Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/JasWF-ds4IgPB5KdlmqcqCf-KiY.roa
File: JasWF-ds4IgPB5KdlmqcqCf-KiY.roa (raw, json)
Hash identifier: m+ivipfpUohhge9I0/udiqJqdTQiRDGVVs2q863a6c4=
Subject key identifier: 25:AB:16:17:E7:6C:E0:88:0F:07:92:9D:96:6A:9C:A8:27:FE:2A:26
Certificate issuer: /CN=7a8746a76cda8369009d28941ef156239c6a63a1
Certificate serial: 0189978ED5E3FA006DCFFA1B9EA41CE8B438
Authority key identifier: 7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/JasWF-ds4IgPB5KdlmqcqCf-KiY.roa
Signing time: Thu 27 Jul 2023 13:34:27 +0000
ROA not before: Thu 27 Jul 2023 13:34:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5378
IP address blocks: 84.64.0.0/13 maxlen: 13
84.66.192.0/18 maxlen: 18
84.64.64.0/18 maxlen: 18
84.66.0.0/18 maxlen: 18
84.64.0.0/18 maxlen: 18
84.65.192.0/18 maxlen: 18
84.65.0.0/18 maxlen: 18
84.65.128.0/18 maxlen: 18
84.64.192.0/18 maxlen: 18
84.66.128.0/18 maxlen: 18
84.65.64.0/18 maxlen: 18
84.64.128.0/18 maxlen: 18
84.66.64.0/18 maxlen: 18
Validation: Failed, certificate revoked on Thu 27 Jul 2023 13:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:97:8e:d5:e3:fa:00:6d:cf:fa:1b:9e:a4:1c:e8:b4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8746a76cda8369009d28941ef156239c6a63a1
Validity
Not Before: Jul 27 13:34:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25ab1617e76ce0880f07929d966a9ca827fe2a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:3b:6f:aa:ed:d9:71:30:4a:ea:9f:e7:54:
bd:30:a2:59:4d:a4:ba:57:e5:be:fb:e5:6c:6e:4f:
79:1d:7c:a4:47:29:74:67:5b:f3:68:e0:07:96:9e:
e3:11:7f:79:7b:27:3a:7e:39:9b:a1:d0:07:58:49:
8a:c3:93:f4:c2:ca:a7:5d:9e:c3:18:58:e0:24:85:
95:7f:79:51:3e:e8:93:6e:10:a2:95:6a:46:af:1f:
6e:fb:ae:58:7c:fe:43:fd:20:d8:7a:d3:37:de:c2:
d0:93:34:5a:ae:66:13:78:9b:af:d7:fe:03:11:8d:
b7:9f:15:94:e7:99:29:2f:1e:e5:ae:b0:05:81:aa:
08:ed:99:42:37:8a:24:a3:80:5b:b4:89:4a:10:62:
a1:9a:7e:c0:e1:d3:d0:3e:b1:69:12:74:c4:75:8b:
32:5d:c2:74:52:33:e8:fe:e4:a0:c5:9f:01:06:01:
d8:36:de:5c:6b:cd:e8:c5:01:0c:fb:3d:61:92:6c:
e3:41:46:bb:52:e6:72:c1:fc:28:16:ef:6d:9e:a3:
86:99:4f:bf:eb:2b:bf:31:ab:63:2f:8c:60:d6:a7:
0a:19:14:b1:4c:0b:71:05:fc:6d:38:4f:82:ff:a5:
98:d1:b6:37:58:52:1c:59:2d:5c:4f:98:84:7e:ed:
d1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AB:16:17:E7:6C:E0:88:0F:07:92:9D:96:6A:9C:A8:27:FE:2A:26
X509v3 Authority Key Identifier:
keyid:7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/JasWF-ds4IgPB5KdlmqcqCf-KiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.64.0.0/13
Signature Algorithm: sha256WithRSAEncryption
