Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/J_l54Gn8J-ktNAPwaIA26Jsf1So.roa
File: J_l54Gn8J-ktNAPwaIA26Jsf1So.roa (raw, json)
Hash identifier: HBGlVSanUxFceDsDzfttgnI1rEKqm8E3s7GkRtQrenE=
Subject key identifier: 27:F9:79:E0:69:FC:27:E9:2D:34:03:F0:68:80:36:E8:9B:1F:D5:2A
Certificate issuer: /CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Certificate serial: 018EA85F423949D7DC595D61F668674C2FA3
Authority key identifier: 20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/J_l54Gn8J-ktNAPwaIA26Jsf1So.roa
Signing time: Thu 04 Apr 2024 09:09:58 +0000
ROA not before: Thu 04 Apr 2024 09:09:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44703
IP address blocks: 85.115.64.0/19 maxlen: 19
85.115.64.0/24 maxlen: 24
85.115.65.0/24 maxlen: 24
85.115.70.0/24 maxlen: 24
85.115.71.0/24 maxlen: 24
85.115.72.0/21 maxlen: 21
85.115.80.0/21 maxlen: 21
85.115.93.0/24 maxlen: 24
85.115.94.0/24 maxlen: 24
85.115.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 09:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:5f:42:39:49:d7:dc:59:5d:61:f6:68:67:4c:2f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Validity
Not Before: Apr 4 09:09:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27f979e069fc27e92d3403f0688036e89b1fd52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:14:e7:b8:78:3b:2c:2d:4f:0c:0b:fe:6a:23:
b8:85:ae:f6:81:c6:d0:20:cf:9d:42:a4:4d:2b:d0:
3e:eb:75:c7:b0:e8:42:15:d1:29:a5:0a:15:a4:25:
b7:62:42:97:c6:b9:5f:96:8b:70:b3:f6:12:61:85:
3b:16:81:65:05:47:dd:0b:48:eb:f2:d6:07:19:50:
46:f0:3c:74:e9:39:f3:08:b4:54:8d:73:e9:91:c6:
fd:04:a4:09:1e:31:59:7a:bf:da:54:95:8d:f2:ea:
f0:90:d7:51:57:75:c4:bd:d0:34:34:8d:be:4c:15:
5f:3b:bd:87:07:e8:a7:1f:8d:6d:7d:eb:fe:7e:d1:
e7:12:15:39:3a:73:b7:3e:92:6e:99:9e:d9:06:aa:
97:ac:18:9e:1f:c8:d6:9a:bb:48:73:77:9b:33:17:
33:77:68:f0:55:1e:42:e8:d1:3a:87:7f:4e:6e:d0:
28:c0:bd:bb:69:0c:45:37:a8:a7:17:69:15:e1:7e:
0e:94:a2:6d:2c:41:1b:f7:e8:59:8e:17:1d:a9:bf:
91:45:6b:58:c0:ab:aa:4d:59:ca:d1:88:e1:58:98:
0b:02:d3:ef:41:63:36:8a:7e:f9:b8:a7:13:ce:d4:
fb:c4:69:a1:b4:f2:fa:dd:c5:5c:f2:96:07:24:7e:
74:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F9:79:E0:69:FC:27:E9:2D:34:03:F0:68:80:36:E8:9B:1F:D5:2A
X509v3 Authority Key Identifier:
keyid:20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/J_l54Gn8J-ktNAPwaIA26Jsf1So.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.64.0/19
Signature Algorithm: sha256WithRSAEncryption
53:a7:dd:ec:04:9e:c3:9a:b8:68:e0:ab:2e:a4:0f:57:20:68:
71:7c:04:7a:d3:b0:e4:a9:0a:46:cf:90:82:10:15:6c:5b:f1:
ce:ac:26:45:23:ab:f1:f7:f3:fe:cd:bc:a3:05:ce:6e:25:b8:
b9:54:80:0a:e4:d6:2d:5b:e9:9e:c3:18:67:36:f7:ae:d8:f0:
f1:3c:ee:73:ce:2b:fe:f7:d0:9a:69:10:14:84:5a:e4:22:a2:
a1:0a:1e:be:83:c1:7d:77:ae:be:75:b3:23:58:d9:4f:7b:67:
6f:d8:59:42:96:e9:75:72:75:b5:84:f4:4b:26:59:ec:a6:59:
36:37:a8:17:d9:25:88:e6:1a:37:d7:72:a2:6a:9e:0d:23:ee:
35:cc:53:23:69:9e:52:21:eb:94:34:4f:8f:a1:09:07:b5:94:
ba:77:09:da:e9:71:39:11:8c:c4:0f:2b:ff:c0:05:66:14:19:
c7:66:e9:f9:ed:38:a3:b9:10:99:44:31:f3:de:97:7d:e5:51:
e6:cf:ab:bb:76:eb:cc:ca:2f:17:59:ba:e6:e9:40:d5:e6:92:
7f:14:a3:5e:a5:85:83:1c:be:25:e2:a2:5c:a7:3c:1f:46:f3:
2b:e7:db:ee:c6:c6:4d:bd:00:d3:42:a1:9f:40:5f:92:15:50:
2d:8c:f2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:54 2024 by rpki-client on console-fra.rpki-client.org