Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/j11laZNjVYNxtTnfK6HnhgCyiIc.roa
File: j11laZNjVYNxtTnfK6HnhgCyiIc.roa (raw, json)
Hash identifier: z7fLB9nESDq+ieC33z28UWtC6XI/W9+G8mMBPoIm++8=
Subject key identifier: 8F:5D:65:69:93:63:55:83:71:B5:39:DF:2B:A1:E7:86:00:B2:88:87
Certificate issuer: /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial: 018CC94CAB59EB9E22654213E6D7EC37183D
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/j11laZNjVYNxtTnfK6HnhgCyiIc.roa
Signing time: Tue 02 Jan 2024 08:31:34 +0000
ROA not before: Tue 02 Jan 2024 08:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61108
IP address blocks: 185.226.40.0/22 maxlen: 22
62.249.96.0/22 maxlen: 22
88.218.52.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 22 Feb 2024 10:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:ab:59:eb:9e:22:65:42:13:e6:d7:ec:37:18:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Validity
Not Before: Jan 2 08:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f5d65699363558371b539df2ba1e78600b28887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a6:cd:f1:79:e2:3c:1a:5b:ea:ab:42:df:4a:
77:ab:10:65:49:f0:92:51:50:d6:e4:0b:46:55:c1:
d0:9e:c3:8d:06:e4:0b:dd:03:44:fc:8e:b1:61:b9:
5b:53:c4:1b:40:27:90:4b:63:78:e1:f0:8c:7a:82:
a7:92:6d:71:52:2a:6e:5a:2e:ab:96:27:f0:76:be:
a8:71:1c:73:14:b9:c2:49:3c:7f:6d:3c:e2:32:34:
81:c2:ba:4b:79:e4:3b:b2:2d:c7:df:48:31:7c:58:
e9:d0:a7:63:15:bb:61:1f:cd:32:e2:fe:66:b9:0a:
05:48:22:17:16:12:e9:44:c4:f2:0d:c7:d9:9b:6f:
46:3d:d8:2a:8c:0a:e2:57:19:52:5d:c4:b6:1d:11:
2e:5d:f1:d0:7b:31:a6:d9:4b:be:1e:bc:b7:9b:ce:
4c:f2:8c:ee:6a:de:a9:2e:81:22:39:46:d3:ce:8a:
1f:aa:03:3e:23:3c:7f:74:06:7c:99:88:1c:2b:52:
18:74:86:3c:90:b7:24:e4:3d:30:79:c7:3d:77:75:
8c:6c:67:c1:15:63:7d:41:16:6e:53:dd:2f:c3:8b:
31:e3:1f:d5:80:55:d6:54:b5:4e:4b:0a:af:db:28:
ac:a1:fd:a4:58:7c:55:c8:50:af:c2:da:6d:3a:d0:
a2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5D:65:69:93:63:55:83:71:B5:39:DF:2B:A1:E7:86:00:B2:88:87
X509v3 Authority Key Identifier:
keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/j11laZNjVYNxtTnfK6HnhgCyiIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.249.96.0/22
88.218.52.0/22
185.226.40.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:f7:a5:9c:4e:af:e8:5b:50:d6:13:07:f9:95:9a:0f:dd:e8:
0e:b7:14:df:1e:cf:de:ed:72:ff:20:64:55:2c:75:d9:cc:23:
29:0e:b5:9a:42:cc:bd:2a:3c:35:ff:ae:b6:cd:3f:13:00:da:
3c:a1:d8:3f:d1:e8:08:49:5c:ab:8e:cd:b5:f2:fe:94:fc:ab:
e7:f2:3d:f0:ef:b1:ad:41:6f:04:c4:96:45:a5:9d:b2:c2:05:
11:a3:36:10:12:99:14:b5:67:45:54:80:23:da:84:9d:60:f5:
89:28:05:56:27:e8:3e:92:71:aa:d6:aa:76:eb:65:09:d4:6b:
8a:66:63:96:7f:b3:5b:a6:08:b6:24:bc:09:46:03:4b:6f:ba:
a8:2a:bb:d3:76:70:68:e8:4f:dd:9e:10:96:c0:1d:14:a1:86:
33:36:1c:f9:d5:64:85:b8:57:b2:c2:6f:62:02:6a:3e:0a:4b:
21:50:62:28:d8:9b:38:9d:0a:70:fd:ab:6a:a3:97:ae:52:91:
04:c9:c5:50:f7:46:d4:a6:71:98:07:6c:a9:62:70:3b:00:1a:
4b:f5:d7:21:44:36:a4:ec:9b:f8:b7:a1:48:f6:11:f7:1c:05:
52:47:2e:c4:08:e1:3b:e5:76:23:e6:6d:d3:4f:ac:9f:24:12:
72:ea:e7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:04 2024 by rpki-client on console-fra.rpki-client.org