Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/JNwK-VjDusnLfOH0UoJnPCRTVL4.roa
File: JNwK-VjDusnLfOH0UoJnPCRTVL4.roa (raw, json)
Hash identifier: SSFzd6Y+lwyh0SvsR1Fi2CmGBnMFmT7OYd2ZlmANFkA=
Subject key identifier: 24:DC:0A:F9:58:C3:BA:C9:CB:7C:E1:F4:52:82:67:3C:24:53:54:BE
Certificate issuer: /CN=125ae2cfd315c131193484665acada7c013163ec
Certificate serial: 018571DE946AE224BA62BA3C9494EC0F1B0B
Authority key identifier: 12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/JNwK-VjDusnLfOH0UoJnPCRTVL4.roa
Signing time: Mon 02 Jan 2023 09:44:50 +0000
ROA not before: Mon 02 Jan 2023 09:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204736
IP address blocks: 185.241.100.0/24 maxlen: 24
185.241.103.0/24 maxlen: 24
185.241.102.0/24 maxlen: 24
185.241.101.0/24 maxlen: 24
2a0d:4580:60::/48 maxlen: 48
2a0d:4580:120::/48 maxlen: 48
2a0d:4580:100::/48 maxlen: 48
2a0d:4580:80::/48 maxlen: 48
2a0d:4580:40::/48 maxlen: 48
2a0d:4580:20::/48 maxlen: 48
2a0d:4580:131::/48 maxlen: 48
2a0d:4580:130::/48 maxlen: 48
2a0d:4580:110::/48 maxlen: 48
2a0d:4580:90::/48 maxlen: 48
2a0d:4580:70::/48 maxlen: 48
2a0d:4580:50::/48 maxlen: 48
2a0d:4580:30::/48 maxlen: 48
2a0d:4580:10::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:94:6a:e2:24:ba:62:ba:3c:94:94:ec:0f:1b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125ae2cfd315c131193484665acada7c013163ec
Validity
Not Before: Jan 2 09:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24dc0af958c3bac9cb7ce1f45282673c245354be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ac:f5:d0:1f:65:0e:9d:9c:e8:69:0a:0f:f0:
7e:52:e5:27:7c:2b:90:b0:fb:93:39:6a:d2:14:b1:
6a:8a:fb:54:d5:8b:46:38:32:9b:d1:81:c9:13:b3:
b3:b8:9c:71:a8:69:b8:76:b6:07:01:b7:45:45:e8:
d0:7a:d5:6d:c2:d8:34:d6:bc:f6:5f:16:93:5f:76:
6f:6f:a3:27:a4:ce:b5:7e:bb:51:a7:2b:7e:03:1f:
92:31:a3:69:da:f2:99:d2:a2:93:2d:3c:b5:28:f0:
c1:cf:a0:ee:c6:5b:d4:c8:91:8f:39:9a:4a:85:66:
21:16:9f:66:16:93:de:74:de:ed:d0:05:c0:b5:d0:
d3:ad:aa:51:dc:ac:40:9c:91:60:19:ee:62:70:38:
75:1d:09:d9:d1:20:8d:fe:6d:ac:d6:77:27:3e:d8:
db:49:39:fb:e8:6e:b4:6d:64:0a:6d:91:e2:61:00:
0d:49:15:09:64:f7:90:c7:7a:6c:11:85:af:53:52:
f3:ad:d9:d3:39:e0:6d:0c:c1:bd:af:a2:2b:b7:de:
c8:af:1f:ee:2a:bb:60:40:73:46:de:14:8f:58:aa:
da:b7:03:c4:8e:24:1e:7e:5b:5d:0a:7b:53:ac:8b:
6b:c6:15:02:c9:1d:16:8b:8e:69:1b:71:89:b7:06:
90:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DC:0A:F9:58:C3:BA:C9:CB:7C:E1:F4:52:82:67:3C:24:53:54:BE
X509v3 Authority Key Identifier:
keyid:12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/JNwK-VjDusnLfOH0UoJnPCRTVL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.100.0/22
IPv6:
2a0d:4580:10::/48
2a0d:4580:20::/48
2a0d:4580:30::/48
2a0d:4580:40::/48
2a0d:4580:50::/48
2a0d:4580:60::/48
2a0d:4580:70::/48
2a0d:4580:80::/48
2a0d:4580:90::/48
2a0d:4580:100::/48
2a0d:4580:110::/48
2a0d:4580:120::/48
2a0d:4580:130::/47
Signature Algorithm: sha256WithRSAEncryption
2f:49:b1:a2:00:36:00:26:c5:de:ad:9e:96:c7:d9:d4:8c:10:
2e:22:ce:b7:cb:97:f6:5f:6e:14:99:fc:22:95:90:16:93:61:
cb:6b:d9:79:0d:8d:f5:57:ff:74:2b:32:47:a1:43:bd:8c:24:
ba:b1:41:b6:56:a1:a4:76:f7:96:60:6a:dc:3b:e0:7d:b5:b0:
78:57:e9:73:97:21:87:5c:62:0c:88:5b:6c:5b:5b:c4:6d:2b:
28:a0:ab:f3:05:c8:99:ff:85:16:ea:f0:64:ea:f5:1f:80:97:
29:5f:a9:b2:f1:ec:23:54:74:a2:72:2d:55:34:66:51:b3:3b:
4b:36:50:b3:9a:12:51:7b:c1:4f:1e:fb:9f:41:ef:92:32:ad:
2b:03:c6:6f:b8:f5:2b:61:6b:d9:db:ea:76:bc:7b:a8:d5:b4:
69:cf:de:58:18:66:01:54:51:8e:be:ee:c7:3d:67:2e:91:fb:
24:88:6f:3f:9e:0f:e0:1f:87:99:4a:f7:b1:24:bb:a8:0d:c3:
b4:47:a0:94:3f:45:41:15:e9:f9:dd:5d:19:48:da:8b:67:4c:
c0:e8:69:49:2f:2e:7d:99:8c:74:5a:c0:53:d3:49:d4:75:ec:
84:d0:98:d4:1d:2f:75:8d:13:6d:fc:a2:db:62:13:03:a2:9c:
87:de:ff:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:20:13 2024 by rpki-client on console-ams.rpki-client.org