:16:71:28:86:e6:d2:bd:35:9c:fb:
12:4c:bd:3f:82:9e:6a:ed:fc:fb:d4:45:58:1e:cb:
b2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B0:D1:4B:BF:09:B9:FB:73:2E:A2:7D:0D:0F:F9:72:E7:E9:81:A7
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/jLDRS78JuftzLqJ9DQ_5cufpgac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.180.0/22
IPv6:
2a03:52a0::/32
Signature Algorithm: sha256WithRSAEncryption
a8:36:b3:fd:c4:31:4c:04:88:76:ab:4f:f6:39:77:5f:1e:02:
04:8e:40:99:92:a3:05:da:68:13:66:14:5b:0d:57:a8:8b:e8:
58:fa:2f:1a:49:6d:80:e2:c5:cb:70:56:92:a1:20:1d:45:5a:
ad:c6:43:95:58:3d:36:11:f1:a8:ed:cb:0d:de:1b:62:1c:dd:
ba:f0:64:7f:31:de:94:b6:6b:80:1a:d3:a6:79:ef:a5:d9:c0:
0d:7c:60:f2:ca:07:d4:d6:d3:44:2b:fd:fc:fe:11:eb:46:14:
87:66:0f:e8:dc:32:6c:c7:88:92:b8:9e:bc:ce:e4:a9:7d:96:
28:94:56:db:2c:6b:2b:78:71:9f:ee:b8:ee:a0:87:d2:fe:4d:
a0:1d:d2:11:6e:88:6a:48:fb:a4:33:d4:77:99:42:60:f2:8f:
52:92:1e:10:06:d1:19:42:1f:f2:29:8c:cd:48:42:ee:42:23:
40:7d:7a:82:ee:ef:d1:ca:ed:ad:9b:6f:da:b2:52:f1:ac:54:
ea:f0:69:8b:d6:13:aa:55:d6:48:21:a1:f8:19:1c:c9:fe:40:
84:71:33:5a:14:4f:7b:d5:73:18:38:f6:30:c8:ed:15:f7:e9:
01:53:1d:14:51:fb:da:3a:4a:5a:b2:12:a6:60:84:ff:31:5f:
18:19:52:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:07 2024 by rpki-client on console-ams.rpki-client.org