Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/JVAN1Js2V80SmQmMyeYepUzWmbI.roa
File: JVAN1Js2V80SmQmMyeYepUzWmbI.roa (raw, json)
Hash identifier: V4JP5peQi6RC7b2zCRmSkVcoajZQw+ky8nZIwyc/SfA=
Subject key identifier: 25:50:0D:D4:9B:36:57:CD:12:99:09:8C:C9:E6:1E:A5:4C:D6:99:B2
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 01856ED4D9A19B3BAE695EADFD3DD3593E5C
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/JVAN1Js2V80SmQmMyeYepUzWmbI.roa
Signing time: Sun 01 Jan 2023 19:35:21 +0000
ROA not before: Sun 01 Jan 2023 19:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6672
IP address blocks: 37.202.8.0/21 maxlen: 21
212.113.96.0/19 maxlen: 24
2a02:9d8::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:d9:a1:9b:3b:ae:69:5e:ad:fd:3d:d3:59:3e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 1 19:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25500dd49b3657cd1299098cc9e61ea54cd699b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ba:e1:96:fb:27:ea:96:51:15:39:d8:d5:e1:
d6:f4:70:40:e1:87:7b:c4:26:03:e8:2d:03:f1:fd:
4f:71:d4:b6:5a:92:84:6e:a4:a4:94:93:bc:ed:85:
9a:b4:19:f7:7d:55:97:54:11:c8:29:26:16:c7:73:
62:d6:c9:8e:69:af:5e:a4:58:ae:04:68:67:e1:ea:
bf:51:3b:38:e2:7d:e3:40:ef:75:fe:12:b3:23:05:
d6:51:8b:5b:c7:ed:76:f5:17:ca:ff:fa:41:4c:28:
7c:ea:59:7f:0e:42:7c:9d:76:72:82:b4:17:44:7e:
ca:02:b6:d2:02:c2:b0:bc:86:1b:6d:cc:0e:6f:27:
38:63:2f:e1:48:86:88:ea:20:81:97:89:2b:1c:e3:
e7:d3:de:6f:1b:74:19:7b:48:e9:37:18:d1:e5:80:
ad:3c:df:d6:db:bb:70:8c:9c:35:34:85:c7:09:35:
81:04:1e:3e:64:71:b7:81:bb:d8:78:6c:cb:57:42:
de:8a:94:4d:0b:30:a2:ca:14:70:47:fd:37:cc:bb:
2f:8d:d1:ae:82:17:cb:fe:05:0c:b5:f5:fd:a8:0c:
70:2e:1d:97:3f:df:16:d5:15:84:80:17:64:1a:93:
e7:a5:58:b8:f1:36:fe:b2:a8:50:7e:2f:d3:7d:df:
92:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:50:0D:D4:9B:36:57:CD:12:99:09:8C:C9:E6:1E:A5:4C:D6:99:B2
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/JVAN1Js2V80SmQmMyeYepUzWmbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.8.0/21
212.113.96.0/19
IPv6:
2a02:9d8::/32
Signature Algorithm: sha256WithRSAEncryption
7d:9d:a5:ab:b3:a3:57:43:75:9a:f2:6d:3d:e9:06:94:ac:54:
59:57:89:f3:6a:4d:ff:f9:7a:0e:a7:bd:96:65:04:7a:f3:b5:
82:5f:c5:da:06:94:0c:4e:60:24:53:ef:f8:2d:80:bd:1d:c3:
a2:e1:b5:ab:0d:8c:02:92:8a:ad:ba:31:72:50:f7:1e:12:fa:
fc:44:98:9a:c0:61:4f:6b:f4:ea:a6:6b:18:dd:c6:17:4d:11:
af:93:a9:77:72:49:6f:77:e0:7c:91:ed:43:0a:66:0a:ba:d4:
b9:84:f0:f0:6a:28:89:20:6b:7d:e5:7c:44:e4:c1:00:bb:04:
16:e0:68:fb:c7:77:e3:41:51:c1:f0:3a:18:02:5c:89:89:be:
0d:df:a8:f4:22:a8:1e:82:6f:bb:8c:dd:92:09:24:f2:82:db:
99:0d:6f:d4:e1:b6:61:73:c1:ad:4d:cf:a3:f7:13:a7:c9:e5:
56:25:19:5f:61:27:2f:6e:58:81:ca:64:d8:b1:0f:eb:91:28:
9e:53:26:f0:7c:8f:f6:4c:86:2f:27:bb:f3:4c:a4:12:46:4e:
14:d4:dd:87:e5:4f:07:bc:0c:73:ce:ab:6c:d9:e9:94:a0:91:
d3:d6:8b:c5:26:61:5a:20:fc:2c:79:de:aa:96:f1:91:71:e6:
da:d6:d6:71
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVu1NmhmzuuaV6t/T3TWT5cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4
NTRmMjkwHhcNMjMwMTAxMTkzNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTUwMGRkNDliMzY1N2NkMTI5OTA5OGNjOWU2MWVhNTRjZDY5OWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7rhlvsn6pZRFTnY1eHW9HBA4Yd7
xCYD6C0D8f1PcdS2WpKEbqSklJO87YWatBn3fVWXVBHIKSYWx3Ni1smOaa9epFiu
BGhn4eq/UTs44n3jQO91/hKzIwXWUYtbx+129RfK//pBTCh86ll/DkJ8nXZygrQX
RH7KArbSAsKwvIYbbcwObyc4Yy/hSIaI6iCBl4krHOPn095vG3QZe0jpNxjR5YCt
PN/W27twjJw1NIXHCTWBBB4+ZHG3gbvYeGzLV0LeipRNCzCiyhRwR/03zLsvjdGu
ghfL/gUMtfX9qAxwLh2XP98W1RWEgBdkGpPnpVi48Tb+sqhQfi/Tfd+S+wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFCVQDdSbNlfNEpkJjMnmHqVM1pmyMB8GA1UdIwQY
MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct
MDU3ODE3YmE5ZmI3LzEvSlZBTjFKczJWODBTbVFtTXllWWVwVXpXbWJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3
LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDJcoIAwQF
1HFgMA0EAgACMAcDBQAqAgnYMA0GCSqGSIb3DQEBCwUAA4IBAQB9naWrs6NXQ3Wa
8m096QaUrFRZV4nzak3/+XoOp72WZQR687WCX8XaBpQMTmAkU+/4LYC9HcOi4bWr
DYwCkoqtujFyUPceEvr8RJiawGFPa/TqpmsY3cYXTRGvk6l3cklvd+B8ke1DCmYK
utS5hPDwaiiJIGt95XxE5MEAuwQW4Gj7x3fjQVHB8DoYAlyJib4N36j0Iqgegm+7
jN2SCSTygtuZDW/U4bZhc8GtTc+j9xOnyeVWJRlfYScvbliBymTYsQ/rkSieUybw
fI/2TIYvJ7vzTKQSRk4U1N2H5U8HvAxzzqts2emUoJHT1ovFJmFaIPwsed6qlvGR
ceba1tZx
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:33 2024 by rpki-client on console-fra.rpki-client.org