Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/jK2U6ICubXIwRZ93mDWHuLfPIf4.roa
File: jK2U6ICubXIwRZ93mDWHuLfPIf4.roa (raw, json)
Hash identifier: BHAWkr+W8MARAPOeBpB0ff+Lov3OzgTsSvHtnQH9TQY=
Subject key identifier: 8C:AD:94:E8:80:AE:6D:72:30:45:9F:77:98:35:87:B8:B7:CF:21:FE
Certificate issuer: /CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Certificate serial: 018CC3B7127C0D4B1F4A8A207F5CE02330A6
Authority key identifier: AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/jK2U6ICubXIwRZ93mDWHuLfPIf4.roa
Signing time: Mon 01 Jan 2024 06:30:04 +0000
ROA not before: Mon 01 Jan 2024 06:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199938
IP address blocks: 194.39.215.0/24 maxlen: 24
194.40.244.0/24 maxlen: 24
185.41.106.0/23 maxlen: 24
194.39.187.0/24 maxlen: 24
194.41.1.0/24 maxlen: 24
2a01:55e0::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 14 Mar 2024 13:32:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:12:7c:0d:4b:1f:4a:8a:20:7f:5c:e0:23:30:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Validity
Not Before: Jan 1 06:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cad94e880ae6d7230459f77983587b8b7cf21fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:92:ae:d2:45:fc:1d:b9:7e:d6:5d:9c:ea:
e3:8c:5e:c9:2b:89:e9:04:23:35:df:43:99:c6:c0:
f8:12:08:76:d8:be:c5:8d:33:e6:20:be:27:a6:5a:
13:84:6b:45:41:50:6c:19:05:ea:8a:c3:27:58:2b:
0a:4c:73:b2:45:e4:d5:fc:8e:e0:9a:d0:b1:58:3f:
5b:95:be:9e:b4:a5:47:e1:e8:c9:eb:01:b0:9e:4e:
5e:b9:90:38:ac:46:12:32:09:e7:02:97:96:1f:fb:
cb:a6:c9:bb:7b:7d:36:01:81:c0:47:aa:92:7e:48:
d6:cb:bd:07:05:a9:e3:31:9c:3a:6a:4f:9b:37:5e:
c8:9b:c3:c4:0a:7b:cb:e9:8f:bf:98:87:ac:5f:d4:
99:40:6e:90:e2:48:44:8c:68:5b:6d:8a:21:1d:0e:
70:1f:4b:35:14:ff:fe:8e:47:9c:ab:cd:97:be:c3:
1d:02:dd:70:83:e7:b3:91:d3:82:02:9a:53:80:53:
a4:7a:0b:c8:68:d9:33:ab:8a:fd:da:cf:d2:e0:f4:
df:7b:bd:8a:bb:99:af:73:7b:66:d9:3b:8b:72:eb:
c9:88:00:08:e0:a4:bf:5e:e4:44:1a:ce:4a:bb:91:
b8:96:d6:2e:48:ff:40:4b:d4:ad:98:84:c8:b9:03:
39:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AD:94:E8:80:AE:6D:72:30:45:9F:77:98:35:87:B8:B7:CF:21:FE
X509v3 Authority Key Identifier:
keyid:AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/jK2U6ICubXIwRZ93mDWHuLfPIf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.106.0/23
194.39.187.0/24
194.39.215.0/24
194.40.244.0/24
194.41.1.0/24
IPv6:
2a01:55e0::/29
Signature Algorithm: sha256WithRSAEncryption
ac:3c:6a:1d:0c:1f:00:94:e7:b7:1f:b1:03:ed:ed:78:93:07:
3a:d3:5a:fa:5b:f2:08:66:3f:81:9c:36:7e:fe:0c:df:0a:34:
1e:fb:bb:c7:43:df:4c:c5:71:b6:17:54:14:f5:86:05:43:f7:
a4:bf:37:7d:c0:74:c0:82:bd:a7:ef:6f:7b:f7:3f:f9:32:85:
8f:de:79:65:f0:ee:d8:78:be:0a:0a:d9:8a:75:16:38:0b:20:
c2:37:d1:a1:42:e5:81:19:8c:a2:40:14:6d:52:65:72:5f:27:
c2:de:a8:0d:12:f6:c9:bc:ea:3f:94:0b:0f:f9:19:6c:7a:32:
d8:9c:e3:47:b1:3b:0f:16:7b:3b:67:c1:42:18:b8:00:2d:a3:
12:6e:f4:09:bf:eb:7d:3c:2c:f3:03:86:69:e1:86:f8:ec:c3:
02:5a:39:5a:6a:c2:59:16:c9:51:53:58:04:61:87:f8:ba:12:
56:f0:c6:6b:da:12:49:98:ba:05:f5:5c:3a:be:2c:7b:55:87:
68:33:58:5e:d3:c2:cc:a4:33:e3:09:80:5c:09:88:1a:65:5c:
01:d1:10:fa:41:7b:e3:81:57:5d:37:e0:6f:80:b5:87:76:bc:
ca:18:57:6b:a5:91:de:09:c4:63:d5:7f:ff:14:b6:cb:8a:09:
d7:d1:01:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:00 2024 by rpki-client on console-ams.rpki-client.org