Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/Jo5hQLgM2dFFDt0E1MVVWftLJfc.roa
File: Jo5hQLgM2dFFDt0E1MVVWftLJfc.roa (raw, json)
Hash identifier: Vgjls0cY2n0C93U8WDWv1kMCnFJ3lElEttgeGmgyxh0=
Subject key identifier: 26:8E:61:40:B8:0C:D9:D1:45:0E:DD:04:D4:C5:55:59:FB:4B:25:F7
Certificate issuer: /CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Certificate serial: 018FE7C830CE009948190FC7DECA7DAEFB90
Authority key identifier: 9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/Jo5hQLgM2dFFDt0E1MVVWftLJfc.roa
Signing time: Wed 05 Jun 2024 09:43:27 +0000
ROA not before: Wed 05 Jun 2024 09:43:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206406
IP address blocks: 185.187.92.0/24 maxlen: 24
185.187.93.0/24 maxlen: 24
185.187.94.0/24 maxlen: 24
185.187.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 13:37:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e7:c8:30:ce:00:99:48:19:0f:c7:de:ca:7d:ae:fb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Validity
Not Before: Jun 5 09:43:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=268e6140b80cd9d1450edd04d4c55559fb4b25f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:09:de:e0:55:54:2c:9b:f8:0b:9d:d5:3c:ed:
b8:9e:da:c1:b5:11:7b:70:3d:33:42:72:44:cc:cf:
a5:f8:a3:78:b7:7a:14:68:aa:df:d6:f2:41:59:30:
d9:39:af:23:c3:8d:56:14:0f:10:ff:ea:92:69:fc:
76:2e:84:eb:5b:1a:87:67:ac:08:a7:8e:b0:02:ca:
7a:6a:8a:82:eb:be:9e:6b:28:ae:2b:9e:a3:db:09:
4d:97:89:24:e3:a0:33:1a:fc:9c:7c:ce:8d:a5:74:
f6:5c:12:60:c5:16:01:18:b0:e7:e8:3c:70:8d:a9:
df:30:66:ce:67:9b:3c:6b:e0:b3:ad:f2:26:03:4e:
24:2b:de:a0:41:b7:8e:96:b3:60:e1:26:7b:a6:98:
5d:cc:74:75:e3:d6:1c:5d:1e:43:19:48:1d:aa:a0:
4e:a0:5e:a1:e4:ab:55:4a:fd:85:d7:c8:f8:8b:a3:
f4:7c:76:a4:ca:0b:bf:28:ad:9e:c8:ea:84:ee:cb:
a8:63:14:a7:85:36:3c:c9:be:8c:98:cf:b0:15:fd:
f4:6e:24:00:39:fa:30:5c:76:e5:15:5a:00:7b:da:
d9:c7:66:c7:61:79:1b:c2:0a:e6:8e:b1:60:0f:ee:
02:10:58:c6:60:5e:9d:f4:9b:d8:04:84:f8:5a:7a:
39:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8E:61:40:B8:0C:D9:D1:45:0E:DD:04:D4:C5:55:59:FB:4B:25:F7
X509v3 Authority Key Identifier:
keyid:9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/Jo5hQLgM2dFFDt0E1MVVWftLJfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.92.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:f9:aa:9a:17:9a:4c:db:31:f9:11:7f:af:5a:90:41:14:75:
54:eb:cc:07:c0:11:52:4d:1b:85:71:84:03:43:1f:c6:b5:b4:
