Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/JcMIkLa2mwBtjZCP4VaeF4ABHpk.roa
File: JcMIkLa2mwBtjZCP4VaeF4ABHpk.roa (raw, json)
Hash identifier: 9gVVQDvy55pTe++ZsjsCrnJPUHKWVj5h0jd2kG1qb+Y=
Subject key identifier: 25:C3:08:90:B6:B6:9B:00:6D:8D:90:8F:E1:56:9E:17:80:01:1E:99
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018E0E11F49E8F2FC9250284F9F68BD49E90
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/JcMIkLa2mwBtjZCP4VaeF4ABHpk.roa
Signing time: Tue 05 Mar 2024 10:04:01 +0000
ROA not before: Tue 05 Mar 2024 10:04:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211619
IP address blocks: 5.182.112.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
88.209.206.0/24 maxlen: 24
88.209.228.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.236.0/24 maxlen: 24
88.209.237.0/24 maxlen: 24
88.209.239.0/24 maxlen: 24
88.209.246.0/24 maxlen: 24
88.209.247.0/24 maxlen: 24
88.209.254.0/24 maxlen: 24
92.52.217.0/24 maxlen: 24
92.52.218.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 12:20:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0e:11:f4:9e:8f:2f:c9:25:02:84:f9:f6:8b:d4:9e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 5 10:04:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25c30890b6b69b006d8d908fe1569e1780011e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3f:e4:4d:4f:00:0c:98:8e:ed:fc:c7:45:70:
91:4c:5b:01:8e:c1:0b:56:85:e9:37:b1:04:e6:2e:
ba:a3:ad:5b:aa:c7:8d:3d:70:80:79:46:ae:24:94:
41:50:c8:62:a1:bc:b1:60:80:3d:47:11:7d:8b:52:
d8:2b:28:19:b9:73:e7:f6:77:21:d4:22:0c:2a:fb:
eb:cb:3b:3d:8d:db:5c:78:28:e3:cb:b9:f5:30:fb:
9f:ab:3c:ea:aa:41:c7:6e:38:a0:57:20:e5:9d:58:
77:9a:e5:3b:21:f9:61:3e:12:92:f7:19:19:84:80:
ab:ab:ab:40:64:b7:16:fb:57:13:fe:d5:55:5a:72:
d2:c4:d0:d5:2f:db:84:5c:6f:fb:56:0f:4c:3e:60:
fd:91:b7:3f:f1:c7:f4:9f:6d:06:e6:04:b8:6b:46:
69:33:8a:99:9e:2f:db:a3:cb:4d:a8:1b:fc:58:9c:
f1:c0:1e:f1:21:ce:77:61:2a:22:9c:0b:0c:6a:dc:
99:89:56:ec:c9:16:35:d8:09:73:e8:ca:2c:cd:1f:
c8:b1:db:c5:4e:28:d2:bc:b5:e7:d0:71:a6:8b:6f:
09:36:ef:99:99:4c:8d:0c:d5:6f:f8:84:7f:9e:8d:
27:00:8a:71:c0:76:1a:77:8c:7b:0a:be:25:84:7f:
2e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C3:08:90:B6:B6:9B:00:6D:8D:90:8F:E1:56:9E:17:80:01:1E:99
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/JcMIkLa2mwBtjZCP4VaeF4ABHpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
45.9.168.0/24
83.137.157.0/24
88.209.206.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
88.209.254.0/24
92.52.217.0-92.52.218.255
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:fa:81:0e:76:43:40:63:fc:c9:45:1b:ad:02:46:5a:0c:4d:
eb:f0:5f:ae:7e:b2:24:79:9c:29:cf:5a:a4:ab:8a:5f:90:eb:
5f:48:34:61:d2:f2:d7:85:12:56:06:7f:fb:9b:8f:dc:bc:8b:
fa:58:87:5c:67:8d:c4:76:8e:17:f7:26:3e:2a:f8:e8:32:88:
f9:43:0b:8c:ce:8a:e4:8c:98:31:6f:22:20:9f:62:b7:76:df:
2e:5e:e9:fc:c4:ac:fb:da:c7:48:0c:7a:67:f8:6f:ad:9a:2c:
5c:fa:17:17:5b:7a:9d:68:73:9b:f9:33:98:c1:cc:98:38:12:
f7:ae:99:88:9d:6e:65:dc:cc:65:e2:28:c5:a2:5b:bd:8c:38:
51:8f:1b:6b:7f:2e:14:97:0a:cf:fb:c8:df:c6:d1:8b:d5:d4:
b2:be:b8:23:68:e0:54:75:a2:6b:63:4f:93:4c:88:4c:00:fc:
cb:8e:4d:fd:17:96:2d:89:42:ca:38:4e:a0:e3:22:ee:10:f8:
c2:d3:21:1f:e1:83:39:3a:0b:a7:1c:b9:1b:ef:60:15:e4:98:
75:42:27:5f:8c:85:a4:d2:f0:cb:18:63:70:df:b6:d4:78:9f:
f4:7e:04:93:d1:95:4f:93:9c:7f:e2:1c:48:de:e8:0c:7b:f9:
25:c9:9a:23
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org