8d:3b:ec:94:f9:67:d5:2c:56:b8:12:05:7e:cf:dd:df:6f:bf:
8f:88:6f:3a:6a:74:c6:d9:00:70:81:72:33:ee:04:b9:9b:72:
12:ac:80:66:42:c2:37:b5:b1:b1:02:fd:cd:b5:79:fe:94:59:
79:c7:72:23:9f:4c:9f:12:a7:e8:4a:b3:41:5a:c8:9a:0b:83:
8f:3e:2c:58:4d:f3:fa:30:ff:02:d3:a0:e4:30:55:17:18:24:
c2:80:12:cd:d3:02:cd:dd:37:e1:65:4a:bd:94:de:55:d1:ea:
e2:00:9b:30:25:f1:21:25:35:c2:78:79:17:96:03:dc:a9:d3:
75:a2:7b:b2:d3:14:d8:39:6b:04:80:34:ff:d6:4a:5e:b6:5b:
2d:46:33:c0:ac:a8:0c:a7:77:8c:e3:ee:81:0c:85:f5:9c:09:
cb:56:fb:db:1e:22:81:b9:90:35:35:d3:56:16:8a:15:9b:4b:
7f:d1:2f:ce:b6:c4:91:87:a2:c4:e1:6a:f5:de:58:1a:17:6a:
f6:77:ff:cb:5d:99:dd:9c:94:7d:1c:35:f3:a0:b3:97:25:47:
3c:66:0e:8c:b7:df:bf:1b:d9:5d:d8:2e:61:cb:07:06:2b:37:
8f:7b:30:c5:7b:9a:9f:62:c5:83:28:e4:40:b8:ee:c9:15:89:
61:93:78:b1
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYmXjtXj+gBtz/obnqQc6LQ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhODc0NmE3NmNkYTgzNjkwMDlkMjg5NDFlZjE1NjIzOWM2
YTYzYTEwHhcNMjMwNzI3MTMzNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWFiMTYxN2U3NmNlMDg4MGYwNzkyOWQ5NjZhOWNhODI3ZmUyYTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3k7b6rt2XEwSuqf51S9MKJZTaS6
V+W+++Vsbk95HXykRyl0Z1vzaOAHlp7jEX95eyc6fjmbodAHWEmKw5P0wsqnXZ7D
GFjgJIWVf3lRPuiTbhCilWpGrx9u+65YfP5D/SDYetM33sLQkzRarmYTeJuv1/4D
EY23nxWU55kpLx7lrrAFgaoI7ZlCN4oko4BbtIlKEGKhmn7A4dPQPrFpEnTEdYsy
XcJ0UjPo/uSgxZ8BBgHYNt5ca83oxQEM+z1hkmzjQUa7UuZywfwoFu9tnqOGmU+/
6yu/MatjL4xg1qcKGRSxTAtxBfxtOE+C/6WY0bY3WFIcWS1cT5iEfu3RWwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFCWrFhfnbOCIDweSnZZqnKgn/iomMB8GA1UdIwQY
MBaAFHqHRqds2oNpAJ0olB7xViOcamOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW9kR3AyemFnMmtBblNpVUh2RldJNXhxWTZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi85MTNlMTItZjVlZC00NmY0LTk4MmMt
NTJkZWRkZGVlMzkzLzEvSmFzV0YtZHM0SWdQQjVLZGxtcWNxQ2YtS2lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi85MTNlMTItZjVlZC00NmY0LTk4MmMtNTJkZWRkZGVlMzkz
LzEvZW9kR3AyemFnMmtBblNpVUh2RldJNXhxWTZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDVEAwDQYJ
KoZIhvcNAQELBQADggEBAI077JT5Z9UsVrgSBX7P3d9vv4+IbzpqdMbZAHCBcjPu
BLmbchKsgGZCwje1sbEC/c21ef6UWXnHciOfTJ8Sp+hKs0FayJoLg48+LFhN8/ow
/wLToOQwVRcYJMKAEs3TAs3dN+FlSr2U3lXR6uIAmzAl8SElNcJ4eReWA9yp03Wi
e7LTFNg5awSANP/WSl62Wy1GM8CsqAynd4zj7oEMhfWcCctW+9seIoG5kDU101YW
ihWbS3/RL862xJGHosThavXeWBoXavZ3/8tdmd2clH0cNfOgs5clRzxmDoy3378b
2V3YLmHLBwYrN497MMV7mp9ixYMo5EC47skViWGTeLE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:53 2024 by rpki-client on console-fra.rpki-client.org