Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/j-rwfiImD8PrxJgAOockYzjaMKY.roa
File: j-rwfiImD8PrxJgAOockYzjaMKY.roa (raw, json)
Hash identifier: GAjWrv9IMG8dpbjHlfCKWqIPslOC1bKFavlmjMBIAZA=
Subject key identifier: 8F:EA:F0:7E:22:26:0F:C3:EB:C4:98:00:3A:87:24:63:38:DA:30:A6
Certificate issuer: /CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Certificate serial: 018571556DB115BA8129E667ED4B02ED3AC2
Authority key identifier: AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/j-rwfiImD8PrxJgAOockYzjaMKY.roa
Signing time: Mon 02 Jan 2023 07:15:02 +0000
ROA not before: Mon 02 Jan 2023 07:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25386
IP address blocks: 62.80.160.0/19 maxlen: 20
185.117.240.0/22 maxlen: 23
2a06:9000::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:6d:b1:15:ba:81:29:e6:67:ed:4b:02:ed:3a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Validity
Not Before: Jan 2 07:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8feaf07e22260fc3ebc498003a87246338da30a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:89:e1:d6:a1:e9:b2:1c:cd:83:3c:a2:89:92:
45:4d:e3:25:f3:1b:8d:35:13:35:c3:f2:e6:d9:c4:
b7:0d:dd:cb:6b:f3:ea:31:89:7f:92:36:f4:20:7c:
ed:67:cc:a4:de:44:cb:c7:0e:48:ec:43:16:47:cf:
b1:71:90:73:5e:61:b5:71:22:74:dc:19:cf:85:f9:
1e:f1:7a:37:bf:1a:df:be:f3:b2:a6:0f:1c:72:c5:
1e:b9:e2:12:eb:87:04:b4:9c:c9:12:5a:6b:dc:b9:
bd:6d:6f:87:b9:8a:30:8d:93:94:d7:92:21:05:3b:
a6:94:a4:5f:b2:d7:9b:12:25:2d:4d:22:1f:d8:f4:
b8:3e:65:09:d0:27:c1:4e:46:99:ac:5a:35:2d:2c:
84:62:9e:84:2b:4e:22:14:ae:54:f0:ba:c2:73:48:
c4:8f:9a:ca:cc:c2:72:7d:23:cb:40:12:38:4f:d4:
e9:34:6c:9a:3a:24:58:e0:af:4b:71:e2:2e:20:77:
cd:14:3f:4d:b7:b0:1e:39:25:8e:37:3e:b1:8b:f7:
19:b2:7e:ab:ea:49:4c:6c:46:50:39:9f:f8:4f:15:
f5:5a:06:8c:2d:af:53:5e:61:c1:3e:d8:41:d6:f0:
a3:d8:7d:51:6b:33:4e:f1:e6:9e:ee:8d:af:67:4a:
fe:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EA:F0:7E:22:26:0F:C3:EB:C4:98:00:3A:87:24:63:38:DA:30:A6
X509v3 Authority Key Identifier:
keyid:AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/j-rwfiImD8PrxJgAOockYzjaMKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.80.160.0/19
185.117.240.0/22
IPv6:
2a06:9000::/29
Signature Algorithm: sha256WithRSAEncryption
3a:fd:db:e8:c0:ef:42:de:3b:43:d6:03:9c:00:3a:49:b7:ee:
fe:10:eb:f1:32:60:4c:f9:41:0e:e7:f2:aa:5a:73:4e:d2:fd:
11:03:58:6a:e2:91:ae:3b:27:99:8a:47:05:9c:d1:0e:48:a6:
