Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/jLhf1HaTyi3syxMtPBo1A8y8EfY.roa
File: jLhf1HaTyi3syxMtPBo1A8y8EfY.roa (raw, json)
Hash identifier: NZJ4BMG0ARqui70IpDeUXYdJn6o+13D/EtDGiMMZPdc=
Subject key identifier: 8C:B8:5F:D4:76:93:CA:2D:EC:CB:13:2D:3C:1A:35:03:CC:BC:11:F6
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 0185E91B7BD277E6E2F55165CBBF3BE5052E
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/jLhf1HaTyi3syxMtPBo1A8y8EfY.roa
Signing time: Wed 25 Jan 2023 13:26:10 +0000
ROA not before: Wed 25 Jan 2023 13:26:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12557
IP address blocks: 185.117.180.0/22 maxlen: 22
2a03:52a0:172::/48 maxlen: 48
2a03:52a0::/32 maxlen: 32
2a03:52a0:180::/48 maxlen: 48
2a03:52a0:181::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e9:1b:7b:d2:77:e6:e2:f5:51:65:cb:bf:3b:e5:05:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Jan 25 13:26:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cb85fd47693ca2deccb132d3c1a3503ccbc11f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f2:01:3f:94:0d:cc:89:26:0e:a3:71:8d:34:
7c:64:da:a3:ad:62:c5:f1:f2:7c:27:c6:e5:f2:5c:
88:3d:ce:ac:ac:52:e8:69:f0:fa:96:c7:b4:bc:8f:
ba:27:8b:cb:6b:45:f2:2b:59:bd:d6:bd:55:82:a8:
ef:e8:fe:58:91:fa:25:44:d2:d9:1a:c0:e5:1b:55:
17:cf:1a:ea:b9:a3:27:82:11:af:19:4c:e2:79:bb:
56:79:a2:1b:d8:34:f8:08:bc:1c:0f:64:f7:3f:11:
b0:a9:07:b4:29:1d:69:71:76:67:44:c7:a6:a2:ce:
11:a4:72:42:4b:89:43:b1:fa:92:1a:4c:da:ba:34:
f5:41:45:14:0a:04:ba:53:bf:53:a9:47:b2:ce:6a:
8e:ad:d8:e2:c0:d2:57:7e:6b:80:15:48:8b:2d:fe:
fc:93:a6:f6:89:da:27:04:86:a8:90:32:3e:00:a7:
7b:40:74:e8:fb:05:82:b5:46:ba:87:29:fa:c0:b9:
78:1a:18:de:59:26:60:7e:b4:fc:49:82:ee:da:d1:
a6:fb:8f:39:c6:8b:4c:86:8b:0c:23:2c:05:52:b3:
0a:bf:eb:a6:70:c7:5e:9f:44:77:9a:0d:bc:0d:1f:
67:8b:80:aa:87:eb:d3:b3:e7:cf:b7:50:65:ca:57:
da:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B8:5F:D4:76:93:CA:2D:EC:CB:13:2D:3C:1A:35:03:CC:BC:11:F6
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/jLhf1HaTyi3syxMtPBo1A8y8EfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.180.0/22
IPv6:
2a03:52a0::/32
Signature Algorithm: sha256WithRSAEncryption
11:78:8f:7f:5b:6d:a9:80:bf:6f:d7:6e:37:76:d3:2f:5f:7e:
56:7d:0d:8a:bb:82:b6:61:23:6e:fc:be:74:f9:f8:c4:1b:de:
54:75:d2:a3:0c:9b:92:44:c3:f1:ca:99:78:b7:85:58:47:ac:
2d:4f:57:4f:0c:25:67:be:08:5c:c0:29:16:92:1b:53:7f:cf:
88:0f:84:ad:36:85:bf:3d:c8:66:0a:d4:a1:4a:37:42:56:bf:
5c:bb:6f:aa:0d:f9:d2:e1:34:09:e8:c4:f5:42:9b:5e:6b:03:
e0:c4:ed:97:62:70:42:90:b1:9c:fe:45:0e:16:14:81:d1:cf:
b4:ac:e8:67:66:e6:dc:fe:db:04:f3:5e:09:3e:bd:17:f2:9d:
8b:33:3a:7b:75:94:64:72:8f:b4:a2:29:12:b6:a8:1e:f6:ac:
16:5f:da:44:c2:99:98:4d:db:76:a7:80:58:bd:62:2d:1f:23:
91:f9:d1:4d:9d:1f:b7:d5:7b:c6:3a:20:8f:7c:a2:88:ff:bc:
a0:7a:76:52:a9:e4:18:c4:0a:90:00:6d:dc:66:cc:3d:38:23:
37:b4:33:9d:49:b2:5a:4b:ce:4a:df:75:f3:5f:f9:9a:41:08:
d1:a5:1e:66:13:57:7b:ee:c0:8c:42:ac:3e:2d:49:2a:5e:a2:
ea:87:ac:3f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYXpG3vSd+bi9VFly7875QUuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGM2ODVlZmE2YTJjMTA0NTYzN2YwMjdhMzI1YzBhZWM3
OWMwMTUwHhcNMjMwMTI1MTMyNjEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2I4NWZkNDc2OTNjYTJkZWNjYjEzMmQzYzFhMzUwM2NjYmMxMWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/IBP5QNzIkmDqNxjTR8ZNqjrWLF
8fJ8J8bl8lyIPc6srFLoafD6lse0vI+6J4vLa0XyK1m91r1Vgqjv6P5YkfolRNLZ
GsDlG1UXzxrquaMnghGvGUziebtWeaIb2DT4CLwcD2T3PxGwqQe0KR1pcXZnRMem
os4RpHJCS4lDsfqSGkzaujT1QUUUCgS6U79TqUeyzmqOrdjiwNJXfmuAFUiLLf78
k6b2idonBIaokDI+AKd7QHTo+wWCtUa6hyn6wLl4GhjeWSZgfrT8SYLu2tGm+485
xotMhosMIywFUrMKv+umcMden0R3mg28DR9ni4Cqh+vTs+fPt1BlylfapQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIy4X9R2k8ot7MsTLTwaNQPMvBH2MB8GA1UdIwQY
MBaAFLpMaF76aiwQRWN/AnoyXArsecAVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80Mjg3MmEtNTYxNy00ZWMyLWFiOGQt
Yzg2MDQ3MjA2NDJkLzEvakxoZjFIYVR5aTNzeXhNdFBCbzFBOHk4RWZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS80Mjg3MmEtNTYxNy00ZWMyLWFiOGQtYzg2MDQ3MjA2NDJk
LzEvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXW0MA0E
AgACMAcDBQAqA1KgMA0GCSqGSIb3DQEBCwUAA4IBAQAReI9/W22pgL9v1243dtMv
X35WfQ2Ku4K2YSNu/L50+fjEG95UddKjDJuSRMPxypl4t4VYR6wtT1dPDCVnvghc
wCkWkhtTf8+ID4StNoW/PchmCtShSjdCVr9cu2+qDfnS4TQJ6MT1QpteawPgxO2X
YnBCkLGc/kUOFhSB0c+0rOhnZubc/tsE814JPr0X8p2LMzp7dZRkco+0oikStqge
9qwWX9pEwpmYTdt2p4BYvWItHyOR+dFNnR+31XvGOiCPfKKI/7ygenZSqeQYxAqQ
AG3cZsw9OCM3tDOdSbJaS85K33XzX/maQQjRpR5mE1d77sCMQqw+LUkqXqLqh6w/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:51 2024 by rpki-client on console-fra.rpki-client.org