81:88:c9:3e:e3:5e:c0:d7:41:f7:ea:d7:ba:55:81:cc:48:3a:
80:87:9c:eb:ce:21:eb:36:de:5f:c9:8d:03:8a:08:97:d4:e4:
bd:5d:dd:bb:55:09:d3:0c:34:4b:82:78:56:f3:b5:8c:09:e5:
de:1a:81:38:e7:61:67:58:2a:18:c0:50:f6:bc:a3:d2:eb:9b:
b7:d2:96:51:2d:a4:67:74:7a:73:44:15:41:cc:d1:c0:9e:e3:
78:5b:03:2a:65:75:9b:9a:bd:68:f4:6c:f5:54:f9:92:57:8a:
c6:2d:1d:42:e1:54:fc:b1:e0:92:c5:a0:68:e0:14:fa:a8:f1:
78:88:4c:f4:16:1d:ef:71:8d:8e:05:1a:87:d6:45:07:48:df:
55:4a:4b:be:7c:d8:1e:67:0f:e3:d6:9d:42:1e:8c:5e:65:23:
85:1e:ac:0e:12:79:b5:4e:de:ca:81:91:52:0d:b8:98:82:49:
2b:26:3e:a1:91:a5:bb:ae:0f:be:20:51:ad:be:bd:ae:38:fd:
ae:cd:ab:a9:13:1e:9e:94:7b:6c:ce:cc:e7:d2:44:3b:38:d3:
cb:3a:a9:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY/nyDDOAJlIGQ/H3sp9rvuQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzRiMTg2MjcxY2NiODljNWU1OGIzMGU3MGJkNzQxMDlj
YzI4NGEwHhcNMjQwNjA1MDk0MzI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjhlNjE0MGI4MGNkOWQxNDUwZWRkMDRkNGM1NTU1OWZiNGIyNWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQne4FVULJv4C53VPO24ntrBtRF7
cD0zQnJEzM+l+KN4t3oUaKrf1vJBWTDZOa8jw41WFA8Q/+qSafx2LoTrWxqHZ6wI
p46wAsp6aoqC676eayiuK56j2wlNl4kk46AzGvycfM6NpXT2XBJgxRYBGLDn6Dxw
janfMGbOZ5s8a+CzrfImA04kK96gQbeOlrNg4SZ7pphdzHR149YcXR5DGUgdqqBO
oF6h5KtVSv2F18j4i6P0fHakygu/KK2eyOqE7suoYxSnhTY8yb6MmM+wFf30biQA
OfowXHblFVoAe9rZx2bHYXkbwgrmjrFgD+4CEFjGYF6d9JvYBIT4Wno55QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCaOYUC4DNnRRQ7dBNTFVVn7SyX3MB8GA1UdIwQY
MBaAFJ40sYYnHMuJxeWLMOcL10EJzChKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpTeGhpY2N5NG5GNVlzdzV3dlhRUW5NS0VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wYzM3YzMtOTk5MC00NTk2LTk5ZTkt
ZGQ1ZmZkNTMxNTcxLzEvSm81aFFMZ00yZEZGRHQwRTFNVlZXZnRMSmZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8wYzM3YzMtOTk5MC00NTk2LTk5ZTktZGQ1ZmZkNTMxNTcx
LzEvbmpTeGhpY2N5NG5GNVlzdzV3dlhRUW5NS0VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubtcMA0G
CSqGSIb3DQEBCwUAA4IBAQC2+aqaF5pM2zH5EX+vWpBBFHVU68wHwBFSTRuFcYQD
Qx/GtbSBiMk+417A10H36te6VYHMSDqAh5zrziHrNt5fyY0DigiX1OS9Xd27VQnT
DDRLgnhW87WMCeXeGoE452FnWCoYwFD2vKPS65u30pZRLaRndHpzRBVBzNHAnuN4
WwMqZXWbmr1o9Gz1VPmSV4rGLR1C4VT8seCSxaBo4BT6qPF4iEz0Fh3vcY2OBRqH
1kUHSN9VSku+fNgeZw/j1p1CHoxeZSOFHqwOEnm1Tt7KgZFSDbiYgkkrJj6hkaW7
rg++IFGtvr2uOP2uzaupEx6elHtszszn0kQ7ONPLOqm1
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:06 2024 by rpki-client on console-ams.rpki-client.org