Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/JLRGsLIuBUQ4UXf-cAOu1dS90zo.roa
File: JLRGsLIuBUQ4UXf-cAOu1dS90zo.roa (raw, json)
Hash identifier: 8zQXvH2d/vdyxcFvGugGkF4/W0BHqWzgIQDgWS8csgA=
Subject key identifier: 24:B4:46:B0:B2:2E:05:44:38:51:77:FE:70:03:AE:D5:D4:BD:D3:3A
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 01856E6676794A32F90AE1E88E085D355A7F
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/JLRGsLIuBUQ4UXf-cAOu1dS90zo.roa
Signing time: Sun 01 Jan 2023 17:34:46 +0000
ROA not before: Sun 01 Jan 2023 17:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206244
IP address blocks: 213.169.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jan 2023 14:20:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:66:76:79:4a:32:f9:0a:e1:e8:8e:08:5d:35:5a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 17:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24b446b0b22e0544385177fe7003aed5d4bdd33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:e1:92:f9:9d:b5:0e:d2:63:ee:d5:81:54:
b8:45:f9:e3:bb:1e:e6:79:7c:ab:c3:cb:af:05:da:
a0:a2:1b:65:c2:9a:13:06:ac:cb:78:8a:ab:61:76:
90:eb:03:d7:94:e1:dc:35:c1:d3:36:6e:58:55:8d:
68:b4:b5:f9:af:ec:f7:ec:d9:40:a8:46:e9:0c:6b:
e1:7d:ae:a6:d1:fb:7c:f7:ed:76:0c:c7:2f:9e:0c:
ad:36:48:6b:2a:a0:25:4d:fd:19:56:38:5d:04:14:
4b:94:6a:8d:6a:b9:55:29:4e:aa:da:59:e4:0d:3c:
16:84:0b:70:7c:f6:d7:d4:33:d1:47:69:2f:f5:d5:
3b:be:3d:26:ed:cb:4c:c5:97:c6:bd:27:d4:e6:cc:
98:91:af:51:04:65:4c:37:c3:b9:5c:70:99:f2:ed:
0f:d4:07:8f:f7:ce:77:4e:b3:7d:8f:6d:4d:76:71:
e8:42:6c:4c:65:45:76:b8:a2:f2:46:8d:49:23:0b:
03:a6:e2:dd:ff:cf:c4:49:f9:69:95:94:c5:26:d6:
a0:db:55:09:c2:d1:82:92:04:e1:db:0e:65:87:04:
8c:8c:d6:a7:9a:aa:d6:01:c9:b1:a0:c5:05:45:d0:
1c:20:c5:58:5d:93:9c:2e:6e:65:ef:1b:3b:b1:9a:
65:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B4:46:B0:B2:2E:05:44:38:51:77:FE:70:03:AE:D5:D4:BD:D3:3A
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/JLRGsLIuBUQ4UXf-cAOu1dS90zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.157.0/24
Signature Algorithm: sha256WithRSAEncryption
32:0f:2d:f3:22:f3:0c:28:4f:b4:39:3b:de:7d:1c:40:2d:83:
16:95:37:9c:1b:1d:8b:e9:f3:0b:b5:eb:e8:26:6b:13:3c:1b:
06:ae:8f:0d:65:5c:b5:f8:3b:be:6f:ff:6e:af:eb:5a:81:d1:
39:01:d2:4a:2c:f3:75:bf:fc:55:51:20:0a:9d:b1:eb:6c:26:
ef:2e:8f:99:b1:e9:87:74:dd:8b:76:7d:b4:54:20:24:29:72:
81:a4:b7:cc:40:cd:27:55:c3:65:d0:96:9a:34:15:58:32:64:
5b:6a:ce:6b:9e:ce:e6:1e:53:2c:ff:af:b0:40:32:20:45:e6:
8f:7c:f9:4f:ad:2f:2e:f5:68:92:f5:b4:5d:12:bf:ae:dd:a5:
94:fa:9e:f3:77:18:45:a7:6c:bd:0e:e8:a8:e3:7a:dd:9c:13:
06:54:f7:f1:ab:1e:a0:17:a8:94:60:bd:48:d1:49:0f:8d:d7:
29:2a:ad:58:bd:94:6c:97:ed:7f:c5:89:82:4b:3a:77:86:56:
56:ba:f4:c0:9c:f0:6c:15:43:c4:16:97:e7:dc:b7:a6:fb:16:
29:6e:77:9b:68:30:04:41:6e:25:2f:97:3f:fa:9e:46:b1:ed:
7d:2f:44:e0:a6:49:0f:95:0a:f8:e0:2b:cd:ad:a5:3c:80:fe:
9d:69:eb:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuZnZ5SjL5CuHojghdNVp/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNDQyOTdlOTI3MWM2ZWRmMDY0OTE1ZjYxODBhZTEyNjkw
ZGRhOGIwHhcNMjMwMTAxMTczNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGI0NDZiMGIyMmUwNTQ0Mzg1MTc3ZmU3MDAzYWVkNWQ0YmRkMzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntnhkvmdtQ7SY+7VgVS4Rfnjux7m
eXyrw8uvBdqgohtlwpoTBqzLeIqrYXaQ6wPXlOHcNcHTNm5YVY1otLX5r+z37NlA
qEbpDGvhfa6m0ft89+12DMcvngytNkhrKqAlTf0ZVjhdBBRLlGqNarlVKU6q2lnk
DTwWhAtwfPbX1DPRR2kv9dU7vj0m7ctMxZfGvSfU5syYka9RBGVMN8O5XHCZ8u0P
1AeP9853TrN9j21NdnHoQmxMZUV2uKLyRo1JIwsDpuLd/8/ESflplZTFJtag21UJ
wtGCkgTh2w5lhwSMjNanmqrWAcmxoMUFRdAcIMVYXZOcLm5l7xs7sZplrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCS0RrCyLgVEOFF3/nADrtXUvdM6MB8GA1UdIwQY
MBaAFPxEKX6Sccbt8GSRX2GArhJpDdqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUt
YWUwN2YzMmU0MTAyLzEvSkxSR3NMSXVCVVE0VVhmLWNBT3UxZFM5MHpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUtYWUwN2YzMmU0MTAy
LzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1amdMA0G
CSqGSIb3DQEBCwUAA4IBAQAyDy3zIvMMKE+0OTvefRxALYMWlTecGx2L6fMLtevo
JmsTPBsGro8NZVy1+Du+b/9ur+tagdE5AdJKLPN1v/xVUSAKnbHrbCbvLo+ZsemH
dN2Ldn20VCAkKXKBpLfMQM0nVcNl0JaaNBVYMmRbas5rns7mHlMs/6+wQDIgReaP
fPlPrS8u9WiS9bRdEr+u3aWU+p7zdxhFp2y9Duio43rdnBMGVPfxqx6gF6iUYL1I
0UkPjdcpKq1YvZRsl+1/xYmCSzp3hlZWuvTAnPBsFUPEFpfn3Lem+xYpbnebaDAE
QW4lL5c/+p5Gse19L0TgpkkPlQr44CvNraU8gP6daete
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:54 2024 by rpki-client on console-ams.rpki-client.org