Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/JiL5Xp6fxzJrej86a_-ZsVbRlVE.roa
File: JiL5Xp6fxzJrej86a_-ZsVbRlVE.roa (raw, json)
Hash identifier: p5NvgGkD2Jj+lKwM3PzAmINW19QiIvmILqCbJ++tcdY=
Subject key identifier: 26:22:F9:5E:9E:9F:C7:32:6B:7A:3F:3A:6B:FF:99:B1:56:D1:95:51
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 018E5C9705A7A437CC1BD9B400E29B168B47
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/JiL5Xp6fxzJrej86a_-ZsVbRlVE.roa
Signing time: Wed 20 Mar 2024 15:59:44 +0000
ROA not before: Wed 20 Mar 2024 15:59:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12238
IP address blocks: 83.136.208.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 21 Mar 2024 12:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5c:97:05:a7:a4:37:cc:1b:d9:b4:00:e2:9b:16:8b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Mar 20 15:59:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2622f95e9e9fc7326b7a3f3a6bff99b156d19551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:77:92:a5:c7:98:71:f0:bb:d9:43:32:1d:a9:
9b:d0:53:57:ba:b4:e3:2d:a1:00:03:c6:d0:af:bc:
ae:05:42:d4:eb:99:17:90:d6:17:a9:50:76:dc:d2:
8a:cd:19:3e:59:28:2e:16:14:ae:f6:bd:f2:aa:ba:
6c:b9:a1:0d:1a:ff:e7:cf:ef:6a:f6:54:b3:58:cb:
d1:88:30:ec:df:2c:49:c8:b6:cd:c9:7d:89:9a:4a:
dc:d5:49:43:ff:cf:54:04:5c:fc:0b:05:51:20:04:
34:84:1f:34:c1:03:50:3b:44:fb:0f:9f:ad:91:4d:
dd:88:97:fd:66:1a:97:9e:5a:c7:fd:5e:2c:ae:86:
d6:c8:a4:7b:4e:7f:3c:f0:20:78:db:96:01:85:1e:
00:fb:da:8a:59:8f:18:fc:a9:0c:b3:e1:2e:07:c7:
97:24:42:5d:9b:d0:be:09:45:1b:18:d2:6e:ae:44:
87:68:99:fc:e8:89:a6:d9:7d:a0:b4:47:f9:23:4c:
8e:29:7c:37:d5:05:16:91:fa:ef:40:28:db:72:8e:
e8:20:24:a8:25:b7:0c:c7:33:a8:10:19:de:07:28:
3d:4b:17:b6:4b:78:fc:dc:34:6f:6e:13:78:ce:d6:
0c:b2:f2:2b:d1:00:34:32:0c:05:3c:fd:93:44:48:
46:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:22:F9:5E:9E:9F:C7:32:6B:7A:3F:3A:6B:FF:99:B1:56:D1:95:51
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/JiL5Xp6fxzJrej86a_-ZsVbRlVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.208.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:b4:47:fe:ca:66:e0:81:68:e2:7c:7a:7f:c4:25:ef:b5:59:
70:bc:08:ec:f7:70:b5:d8:a0:d7:41:64:b2:9f:8a:0d:91:83:
74:d8:9e:eb:0f:83:9e:da:43:ef:79:f8:22:4b:22:8d:2b:81:
2a:d5:d2:a0:8b:d5:43:1a:ad:5b:95:02:3d:84:3a:6a:e9:ea:
4e:b4:6b:e8:53:93:f5:17:80:70:54:b1:85:18:8e:5f:08:f0:
fd:ee:20:ee:1b:75:6f:05:aa:da:d7:c1:66:a3:02:0c:79:2e:
98:da:33:d5:83:33:90:25:f2:80:42:cb:e1:82:c6:a5:00:30:
00:c5:aa:19:68:39:1b:6a:42:66:17:f0:b8:1f:49:f9:b3:40:
b2:3b:f7:69:15:8f:96:ed:a4:6c:9c:e8:a0:b6:7c:57:e0:36:
9e:f1:1d:12:5e:f4:ff:35:2d:20:e8:00:d3:aa:f3:70:59:99:
73:be:b4:5b:7d:b7:8b:e2:cf:d2:3b:67:3e:f0:72:22:fa:7a:
e2:91:f5:41:cc:46:83:71:95:95:5d:9e:05:5a:95:15:3f:9b:
d0:cd:13:be:61:56:6a:75:41:76:f4:bb:ac:63:6f:65:78:3c:
b5:2b:60:63:98:c4:74:47:85:78:c1:70:2e:3b:44:e7:5e:a6:
8e:d0:fc:a1
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAY5clwWnpDfMG9m0AOKbFotHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Nzk5ODhlMGY0OTk3MWEzMjZmNDE5ZTVjZmFjYmZkZGNj
OTkzZTcwHhcNMjQwMzIwMTU1OTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjIyZjk1ZTllOWZjNzMyNmI3YTNmM2E2YmZmOTliMTU2ZDE5NTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3eSpceYcfC72UMyHamb0FNXurTj
LaEAA8bQr7yuBULU65kXkNYXqVB23NKKzRk+WSguFhSu9r3yqrpsuaENGv/nz+9q
9lSzWMvRiDDs3yxJyLbNyX2Jmkrc1UlD/89UBFz8CwVRIAQ0hB80wQNQO0T7D5+t
kU3diJf9ZhqXnlrH/V4srobWyKR7Tn888CB425YBhR4A+9qKWY8Y/KkMs+EuB8eX
JEJdm9C+CUUbGNJurkSHaJn86Imm2X2gtEf5I0yOKXw31QUWkfrvQCjbco7oICSo
JbcMxzOoEBneByg9Sxe2S3j83DRvbhN4ztYMsvIr0QA0MgwFPP2TREhGaQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFCYi+V6en8cya3o/Omv/mbFW0ZVRMB8GA1UdIwQY
MBaAFPh5mI4PSZcaMm9Bnlz6y/3cyZPnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1IbVlqZzlKbHhveWIwR2VYUHJMX2R6SmstYy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0
LTA0NzBiNGJiMzBkYi8xL0ppTDVYcDZmeHpKcmVqODZhXy1ac1ZiUmxWRS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0LTA0NzBiNGJiMzBk
Yi8xLzEtSG1Zamc5Smx4b3liMEdlWFByTF9kekprLWMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJTiNAw
DQYJKoZIhvcNAQELBQADggEBADq0R/7KZuCBaOJ8en/EJe+1WXC8COz3cLXYoNdB
ZLKfig2Rg3TYnusPg57aQ+95+CJLIo0rgSrV0qCL1UMarVuVAj2EOmrp6k60a+hT
k/UXgHBUsYUYjl8I8P3uIO4bdW8FqtrXwWajAgx5LpjaM9WDM5Al8oBCy+GCxqUA
MADFqhloORtqQmYX8LgfSfmzQLI792kVj5btpGyc6KC2fFfgNp7xHRJe9P81LSDo
ANOq83BZmXO+tFt9t4viz9I7Zz7wciL6euKR9UHMRoNxlZVdngValRU/m9DNE75h
Vmp1QXb0u6xjb2V4PLUrYGOYxHRHhXjBcC47ROdepo7Q/KE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:13 2024 by rpki-client on console-ams.rpki-client.org