fe:86:de:7f:25:00:1f:3f:08:37:97:96:41:99:4a:15:84:fa:
e9:b7:d9:63:32:6d:86:e7:49:3d:8f:87:7b:61:9a:f3:d2:12:
59:55:bb:69:c0:f6:b9:05:0f:18:58:bf:4c:35:e8:0e:28:de:
35:d5:45:b5:2c:80:fb:a7:df:e4:62:bf:4f:0a:a6:66:d6:9d:
71:97:1c:26:10:a6:2b:48:71:77:84:62:13:8c:dc:36:5e:92:
e2:2f:f7:f0:46:4b:1b:eb:64:12:4e:cb:18:2c:f8:5c:fa:d1:
db:a2:86:71:d0:ae:ee:41:c5:32:d4:c0:32:94:88:4f:ba:9d:
c0:ce:bd:9c:89:3e:1d:49:2a:d7:6b:61:82:ef:52:73:db:3a:
fe:8e:90:db:4d:57:4d:9f:16:73:42:ba:1f:4c:73:c8:f1:87:
bc:fc:71:ee:98:92:f8:00:50:45:f2:86:65:99:29:a3:73:e8:
0e:45:19:f7:e4:68:41:66:a7:86:31:24:01:ec:ce:75:bf:e3:
b6:8d:41:62
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVxVW2xFbqBKeZn7UsC7TrCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYmQ4ZTk5ZjgyN2ZmOTVkMjgxZDRmZjdiYzI3ZjA0NWZh
YmYxMDUwHhcNMjMwMTAyMDcxNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmVhZjA3ZTIyMjYwZmMzZWJjNDk4MDAzYTg3MjQ2MzM4ZGEzMGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ynh1qHpshzNgzyiiZJFTeMl8xuN
NRM1w/Lm2cS3Dd3La/PqMYl/kjb0IHztZ8yk3kTLxw5I7EMWR8+xcZBzXmG1cSJ0
3BnPhfke8Xo3vxrfvvOypg8ccsUeueIS64cEtJzJElpr3Lm9bW+HuYowjZOU15Ih
BTumlKRfstebEiUtTSIf2PS4PmUJ0CfBTkaZrFo1LSyEYp6EK04iFK5U8LrCc0jE
j5rKzMJyfSPLQBI4T9TpNGyaOiRY4K9LceIuIHfNFD9Nt7AeOSWONz6xi/cZsn6r
6klMbEZQOZ/4TxX1WgaMLa9TXmHBPthB1vCj2H1RazNO8eae7o2vZ0r+wwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFI/q8H4iJg/D68SYADqHJGM42jCmMB8GA1UdIwQY
MBaAFK29jpn4J/+V0oHU/3vCfwRfq/EFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmIyT21mZ25fNVhTZ2RUX2U4Sl9CRi1yOFFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iOTkzYzctZmE4ZC00M2MwLTkzNzQt
MWQzMWExOTYwMTQ3LzEvai1yd2ZpSW1EOFByeEpnQU9vY2tZemphTUtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9iOTkzYzctZmE4ZC00M2MwLTkzNzQtMWQzMWExOTYwMTQ3
LzEvcmIyT21mZ25fNVhTZ2RUX2U4Sl9CRi1yOFFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFPlCgAwQC
uXXwMA0EAgACMAcDBQMqBpAAMA0GCSqGSIb3DQEBCwUAA4IBAQA6/dvowO9C3jtD
1gOcADpJt+7+EOvxMmBM+UEO5/KqWnNO0v0RA1hq4pGuOyeZikcFnNEOSKb+ht5/
JQAfPwg3l5ZBmUoVhPrpt9ljMm2G50k9j4d7YZrz0hJZVbtpwPa5BQ8YWL9MNegO
KN411UW1LID7p9/kYr9PCqZm1p1xlxwmEKYrSHF3hGITjNw2XpLiL/fwRksb62QS
TssYLPhc+tHbooZx0K7uQcUy1MAylIhPup3Azr2ciT4dSSrXa2GC71Jz2zr+jpDb
TVdNnxZzQrofTHPI8Ye8/HHumJL4AFBF8oZlmSmjc+gORRn35GhBZqeGMSQB7M51
v+O2jUFi
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:40 2024 by rpki-client on console-ams.rpki-client.org