Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/JW2XJVqZY4DMuUaDoUCKT4dazgc.roa
File: JW2XJVqZY4DMuUaDoUCKT4dazgc.roa (raw, json)
Hash identifier: M36vmNFZm+D8NCUFXZwp4m8zdNlxoNtBU5XfkFB+LU4=
Subject key identifier: 25:6D:97:25:5A:99:63:80:CC:B9:46:83:A1:40:8A:4F:87:5A:CE:07
Certificate issuer: /CN=893afc6efe62990a26932f40e150b27eed539c4b
Certificate serial: 01856F390548CA362C6DB216BD8AE1D7F982
Authority key identifier: 89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/JW2XJVqZY4DMuUaDoUCKT4dazgc.roa
Signing time: Sun 01 Jan 2023 21:24:45 +0000
ROA not before: Sun 01 Jan 2023 21:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34263
IP address blocks: 188.65.136.0/23 maxlen: 23
178.16.176.0/20 maxlen: 20
188.65.138.0/23 maxlen: 23
188.65.140.0/22 maxlen: 22
82.197.0.0/19 maxlen: 19
185.146.12.0/22 maxlen: 22
95.130.24.0/21 maxlen: 21
88.85.128.0/19 maxlen: 19
79.141.144.0/20 maxlen: 20
2a00:ae00::/29 maxlen: 29
2a00:ae00::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:05:48:ca:36:2c:6d:b2:16:bd:8a:e1:d7:f9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afc6efe62990a26932f40e150b27eed539c4b
Validity
Not Before: Jan 1 21:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=256d97255a996380ccb94683a1408a4f875ace07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:31:e7:cf:34:07:8c:98:e8:1b:20:73:f6:c2:
ac:7c:35:69:9e:fe:41:8a:0e:27:95:31:ed:e4:d2:
ee:b2:19:26:c1:52:80:92:40:2b:65:8a:22:18:c7:
5f:99:b7:dc:23:e6:36:81:4c:07:ba:7d:48:6c:6e:
4a:ad:1b:4e:2c:da:a5:98:dd:16:79:bf:d2:a3:92:
a8:b6:04:d4:8c:5b:ab:79:42:da:f8:e3:71:47:c6:
9a:b8:d1:8a:2f:2c:74:de:3b:1f:92:c6:e9:a8:33:
47:19:6c:8d:f0:64:0d:10:bf:52:49:55:7b:fb:e4:
70:0e:e7:d5:cb:28:51:f2:61:a0:46:de:04:51:ae:
ec:81:d8:c8:b5:7f:d4:e1:70:42:3c:89:82:37:49:
91:5d:e6:84:dc:ff:d1:b5:b2:e4:4d:53:76:ae:2c:
fb:73:43:11:a2:b4:9c:60:98:55:9a:65:04:91:58:
f4:22:d3:37:43:ae:8d:d5:0d:c8:5f:49:dd:62:fb:
1e:fd:7c:1a:f8:6c:19:a6:60:00:85:8a:0f:12:f4:
51:44:5c:dc:c8:15:b8:5d:0a:9d:36:3c:23:24:99:
e9:d7:b3:60:ed:d3:67:05:aa:4f:ac:46:55:2f:9a:
2d:99:9d:88:5b:59:e8:29:e9:4d:e2:c1:8b:ab:94:
b2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6D:97:25:5A:99:63:80:CC:B9:46:83:A1:40:8A:4F:87:5A:CE:07
X509v3 Authority Key Identifier:
keyid:89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/JW2XJVqZY4DMuUaDoUCKT4dazgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.144.0/20
82.197.0.0/19
88.85.128.0/19
95.130.24.0/21
178.16.176.0/20
185.146.12.0/22
188.65.136.0/21
IPv6:
2a00:ae00::/29
Signature Algorithm: sha256WithRSAEncryption
03:59:1d:9b:70:db:45:e8:ef:8b:63:70:61:36:07:96:25:09:
9f:28:46:5a:79:1d:5c:c9:66:6e:83:50:e0:31:ee:93:f4:7e:
75:43:7c:cf:d0:90:7c:98:d9:80:89:b1:23:8f:37:41:50:ae:
dc:4b:20:e6:ca:d5:77:d0:cd:dc:3d:10:e3:46:58:10:7b:a7:
ab:9b:4f:18:d4:a8:d7:65:cd:87:7b:e1:e1:25:ee:2a:f7:52:
76:19:a2:d4:bf:7f:be:04:9c:00:8e:d2:4a:2f:e9:bf:ad:94:
04:33:4c:a3:cd:a3:3b:53:e8:b3:bc:3b:a9:c7:73:18:86:1f:
74:bf:5b:34:c8:21:4c:2b:fd:92:51:37:b5:05:0d:d9:fd:6b:
63:9a:1f:b5:a9:33:32:02:ae:f8:e0:c5:8b:76:fe:a5:bf:e8:
44:dd:81:18:66:f7:52:ef:c6:8f:67:4c:7e:c4:be:d6:0d:b4:
07:42:9c:fa:e0:c4:dc:70:62:d7:6e:48:12:fb:01:2d:1b:59:
37:08:89:cc:96:37:b7:77:5c:67:59:8b:e2:79:00:a4:a5:e4:
cc:48:dc:8e:7f:74:4b:f2:05:a8:d6:57:85:26:d6:59:b5:6c:
f6:0b:60:f8:16:60:75:bd:10:f9:79:8f:45:8e:ec:df:ac:84:
e1:9d:ec:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:14 2024 by rpki-client on console-fra.rpki-client.org