Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/JERCQUdSmDKlXUyWTM3vQtxuBao.roa
File: JERCQUdSmDKlXUyWTM3vQtxuBao.roa (raw, json)
Hash identifier: anJwF7ddf0MdA5+VJvvg2UD5Ygl2QTxsxLPhFq0B1g0=
Subject key identifier: 24:44:42:41:47:52:98:32:A5:5D:4C:96:4C:CD:EF:42:DC:6E:05:AA
Certificate issuer: /CN=d0113dd5d0759c03009380140c668ebbd1f9c168
Certificate serial: 018B797B756B9096B05EC761CEFAFF50F47D
Authority key identifier: D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/JERCQUdSmDKlXUyWTM3vQtxuBao.roa
Signing time: Sun 29 Oct 2023 03:30:15 +0000
ROA not before: Sun 29 Oct 2023 03:30:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209916
IP address blocks: 193.39.79.0/24 maxlen: 24
2a0e:8a80::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:79:7b:75:6b:90:96:b0:5e:c7:61:ce:fa:ff:50:f4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0113dd5d0759c03009380140c668ebbd1f9c168
Validity
Not Before: Oct 29 03:30:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2444424147529832a55d4c964ccdef42dc6e05aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9b:5c:c3:cf:92:c5:61:05:db:7c:1e:a1:53:
20:59:f3:db:92:65:7e:3e:73:8e:13:0e:07:24:b2:
c3:ba:4f:a2:c6:7f:7e:28:38:b5:46:d1:39:cb:2c:
01:15:aa:4a:2d:cb:5b:ff:5c:5d:61:15:11:4c:1b:
ec:3e:2b:d5:70:03:d5:49:65:ee:64:dc:1f:5f:a1:
7b:f1:2d:a5:83:72:c1:70:6c:1a:de:81:b3:30:9f:
a7:98:01:d4:4c:45:0c:a2:b8:28:34:6a:65:b6:02:
3b:9b:7d:c5:b9:80:de:e3:ce:43:b9:46:6a:45:f9:
af:38:d9:52:6e:97:2f:e1:a1:c7:4f:64:0c:e8:ee:
27:29:b6:2f:b0:fd:e4:af:8d:94:44:32:60:bb:79:
2a:78:7c:24:51:56:a3:ac:43:3e:0d:22:67:29:a2:
25:f2:3a:29:75:5f:dd:ed:6d:83:9c:18:7f:35:28:
28:f1:45:be:eb:38:f4:c9:07:1b:a9:44:4f:d6:26:
b8:24:36:3f:2d:2f:5f:96:23:98:c3:95:de:70:01:
77:d1:a6:b8:5e:dd:55:1a:04:90:04:62:b1:cf:88:
e7:df:c5:f8:32:f7:9e:2d:f7:55:9d:36:c0:f0:0d:
91:83:0c:17:c0:ed:8c:d8:51:67:b3:5f:83:58:0b:
3d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:44:42:41:47:52:98:32:A5:5D:4C:96:4C:CD:EF:42:DC:6E:05:AA
X509v3 Authority Key Identifier:
keyid:D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/JERCQUdSmDKlXUyWTM3vQtxuBao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.79.0/24
IPv6:
2a0e:8a80::/29
Signature Algorithm: sha256WithRSAEncryption
55:bd:81:2d:2c:87:54:72:42:8c:68:e2:24:ae:cd:95:97:0f:
9f:c2:33:6a:f2:d0:1c:7d:e5:d0:fa:78:99:aa:cf:fe:d6:a7:
91:86:31:4a:a9:70:f8:1d:e8:f8:a1:6f:ec:08:72:45:fe:fe:
0b:88:bc:fb:ec:6e:56:84:c8:41:2a:57:13:26:10:fe:a0:de:
da:87:45:db:5f:ec:5b:19:a9:7a:6c:72:fe:5c:a5:51:65:34:
97:68:5a:0f:10:7f:dd:75:30:6d:32:01:ac:bf:92:a8:b9:35:
e8:34:2b:13:af:ab:f9:98:2a:6d:da:63:00:80:a0:19:2d:c6:
0f:e5:9c:4a:2e:6b:aa:b5:03:18:3e:06:e8:56:3d:3a:1e:4c:
a1:95:77:ea:42:9f:31:06:88:fa:b6:34:54:3b:c7:40:58:0b:
58:24:5b:26:c5:c3:8d:0d:ac:e0:80:35:d2:c7:4f:76:bf:0c:
8f:ad:7a:93:9b:1b:42:22:d5:26:e0:48:80:3e:21:b5:1f:f1:
b1:12:8c:37:74:31:d7:47:d4:54:02:54:67:2d:b1:54:c9:f2:
66:ae:ec:99:af:f3:3e:24:f6:1c:aa:72:d9:59:47:20:cb:12:
94:fe:60:54:ee:87:4f:b6:87:07:d6:ea:ac:3a:50:e3:83:4a:
3b:0d:bf:4b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYt5e3VrkJawXsdhzvr/UPR9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMTEzZGQ1ZDA3NTljMDMwMDkzODAxNDBjNjY4ZWJiZDFm
OWMxNjgwHhcNMjMxMDI5MDMzMDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDQ0NDI0MTQ3NTI5ODMyYTU1ZDRjOTY0Y2NkZWY0MmRjNmUwNWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZtcw8+SxWEF23weoVMgWfPbkmV+
PnOOEw4HJLLDuk+ixn9+KDi1RtE5yywBFapKLctb/1xdYRURTBvsPivVcAPVSWXu
ZNwfX6F78S2lg3LBcGwa3oGzMJ+nmAHUTEUMorgoNGpltgI7m33FuYDe485DuUZq
RfmvONlSbpcv4aHHT2QM6O4nKbYvsP3kr42URDJgu3kqeHwkUVajrEM+DSJnKaIl
8jopdV/d7W2DnBh/NSgo8UW+6zj0yQcbqURP1ia4JDY/LS9fliOYw5XecAF30aa4
Xt1VGgSQBGKxz4jn38X4MveeLfdVnTbA8A2RgwwXwO2M2FFns1+DWAs9xwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCREQkFHUpgypV1MlkzN70LcbgWqMB8GA1UdIwQY
MBaAFNARPdXQdZwDAJOAFAxmjrvR+cFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEJFOTFkQjFuQU1BazRBVURHYU91OUg1d1dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS82OTE0Y2UtNjZjMi00MjM4LTkyYjct
YTJkNjM2ZjMyNWU2LzEvSkVSQ1FVZFNtREtsWFV5V1RNM3ZRdHh1QmFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS82OTE0Y2UtNjZjMi00MjM4LTkyYjctYTJkNjM2ZjMyNWU2
LzEvMEJFOTFkQjFuQU1BazRBVURHYU91OUg1d1dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwSdPMA0E
AgACMAcDBQMqDoqAMA0GCSqGSIb3DQEBCwUAA4IBAQBVvYEtLIdUckKMaOIkrs2V
lw+fwjNq8tAcfeXQ+niZqs/+1qeRhjFKqXD4Hej4oW/sCHJF/v4LiLz77G5WhMhB
KlcTJhD+oN7ah0XbX+xbGal6bHL+XKVRZTSXaFoPEH/ddTBtMgGsv5KouTXoNCsT
r6v5mCpt2mMAgKAZLcYP5ZxKLmuqtQMYPgboVj06HkyhlXfqQp8xBoj6tjRUO8dA
WAtYJFsmxcONDazggDXSx092vwyPrXqTmxtCItUm4EiAPiG1H/GxEow3dDHXR9RU
AlRnLbFUyfJmruyZr/M+JPYcqnLZWUcgyxKU/mBU7odPtocH1uqsOlDjg0o7Db9L
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-fra.rpki-client.org